Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa
File:                     2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa (raw, json)
Hash identifier:          ukqX6cafciMMeb6glRsCnCrrh81GXi+Nb8CQ175+fSY=
Subject key identifier:   F8:DF:E4:3B:FB:07:02:C7:BA:CD:AE:A8:A0:B4:F0:71:41:FC:A6:86
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F584F71DFA830E238FD86520
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        69.58.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f7:1d:fa:83:0e:23:8f:d8:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=da818fa8-5c44-4e5e-90e7-dad8e1aab531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:6e:4c:dd:2e:05:28:d9:32:ee:eb:7f:67:
                    79:fa:d4:cc:6e:10:93:76:cb:63:cc:63:48:63:a9:
                    a0:b3:1f:59:2f:df:c8:8c:25:5a:c7:bb:49:6e:ca:
                    57:15:c8:46:6e:cd:4e:20:f1:53:68:7c:23:64:c0:
                    12:6d:59:ed:af:af:2d:92:df:98:e4:65:75:57:fd:
                    b1:bb:ba:3f:40:94:f0:38:d0:75:ba:18:ec:7f:96:
                    34:39:67:ef:1f:19:d0:ba:23:16:5d:9e:ae:54:d5:
                    85:c7:f0:ec:a0:4c:6e:50:32:5e:3a:2f:10:b2:a4:
                    1c:d7:6b:35:99:38:b3:64:68:cc:5c:90:8e:ba:ef:
                    af:70:28:aa:4a:3b:b1:88:d8:d1:05:e8:52:d5:15:
                    d5:74:1e:4f:4b:e9:59:5d:e3:98:13:63:3a:ab:0b:
                    bd:65:22:b2:20:c7:43:9b:9a:51:ea:3d:28:86:f2:
                    d0:ec:8b:a9:58:f1:29:a9:c5:92:0e:5c:f9:7d:23:
                    65:05:67:00:8a:61:8b:64:8b:12:36:fa:48:bd:e2:
                    8f:55:fd:99:89:9b:97:f9:46:87:c7:9f:6d:ba:c9:
                    a0:fd:fe:bd:54:65:10:93:60:47:9c:df:49:b3:88:
                    1f:7a:06:f4:56:ab:71:58:2f:79:e1:a2:70:e0:12:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:E4:3B:FB:07:02:C7:BA:CD:AE:A8:A0:B4:F0:71:41:FC:A6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:06:56:57:0a:a3:33:41:a0:bf:87:28:7d:ad:11:5a:60:57:
         01:cd:dc:7a:71:a9:aa:c4:0b:37:ea:e6:c1:3e:dc:87:69:cb:
         22:5d:3b:b0:65:d0:d9:96:09:f5:87:2d:3e:76:69:7f:1c:c9:
         3b:12:4d:ff:b2:43:61:e2:b3:76:32:db:76:24:49:33:b7:c4:
         a3:e4:0e:9d:a8:40:76:0b:46:f7:95:1d:90:18:37:68:a1:96:
         eb:56:d8:d8:62:b1:9d:c2:18:6f:8e:19:31:00:ad:66:58:5e:
         fd:7b:b9:c3:3e:79:93:d7:81:b4:91:2d:de:0c:61:4d:7c:80:
         37:47:62:8a:db:d1:bb:17:10:36:0a:3a:42:f2:92:4f:c3:f9:
         d3:7b:36:68:0d:f0:ce:e8:11:76:f6:bb:f5:7e:f4:24:e6:a2:
         0b:f2:50:0a:c2:cd:5b:9f:e9:e2:06:21:76:8f:b8:00:e5:b4:
         c0:88:0b:42:5f:db:f2:8e:11:5f:6c:94:af:62:b0:b4:92:3e:
         0d:a9:6e:5e:cc:44:d8:17:d2:e2:a6:56:57:b5:46:47:99:52:
         54:50:5e:18:b8:4a:a5:8c:59:5a:b8:e6:90:e3:6f:07:b7:58:
         c8:9a:71:6a:ab:ff:c7:f3:93:f1:4b:11:9b:10:43:12:0a:c8:
         4c:b9:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:21:51 2025 by rpki-client