Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/18297b24-e566-36e1-ab0c-bfcd0a54413e.roa
File:                     18297b24-e566-36e1-ab0c-bfcd0a54413e.roa (raw, json)
Hash identifier:          Sx8PzgKFrN+8yzTMbUhvo/RCFmioY4NvaVWYR3QDr9o=
Subject key identifier:   0F:1E:27:77:6D:13:00:DD:BC:99:A7:40:A0:9E:A9:37:ED:0C:A0:48
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F43285848494568B6D9FE0E2287E72108
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/18297b24-e566-36e1-ab0c-bfcd0a54413e.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     40676
IP address blocks:        192.101.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:68:b6:d9:fe:0e:22:87:e7:21:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=b10c459b-3f93-45c1-b177-dda8bbb1f567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:be:75:62:d2:65:2c:62:1b:23:6f:e6:ec:
                    dd:8d:ca:7f:fc:bd:97:4b:19:5e:d6:50:80:e7:75:
                    67:6d:52:d7:c2:3a:0e:68:73:86:50:73:1f:94:56:
                    81:60:b6:16:54:d3:ec:f5:85:07:ce:52:59:e8:1b:
                    0a:9c:82:b0:0c:e5:e2:a9:93:5b:38:09:2a:b1:a9:
                    6a:e1:7a:be:35:2d:69:b7:0f:3c:10:83:90:48:c2:
                    78:65:51:62:4d:a8:e4:98:a1:fe:00:a9:f7:cc:e7:
                    b0:3e:c6:85:b6:ab:7b:d6:7a:9c:b8:05:41:ad:2c:
                    ce:ae:d0:b4:d8:52:89:ed:e8:f7:94:22:ab:c4:45:
                    ae:99:bc:cd:6d:42:33:35:c1:1c:a3:cf:65:e8:20:
                    3f:1c:79:c7:e2:1b:2c:ed:a7:88:5b:28:96:69:db:
                    c7:46:55:49:fe:85:41:a0:68:5a:74:f0:3b:c3:42:
                    21:70:e2:8f:0f:5a:77:d1:cc:72:30:12:11:a8:e7:
                    ea:88:99:91:8f:a4:dc:32:b4:ec:93:5c:38:e1:57:
                    5c:21:41:74:08:38:46:e1:ec:c1:64:ab:2e:28:cf:
                    3d:3a:fe:3d:b6:4c:03:ad:7e:d7:05:49:23:b5:9c:
                    a3:a5:93:2f:ef:a6:c6:f2:54:db:9c:77:09:29:6e:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:27:77:6D:13:00:DD:BC:99:A7:40:A0:9E:A9:37:ED:0C:A0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/18297b24-e566-36e1-ab0c-bfcd0a54413e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:b1:9d:61:43:95:83:46:07:29:30:0b:f6:9e:8e:09:4f:
         fd:2b:bb:77:2f:bf:4b:88:b7:51:de:be:45:d2:a8:69:d7:92:
         fc:7d:3e:1a:e5:a6:8f:8d:6b:d3:33:bb:af:53:a1:67:84:af:
         9c:df:76:d9:9a:6c:5b:9e:3b:21:58:9d:b3:0c:91:fe:bd:f1:
         5b:a4:39:52:a8:56:a6:80:78:b0:45:b1:d1:81:bd:96:f8:24:
         7b:b8:63:bd:72:00:06:19:48:06:35:44:a8:2e:f5:30:0e:2e:
         87:a3:a2:b7:44:03:7d:cd:12:b9:1e:1b:e4:e5:f1:31:8d:0b:
         06:85:6e:e9:06:63:53:ee:62:19:92:a5:a4:c4:05:a0:dd:30:
         83:17:13:cc:4e:0d:52:5d:11:00:04:34:3b:df:24:01:42:fc:
         7e:62:18:b6:b1:fb:76:0d:78:e3:51:c7:82:7c:4c:be:bd:f9:
         de:8e:27:5d:ed:df:c8:64:5c:e2:61:9e:f1:94:9c:b1:f1:5b:
         f3:cd:c3:6e:12:48:9f:ec:ed:4a:7e:06:d5:e4:af:a5:9c:93:
         93:a4:45:e3:1d:ca:b5:58:c6:66:91:60:88:ba:d2:1d:ed:fa:
         bd:cc:c8:ab:2b:c5:04:72:a2:7c:d7:9e:01:11:7f:7e:69:cb:
         a7:7b:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:35 2025 by rpki-client