Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa
File:                     f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa (raw, json)
Hash identifier:          z9MdWWmpW3qd3DQCVrTl1WZrvOypXKKs0OporkRNldo=
Subject key identifier:   41:16:90:04:50:C7:E8:BE:FE:06:F9:0B:23:9E:A0:C7:0B:D0:DF:32
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858482D5A88B37CBDD32CF692A000
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     19720
IP address blocks:        65.51.28.0/22 maxlen: 24
                          69.74.21.0/24 maxlen: 24
                          69.74.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:88:b3:7c:bd:d3:2c:f6:92:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=fe83264f-9045-4a2b-84e6-5a2439af3943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:31:45:9a:ce:cd:55:c9:fc:9e:38:94:de:
                    0d:17:7a:32:a8:35:46:aa:c2:bb:aa:14:f2:82:3d:
                    2b:cf:b2:aa:56:55:c6:45:bb:0e:e2:00:79:bd:be:
                    b1:bc:d8:c3:08:c6:5f:ca:96:7a:c5:46:14:60:a4:
                    35:7d:8f:ae:05:6c:f1:8f:2d:05:0f:4e:69:5e:04:
                    5f:2b:8d:8e:88:96:88:51:b8:fc:73:f4:0c:81:dd:
                    7a:2a:5f:57:75:fb:5c:9e:f8:40:62:35:50:86:65:
                    5d:0b:51:c3:8a:8d:99:cf:cc:b7:da:9f:7d:27:7c:
                    0a:43:e4:9b:76:b1:25:21:b7:fc:df:8b:ee:cd:58:
                    d1:85:2f:22:1a:6c:28:ca:fa:a4:23:68:03:4a:37:
                    38:a9:dd:7a:6e:0c:1c:16:3a:45:7f:72:0c:f2:09:
                    ba:6e:47:85:c5:aa:da:c6:14:70:d0:de:c4:f5:5a:
                    06:e0:73:45:4a:95:f3:0a:4c:c9:8c:e8:ee:1b:b2:
                    ee:13:fa:30:c1:72:ad:01:5c:f6:8c:44:7d:cf:90:
                    52:eb:b2:e7:1b:d5:83:e8:39:36:3e:46:a2:87:e8:
                    be:f0:c1:86:38:2f:cb:12:59:c6:d7:0c:d8:0f:c5:
                    25:2a:d6:a0:2f:b1:66:1c:15:17:79:3e:ca:9b:f1:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:16:90:04:50:C7:E8:BE:FE:06:F9:0B:23:9E:A0:C7:0B:D0:DF:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.28.0/22
                  69.74.21.0/24
                  69.74.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:9c:8a:45:22:3c:c3:f8:57:92:dd:46:69:b7:40:39:25:da:
         41:70:b5:3f:12:78:62:b2:d0:76:b5:f6:1e:0c:1f:3f:67:4d:
         94:37:b8:78:95:ec:71:41:da:a3:29:98:cf:76:c4:9e:e0:d7:
         a6:1d:e6:af:f6:1e:d5:0c:97:e2:11:55:20:90:36:36:d9:98:
         c9:fa:32:78:4c:43:fd:bd:a4:04:65:f4:ed:d4:5d:c2:c7:cd:
         47:37:a6:ce:2f:78:aa:e6:bd:be:dc:8e:68:bd:4d:24:e9:fb:
         a1:bb:9d:29:38:e5:0a:6c:7e:7b:19:b6:af:57:41:26:4b:fa:
         a3:6b:cb:04:70:e7:d2:61:84:1c:ee:a3:b3:51:a3:ef:16:5c:
         a4:c0:29:e3:1c:5a:71:33:ff:04:1e:a9:88:d6:91:f3:12:27:
         db:82:6e:4f:b6:c8:64:eb:d3:8c:8b:83:5f:1a:6d:3a:c0:84:
         b7:cc:47:14:04:36:cf:3f:aa:80:4c:74:c8:e1:63:97:0d:85:
         09:f6:08:b0:38:15:74:11:15:24:20:89:56:e5:f4:b5:f0:25:
         7e:f1:bd:f0:83:72:2b:d5:84:4c:18:08:b1:6f:6f:a2:88:6e:
         b0:65:73:3d:01:cf:64:c8:c0:2c:cc:9b:57:38:61:ec:da:5e:
         93:e1:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:32 2025 by rpki-client