Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7c541232-f9bf-31a7-938c-fd61c70d5047.roa
File:                     7c541232-f9bf-31a7-938c-fd61c70d5047.roa (raw, json)
Hash identifier:          1JCFp3663jwgc8ZSyIFES6HMk4O/3uuDCCsMOUi4Bf8=
Subject key identifier:   89:2B:F1:D8:65:B9:CC:11:C1:DC:9C:BE:E9:95:17:4F:1A:1E:A5:81
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285848222FDCEF0F3A3B90E331BD80
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7c541232-f9bf-31a7-938c-fd61c70d5047.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     11260
IP address blocks:        24.138.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:dc:ef:0f:3a:3b:90:e3:31:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=e7754a27-dcc5-4ca3-bfcb-1a10b0e99584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:ac:9f:bb:33:3b:f0:bb:fd:09:39:03:fd:
                    62:9e:52:06:ab:e5:62:36:ec:b5:4b:3a:33:25:bc:
                    c8:39:ae:59:2f:ae:98:1b:cd:c0:8b:a5:6e:f6:d0:
                    1f:23:c4:fe:de:89:c9:65:59:f9:63:05:56:6c:95:
                    28:62:f1:2f:f2:33:5e:ef:d7:d9:2f:ba:47:b4:86:
                    3f:3f:94:86:36:48:b9:2a:a1:38:f6:83:2a:c2:14:
                    76:f3:6d:f9:2e:73:e4:dd:a6:79:23:c8:43:2b:aa:
                    b1:42:a9:78:36:6b:ae:5d:a8:bb:59:cd:79:c1:33:
                    37:ee:35:c3:69:fc:8f:bb:41:aa:f4:5f:f8:7d:da:
                    52:37:b6:66:56:73:1d:0a:22:79:86:11:51:ae:ff:
                    81:30:f7:92:b1:68:23:52:38:7c:b8:7c:89:09:5c:
                    0f:3b:11:fc:6f:54:49:78:4f:6c:a5:4f:d0:e5:96:
                    5d:3f:5e:57:64:df:6d:05:5f:2b:ef:8b:aa:7b:15:
                    00:94:f0:02:56:49:41:3e:51:40:c5:d0:f7:b7:9c:
                    b8:95:77:d8:44:9e:4d:3a:a4:18:37:32:19:19:a7:
                    02:88:a9:bc:93:b3:2c:b4:3c:0d:79:f2:b0:0f:a2:
                    69:c1:39:f2:25:4c:4b:a1:cf:42:c7:3a:63:8b:ce:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2B:F1:D8:65:B9:CC:11:C1:DC:9C:BE:E9:95:17:4F:1A:1E:A5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7c541232-f9bf-31a7-938c-fd61c70d5047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.138.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1c:78:00:2a:0e:13:79:75:a6:44:26:48:49:a0:11:3f:74:
         10:fc:72:b0:6f:82:12:37:06:08:10:c3:11:4e:55:af:32:76:
         02:f6:51:ec:4b:09:f9:1c:8e:0b:14:90:40:c4:8d:32:a4:6b:
         94:f9:7a:3c:21:f7:4a:06:02:d4:00:af:73:71:15:cf:1c:be:
         99:80:a5:4e:43:0a:ea:e5:e3:f4:d7:2a:77:79:e5:0d:14:4c:
         5d:10:12:b8:40:35:3e:e4:48:34:1d:18:e6:b8:4b:b2:84:14:
         b8:98:0f:d5:61:f3:61:18:ce:1e:ce:09:74:8f:7d:09:1c:10:
         24:b4:56:e3:7e:72:1d:7e:1f:ba:82:39:bd:5b:d4:75:db:dc:
         21:73:20:8b:8d:1d:f4:6a:a6:17:28:68:08:2d:56:2e:cd:a1:
         06:ab:84:b3:7b:2a:22:59:df:59:2d:00:63:eb:41:32:b5:98:
         ac:32:0d:39:ff:ba:09:03:5c:16:53:ed:0a:ad:9a:b1:5a:8c:
         a7:e1:11:d3:a9:c5:18:dd:1a:74:d0:47:06:05:36:20:18:2b:
         d8:23:a1:0d:3b:ac:14:f5:4d:06:9a:2b:e4:4d:4f:11:74:df:
         31:64:8a:a7:3c:72:fe:1a:f9:15:91:6b:10:10:25:d6:ee:a3:
         c1:cb:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:30 2025 by rpki-client