Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/60a9825f-d716-3d74-b06c-c29bfb268709.roa
File:                     60a9825f-d716-3d74-b06c-c29bfb268709.roa (raw, json)
Hash identifier:          iEptN52Lwuq8VrX9Do23TFjh9PPfL2m1USNEE6GGPuM=
Subject key identifier:   DF:69:86:07:1E:49:8B:F1:2B:2D:FE:FD:10:A4:F0:FF:9E:2A:F2:27
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F43285848547033B2EC7A42ADAFD472C0
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/60a9825f-d716-3d74-b06c-c29bfb268709.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     1706
IP address blocks:        206.207.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:33:b2:ec:7a:42:ad:af:d4:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=35a8f285-462c-4d25-9a03-c1d540c17f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:eb:b6:0b:ba:99:fe:00:3b:60:6c:f4:0b:
                    49:90:ac:1f:ed:60:f7:e8:ff:06:05:53:38:41:72:
                    a1:f1:d7:25:d1:1b:48:70:e2:1a:96:27:2e:64:fb:
                    9a:83:cb:02:9c:41:d5:49:81:c7:2b:aa:bf:3f:b9:
                    4b:8b:1c:94:ac:55:f9:99:06:7f:c0:a4:df:2c:aa:
                    35:0e:85:e1:9c:04:26:8a:0d:bd:5a:a8:57:fb:d4:
                    1a:a3:13:33:5c:fb:2e:10:88:33:b3:76:25:cf:e0:
                    7e:6f:3b:b6:75:b8:63:f5:f7:19:0b:db:76:9c:3d:
                    ea:a2:11:1d:6c:de:15:61:05:23:bf:b7:39:b9:76:
                    6a:54:0d:92:9f:26:c9:5d:da:35:9d:bc:4f:50:32:
                    82:2e:ee:e2:56:54:51:86:2b:61:64:27:6d:50:38:
                    df:ef:19:2a:90:a2:9b:b5:cd:99:26:c3:28:74:53:
                    ba:18:72:0c:bd:93:bf:69:78:16:26:14:87:db:9d:
                    99:e1:62:87:26:90:f9:87:75:c0:32:db:37:3b:bc:
                    3f:36:5d:f6:9c:73:07:e8:20:8e:df:49:fc:70:b7:
                    10:b8:0b:33:87:c0:b5:bf:7c:38:d8:1e:5b:68:81:
                    ea:7a:66:f4:a5:54:f6:0c:3f:b6:ea:aa:b5:49:28:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:69:86:07:1E:49:8B:F1:2B:2D:FE:FD:10:A4:F0:FF:9E:2A:F2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/60a9825f-d716-3d74-b06c-c29bfb268709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.207.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:97:a5:03:88:fd:b1:a8:84:40:ba:d9:04:67:91:88:b1:60:
         bd:95:d3:c4:8f:73:5b:0f:40:38:1c:56:d4:00:61:e5:47:d5:
         b9:34:77:2b:04:92:28:0e:ef:ae:68:58:0f:07:bf:f8:14:a3:
         80:49:9f:38:4a:96:4a:40:9e:cd:2b:29:5d:7a:0e:e3:5a:29:
         0a:32:bf:f0:46:80:43:d9:5a:dc:fe:2a:3e:6c:55:07:ef:59:
         83:a1:2f:8c:2a:19:63:fc:47:4c:5a:9a:d0:df:52:09:9b:08:
         57:3d:ae:54:fe:00:a1:9e:2e:35:2d:a9:01:94:39:23:ab:5b:
         30:04:6e:c0:db:f3:5d:ff:4c:7e:ef:61:61:b2:15:27:1b:e4:
         da:e1:ac:2a:c4:4d:20:63:dd:03:79:6c:34:d3:17:87:b5:c7:
         e4:ed:47:d4:00:6e:ef:cf:aa:14:7a:fe:c7:1a:4b:79:ae:96:
         86:da:3e:08:98:9e:a2:a9:2e:c8:c8:55:aa:5b:85:b8:2f:57:
         29:de:23:f5:a0:ae:88:ab:c3:fb:4f:1e:dd:48:3d:cb:88:d6:
         84:75:dc:90:83:b7:90:8e:7d:15:de:a8:38:65:96:0f:8b:18:
         5a:6c:b7:3a:78:5c:57:11:c9:ee:38:3d:67:40:dd:d0:12:90:
         d0:a2:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----