Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f8bdfd62-bbbf-3257-a971-20c74bc408a3.roa
File:                     f8bdfd62-bbbf-3257-a971-20c74bc408a3.roa (raw, json)
Hash identifier:          CAxqZn7SKHwdSMyoiDr91/vhnlr9U8UPh2Pe8QcUI3I=
Subject key identifier:   87:D7:CB:68:F1:26:4B:6D:AA:F7:32:AC:65:91:CF:35:BF:93:D3:E8
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848159FD56DA2A1BFB47179EFC0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f8bdfd62-bbbf-3257-a971-20c74bc408a3.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     29890
IP address blocks:        69.74.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:d5:6d:a2:a1:bf:b4:71:79:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=2a3bffda-9563-4861-b5f9-fc5ce15713ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:70:b6:1b:0f:15:d3:c3:49:0d:13:25:76:
                    05:0b:63:e6:9b:ad:ae:1e:fa:53:6c:e8:44:94:bf:
                    42:c0:2e:f7:b3:7b:99:b3:3f:7d:c1:31:ec:48:a0:
                    53:3b:e9:bd:7c:d6:d2:b5:74:28:58:e1:06:63:39:
                    76:4d:99:f2:4f:64:b1:ce:fd:94:32:2a:dc:09:8e:
                    c4:f6:0e:44:e6:45:19:b6:eb:e5:38:81:79:ba:a7:
                    51:fd:27:2e:a5:ef:d4:36:93:c1:3a:c8:09:f6:9e:
                    d3:5e:b3:1c:bf:a1:13:b3:77:f1:4f:34:21:07:fa:
                    44:06:f6:92:ff:d0:99:96:c3:30:d2:5d:91:f9:36:
                    b4:33:b6:15:4e:4b:01:85:6a:d4:7f:92:cc:1a:25:
                    54:0a:fe:a2:ba:20:41:4a:46:0c:e9:2d:f0:71:35:
                    52:60:be:aa:5b:e4:09:6d:bc:47:cf:23:20:b6:08:
                    c6:0b:4a:22:ab:5a:dc:11:0a:97:f8:eb:ca:2f:51:
                    d4:c6:0d:d6:5e:a3:81:34:87:c3:98:72:b9:a3:8d:
                    46:c6:8f:89:3b:4a:7c:78:5f:f9:32:f7:72:c5:c1:
                    fb:59:a4:13:64:71:54:14:e5:4b:5e:c4:81:87:81:
                    44:ee:ba:3f:5a:b4:15:9e:31:9a:e5:39:61:9c:61:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:CB:68:F1:26:4B:6D:AA:F7:32:AC:65:91:CF:35:BF:93:D3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f8bdfd62-bbbf-3257-a971-20c74bc408a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:b1:5e:07:34:3a:d1:ce:81:0c:c8:d9:72:e6:59:75:54:
         6a:e9:11:bf:d9:8a:cc:89:50:d6:1f:5b:03:2b:43:f0:77:19:
         02:bb:63:36:61:72:6c:a3:b4:d3:52:73:25:f4:26:a0:9b:66:
         54:cc:d1:63:a0:b3:24:0c:dd:cc:e1:23:fd:54:89:c6:6e:0a:
         c7:90:7e:7b:e3:78:92:cf:50:95:fa:16:c6:c4:cc:c3:47:c7:
         b7:60:7d:bd:c7:91:c2:81:90:4d:2f:dd:0b:14:07:07:5d:6f:
         7f:b9:fd:ed:c9:cb:69:87:fe:99:88:8b:71:c0:e9:df:71:79:
         61:a0:33:66:c7:4c:26:0c:c7:35:b4:94:b6:e6:44:13:2e:2e:
         29:c0:f8:6e:8d:59:0a:3c:7d:2f:dc:0b:87:a2:29:0e:fc:ef:
         8c:7e:10:1c:be:16:20:05:2a:a1:30:a9:52:75:bf:2a:09:53:
         ec:99:d3:21:28:97:b3:8a:1e:c6:db:c6:47:13:2d:09:53:4c:
         e9:95:b6:2d:d6:2a:db:00:3f:8a:53:74:08:27:c1:75:e4:6c:
         f3:91:c9:5e:28:a7:12:69:fc:f4:3c:d8:0b:16:fd:d7:9f:6a:
         0a:3e:a1:e4:2e:31:9a:08:6d:16:d4:30:49:58:24:d6:69:c3:
         f5:7b:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:52:05 2025 by rpki-client