Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/8577cd10-c934-3ec6-b7c3-bb1ee20ee45a.roa
File:                     8577cd10-c934-3ec6-b7c3-bb1ee20ee45a.roa (raw, json)
Hash identifier:          dcrwlwDJEOLjPP4lMneHgEXzvnjeFzBxD/Qj6HZEfi4=
Subject key identifier:   C7:E1:D5:8C:25:C4:54:7F:B4:70:73:74:3F:56:CA:7B:DD:E5:A2:D8
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F432858484D75874BF5B7CC2FDC3C63C0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/8577cd10-c934-3ec6-b7c3-bb1ee20ee45a.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     11260
IP address blocks:        24.142.0.0/19 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:87:4b:f5:b7:cc:2f:dc:3c:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=c6380353-1ead-44af-a7fe-ca61f9551468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:b6:fa:fd:24:2b:28:12:32:e9:fb:5f:55:
                    bc:0f:0f:ca:25:0a:b0:e1:af:29:d1:89:54:b2:0b:
                    f2:99:4c:4a:2a:45:a6:f3:78:06:b8:91:ba:87:31:
                    fd:7d:af:ee:a4:29:7d:69:ef:11:a5:c4:da:da:28:
                    ea:bc:eb:aa:16:8a:d0:0f:99:ab:5e:35:06:96:a9:
                    36:e0:14:9e:fe:e1:a9:93:b9:1d:fe:e2:0f:ce:01:
                    99:40:f8:d2:97:b4:80:a3:e4:80:de:ac:2d:e0:b4:
                    7b:e0:64:0d:ca:c5:8b:49:91:22:c0:81:28:ba:68:
                    2a:d5:77:b4:7f:a0:06:8b:24:7d:5d:69:a0:bc:10:
                    f5:36:1e:f8:e9:3c:e1:f8:96:f1:db:a7:dc:d8:4f:
                    13:a8:18:08:24:f4:66:bc:5d:82:23:2c:97:1e:80:
                    04:4b:78:c6:60:32:4c:1e:29:09:de:e1:e2:91:59:
                    01:a8:47:9c:8f:fc:72:00:39:77:76:1a:47:a6:8c:
                    09:9c:1f:b6:0b:2a:74:97:2c:96:cb:ef:87:5b:22:
                    1a:8a:6f:40:c8:84:a8:25:b6:8a:6c:d5:2f:d4:8e:
                    c6:ba:6d:1e:04:4f:9c:02:c7:be:5a:ba:38:5c:43:
                    24:47:63:50:df:26:9c:78:f3:ab:c6:25:db:37:6c:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:D5:8C:25:C4:54:7F:B4:70:73:74:3F:56:CA:7B:DD:E5:A2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/8577cd10-c934-3ec6-b7c3-bb1ee20ee45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.142.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:87:cc:06:81:b2:50:f9:f8:a3:68:58:06:33:79:bf:5d:df:
         36:ae:63:64:94:c4:56:fb:51:1f:69:3e:a9:95:3f:71:e2:7d:
         f5:ff:e2:5d:db:71:cc:3d:ee:ac:6b:a1:c4:61:00:c6:18:48:
         d2:56:17:48:46:cc:86:34:92:ad:d7:3a:4d:23:39:3d:65:4e:
         79:7a:39:d2:b5:6b:77:37:b8:b6:2b:ea:bc:88:50:b1:d8:e4:
         bb:7d:f6:c8:a2:71:7b:22:a8:65:36:80:25:e6:cc:86:b0:ec:
         5b:64:93:34:56:93:11:80:ac:a4:a8:87:4f:4e:ae:31:89:2d:
         30:cb:21:94:9d:f8:58:73:8d:2e:1c:21:e3:05:10:74:fc:27:
         d1:2e:fe:f7:9b:a6:9f:96:bd:ba:90:f3:8c:ef:dc:f4:43:58:
         c0:7b:bd:5d:53:55:80:4f:f1:3a:0d:6f:5c:25:f9:e6:2e:20:
         3c:e3:15:c3:1c:5f:5c:93:62:7b:72:73:31:05:59:93:6c:74:
         5c:42:0a:a7:7e:e3:10:e5:f0:42:6e:38:11:ef:4d:fe:0a:17:
         30:7c:05:0d:02:14:8c:dd:59:7d:3f:91:3a:2e:70:64:83:81:
         0d:96:e3:25:58:d5:90:ed:37:15:d2:32:50:93:66:73:a2:28:
         00:d5:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:44 2025 by rpki-client