Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa
File:                     a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa (raw, json)
Hash identifier:          hHyzAUGq4ANjVQ+Opru8G4I25noLW0swNRSrJ2WeNB0=
Subject key identifier:   24:72:9E:49:53:DF:D9:56:C2:E8:7F:A5:33:80:E8:14:EB:8A:81:4A
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F43285848100A827B52E77AB67E4EFC80
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        69.187.64.0/24 maxlen: 24
                          69.187.69.0/24 maxlen: 24
                          69.187.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:82:7b:52:e7:7a:b6:7e:4e:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=adcc8da7-78a1-443f-b816-83cac05e3f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:76:90:09:d8:1f:34:45:27:05:bd:c4:b1:
                    c8:44:a8:39:b2:d8:87:0c:b3:d7:8b:54:43:25:21:
                    bf:3f:e0:5d:f7:8d:1e:fe:4b:7b:5c:71:ee:10:3c:
                    26:5e:9e:92:d0:4e:b6:e4:e6:af:eb:cc:66:cf:ef:
                    4f:7d:96:0c:70:94:d0:a9:3a:f6:69:85:ea:fc:d4:
                    8d:82:1b:9f:4b:2b:23:b5:92:71:62:6d:e9:a5:22:
                    dc:d5:b9:4f:a2:bb:b3:3b:1c:2f:74:dd:52:2a:65:
                    bc:8b:3d:3f:60:73:9d:0d:4b:14:91:12:4d:0c:f4:
                    92:f6:f0:4f:6d:0a:1e:f7:3b:a9:33:37:6f:c0:17:
                    84:94:30:fd:ec:f7:b2:e7:02:cb:2c:e7:ce:e8:82:
                    b0:86:8a:74:d2:4a:a9:2f:af:e7:51:c7:cd:d0:8c:
                    69:68:85:8e:d2:20:8b:04:22:39:0b:1b:2b:23:fd:
                    27:d9:b4:4c:ea:fb:10:6c:05:b5:92:c6:d2:f4:e0:
                    c0:1e:db:38:16:2c:c7:4f:03:95:f8:3c:6e:e7:40:
                    e7:b4:a9:96:69:4c:7b:31:c8:e1:fd:ad:74:dc:bc:
                    d0:d9:ad:06:31:d3:73:3e:43:95:48:3d:af:44:15:
                    9a:5e:20:94:8e:c9:01:f9:54:90:e4:7f:2f:e4:6a:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:72:9E:49:53:DF:D9:56:C2:E8:7F:A5:33:80:E8:14:EB:8A:81:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a89bbc22-ed97-3d60-bfe4-2cf19b1fe51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.187.64.0/24
                  69.187.69.0/24
                  69.187.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fc:05:b7:7d:b1:be:0a:76:49:d2:81:85:10:4b:d6:66:8e:
         30:64:00:8b:6f:d5:a1:bc:02:79:fc:af:b4:ee:b6:bb:53:34:
         11:aa:36:d6:d3:e2:46:df:c8:4d:37:70:7d:0a:43:a7:5e:af:
         9a:ea:85:0e:c4:7d:16:08:6d:71:93:af:60:9a:6b:0e:db:d8:
         0d:89:cd:dc:8d:3c:52:fa:2b:bc:44:e8:95:d3:64:96:cc:b7:
         6b:cb:e6:3c:bd:ca:c4:fd:e9:86:d1:7c:45:31:87:83:87:f6:
         92:3b:e2:98:9e:49:aa:94:f7:a2:f8:e9:a3:a9:f9:4f:d2:7b:
         2c:0f:d7:fc:2f:9e:da:f4:9c:da:10:d0:c0:94:d1:e6:99:c8:
         4d:96:df:84:53:d9:1f:e4:5a:3d:39:1c:cd:f8:c2:f8:dd:7c:
         b2:3b:55:9f:de:1f:6f:f1:54:42:45:d6:24:11:1f:e6:80:5f:
         0f:66:08:c5:c0:02:59:5d:26:ec:1f:91:b6:c5:db:b9:e0:48:
         e7:89:46:67:da:c5:3a:db:19:de:6e:e3:3d:64:14:69:aa:41:
         b0:c4:7c:f0:40:1f:15:86:d9:4a:86:74:1e:a6:71:c7:b8:8a:
         25:3d:c3:d7:88:1b:67:05:95:5d:03:c0:21:e5:3f:57:88:e2:
         e3:8a:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:03 2025 by rpki-client