Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/eecbbea1-be43-3ac2-acbe-dc6887412034.roa
File:                     eecbbea1-be43-3ac2-acbe-dc6887412034.roa (raw, json)
Hash identifier:          enxarABm51RIeiSYmOqeGi/HsjNs8Ka8tFJb35tybsg=
Subject key identifier:   A3:9D:AF:2B:BF:84:56:A6:27:AD:98:D8:78:D1:89:89:04:20:EC:EC
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584819CFDA9B291CFA44ECF02580
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/eecbbea1-be43-3ac2-acbe-dc6887412034.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        69.64.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:da:9b:29:1c:fa:44:ec:f0:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=fc3afbef-bcf9-45d9-92e8-72e8b97f2d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:37:49:fb:ef:87:94:88:17:8d:04:29:ab:
                    03:78:46:78:16:d4:26:93:0c:15:3e:37:c6:4c:fe:
                    ef:6a:49:b2:a5:75:c4:a9:35:0e:82:34:66:8d:6a:
                    20:97:05:7d:96:44:f6:3a:f1:36:5b:b1:5e:56:00:
                    b5:f7:ca:d7:dd:bf:f1:e3:54:f6:7b:11:50:25:4a:
                    c2:fd:c2:fa:42:a0:a2:d5:1c:b3:51:90:52:7f:b3:
                    d5:3e:1e:ee:e3:7c:15:6f:f8:81:82:95:be:5a:f3:
                    38:d1:db:1a:e6:83:4c:8d:da:33:a2:c1:75:76:6c:
                    fa:93:f4:20:99:3a:77:cd:46:56:22:d7:3f:09:63:
                    fa:dd:81:c4:ba:90:dd:b2:7d:48:db:58:48:96:0d:
                    d7:5e:09:bd:26:05:5f:37:4f:85:5a:5c:fe:3e:f7:
                    52:70:fe:15:37:2e:ef:cb:99:32:7f:23:22:68:49:
                    be:d9:ef:74:b7:f2:9d:ac:70:78:fe:7f:49:6f:17:
                    aa:41:50:33:4a:36:a0:62:a6:73:42:e3:13:ce:af:
                    e7:47:24:c6:5f:61:75:58:bb:87:0f:db:e8:56:b6:
                    5f:c9:14:39:2a:16:35:a4:75:75:c0:0a:19:91:2e:
                    1b:42:68:f4:eb:1c:13:80:8e:5a:ba:44:ac:ee:3d:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9D:AF:2B:BF:84:56:A6:27:AD:98:D8:78:D1:89:89:04:20:EC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/eecbbea1-be43-3ac2-acbe-dc6887412034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:13:26:a5:d3:82:b7:42:b6:55:8a:74:d3:00:06:9f:74:
         19:2c:aa:74:c1:07:ab:16:47:10:1e:c6:a4:19:86:df:72:c9:
         51:a8:64:13:81:92:2b:38:48:88:88:2f:39:3c:51:91:38:9e:
         98:21:e2:2f:44:81:18:d8:f1:ab:49:be:3e:18:d5:c4:5d:a9:
         3a:e1:20:84:99:b3:dd:25:d0:1e:f3:91:e7:dc:9c:1f:29:0b:
         b3:f9:ed:c0:0b:79:c2:40:42:27:4d:ae:01:68:b2:62:95:36:
         54:34:c7:bc:90:a6:1a:09:ed:57:71:2f:aa:3c:71:3e:36:c0:
         01:58:3c:97:d3:40:3c:a7:1e:38:24:5b:ba:98:93:5b:8b:e4:
         6f:a3:a4:46:4b:81:66:bc:b6:de:d8:1e:6c:5d:ee:7b:5f:46:
         b7:99:7c:04:47:e1:20:d7:f4:3c:08:fb:ab:49:42:ab:29:f8:
         62:26:dc:ef:3a:ca:d9:bd:43:7b:d0:1c:f7:41:96:66:c0:87:
         a7:bf:9b:91:99:d9:01:c1:65:53:cb:a9:62:e0:ab:c0:d2:ee:
         f1:f6:61:1b:94:0d:4b:ae:7d:67:29:4b:43:e7:54:f2:ea:da:
         cb:d2:0a:36:20:2b:f2:35:4c:52:4a:c2:79:6e:a3:71:ea:50:
         33:74:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:40 2025 by rpki-client