Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa
File:                     384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa (raw, json)
Hash identifier:          JlkheecVulkBLIGMuQEZCz5Hyl1Zp9q9lOzO//ZqwHc=
Subject key identifier:   6A:43:EC:99:E5:78:85:68:0E:0B:67:1C:98:00:78:6C:DB:44:13:9D
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A6E4BBB41498A16DB6680
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     53508
IP address blocks:        69.50.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:6e:4b:bb:41:49:8a:16:db:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=ee923151-3253-4c91-a3e2-ed5073b03933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:ee:d3:88:11:71:da:a5:8f:88:2c:c6:f8:
                    3b:4c:d0:f3:09:fd:a8:49:7a:73:a5:9c:b2:ae:55:
                    54:03:5d:0c:9b:8f:4f:72:c6:b4:1f:c4:0e:93:22:
                    26:ff:15:d7:8b:b1:f5:be:90:e0:b9:61:71:b0:a3:
                    ad:f5:27:58:42:2f:bd:0b:ae:b4:ec:84:82:62:ca:
                    2d:1e:aa:66:9a:b3:b9:1e:5b:4b:2d:c2:d6:ba:1c:
                    af:7f:87:02:08:8e:bf:12:a6:b0:3f:18:8a:fe:e4:
                    b1:5d:25:c8:57:da:8f:be:74:6e:91:3c:0a:5f:4e:
                    6d:de:e4:cf:c8:f6:cc:fd:47:f6:c7:a0:36:7e:96:
                    ab:69:be:8b:d2:16:cb:58:76:cb:5a:a1:e1:85:01:
                    34:9b:05:41:95:ff:d6:15:d4:84:1a:39:a3:c4:f8:
                    7d:27:37:5b:b6:39:b9:6c:46:29:56:a7:58:9d:e2:
                    3a:05:94:e1:1b:e8:b6:a1:d4:28:01:e4:11:db:b7:
                    b4:4d:b7:68:bf:72:63:88:ff:89:51:ff:19:6b:b3:
                    7a:46:30:5a:bc:c3:88:06:00:13:e3:0a:4e:a7:bf:
                    af:db:aa:7f:8c:d2:b4:a2:2f:1e:ff:3a:c2:70:98:
                    64:00:82:e4:e4:ad:cc:d0:52:d9:25:51:1a:ae:b3:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:EC:99:E5:78:85:68:0E:0B:67:1C:98:00:78:6C:DB:44:13:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:d7:72:3a:d6:b4:a5:df:dc:dc:dd:ff:74:e9:ac:df:ce:
         c9:01:28:58:df:36:48:5b:01:04:65:55:ca:1b:ed:6e:9b:23:
         d4:3f:d8:b8:86:5f:d7:fa:dd:32:f1:0e:90:ec:1f:57:6a:d6:
         1e:7d:15:ed:55:a7:22:1a:07:f0:1b:06:13:db:8f:5c:9c:1d:
         ae:40:3d:c3:05:2f:71:bd:3d:e9:92:23:3f:c5:0c:18:71:1a:
         c6:f5:36:cc:ab:b0:79:19:1c:38:77:56:3a:46:9f:e1:38:11:
         43:82:66:69:57:57:86:8c:06:47:33:92:6f:51:45:2d:4e:bf:
         f4:0d:32:55:c4:27:20:13:fe:83:d9:11:9f:e9:b8:ae:4a:b3:
         11:40:79:c5:11:e8:38:7a:4a:24:cb:4f:2c:4e:11:f7:dc:fe:
         41:42:e1:21:52:f3:23:36:bc:ed:59:58:f1:7c:22:93:b3:b7:
         de:48:f9:aa:68:dc:18:34:f2:89:23:61:68:da:97:ee:58:5e:
         f7:2e:be:fd:4f:13:f0:9c:81:63:d3:2d:7c:91:c4:67:c4:11:
         ec:18:d2:e9:63:fd:3c:0c:a1:b2:9c:85:da:d6:67:bd:06:9b:
         07:ad:2c:14:e5:e3:9d:1f:ab:67:e0:15:a3:f5:50:18:fe:46:
         cc:81:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:41:41 2025 by rpki-client