Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/52f7a9be-4a13-3aa2-b2d2-e00808902899.roa
File:                     52f7a9be-4a13-3aa2-b2d2-e00808902899.roa (raw, json)
Hash identifier:          +LOOTT3zxP64UPweDuPyq61LehHxq6gi2GThvwQe2vs=
Subject key identifier:   D7:1A:72:A8:80:6B:32:C5:C7:D4:55:B4:5A:6D:E3:87:77:86:EF:CA
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584873F647B7BD788AF18EC95400
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/52f7a9be-4a13-3aa2-b2d2-e00808902899.roa
Signing time:             Mon 06 Jan 2025 09:01:04 +0000
ROA not before:           Mon 06 Jan 2025 09:01:04 +0000
ROA not after:            Sun 06 Apr 2025 08:01:04 +0000
asID:                     27385
IP address blocks:        69.67.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:f6:47:b7:bd:78:8a:f1:8e:c9:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jan  6 09:01:04 2025 GMT
            Not After : Apr  6 08:01:04 2025 GMT
        Subject: CN=35395566-5b51-4c3e-b4a3-4f5377861d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:85:d4:a8:0d:5d:94:e9:85:3f:37:bb:d5:a1:
                    6f:7f:fa:8c:77:b4:dd:5a:7c:5a:bd:60:8c:65:82:
                    76:5f:cf:e9:b1:c4:a8:9f:6b:0e:18:e8:a8:8e:a8:
                    82:28:9e:f8:7d:f1:7d:2c:e7:4d:da:73:9b:bd:ef:
                    81:9f:39:a8:42:29:fd:90:87:33:4f:83:aa:8f:a8:
                    83:96:a7:92:ba:7f:f3:fd:69:7c:c5:c7:4f:cd:70:
                    e2:6b:c2:ee:c4:ef:aa:65:4f:2c:7a:f1:b9:80:32:
                    9f:a0:dc:d6:8b:d2:a6:fb:84:bc:fe:b5:21:e6:b9:
                    df:9a:e6:bc:39:ea:3b:d9:80:63:3d:3f:8e:18:1e:
                    8c:83:0a:fd:de:ac:fa:b9:f5:91:06:11:70:e2:64:
                    e0:c7:dc:2c:57:0e:d5:5e:bb:8f:f2:a0:1d:46:66:
                    59:42:73:54:08:6b:ed:41:e3:a5:02:42:69:21:bf:
                    53:a2:19:b2:0f:bc:e6:cd:ca:af:98:3a:94:8a:6a:
                    01:f9:a5:25:f6:26:b0:fc:30:a6:82:ca:4a:32:da:
                    60:ab:94:d2:c2:fa:90:05:4f:89:46:65:ae:10:f1:
                    9d:ae:5e:b2:70:21:46:ba:ab:61:1d:25:00:d3:d2:
                    9a:45:fc:46:f2:b0:03:05:07:17:29:47:68:ac:28:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:72:A8:80:6B:32:C5:C7:D4:55:B4:5A:6D:E3:87:77:86:EF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/52f7a9be-4a13-3aa2-b2d2-e00808902899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:13:24:40:6f:bc:af:3b:17:d6:b8:ac:6f:a7:53:e2:ac:
         75:b6:a3:f4:34:49:5a:4b:ed:0e:a0:44:3f:0b:be:eb:63:34:
         4e:c2:57:8f:9c:d3:7c:87:15:97:58:9a:8f:78:0c:17:02:9b:
         4f:52:15:b9:fc:34:47:07:b5:9c:57:cd:f0:16:be:cb:54:34:
         f7:44:86:01:08:5a:3c:54:d9:2f:da:3c:c4:27:5f:03:3b:9b:
         bc:f0:c6:3e:c5:40:21:3b:67:bd:92:09:6b:00:e6:02:06:dc:
         7e:08:ac:85:c3:0a:e6:36:11:b8:73:2b:96:8e:18:56:23:02:
         b8:9d:c3:74:b5:15:82:72:98:88:bf:d7:64:a0:5d:1b:d8:36:
         d5:b7:1e:dd:95:ef:b3:19:86:4f:34:ff:13:e5:03:b4:5b:0d:
         a8:d4:2e:77:ef:eb:f7:8a:4c:0b:b4:3a:0c:03:c1:cc:b5:e7:
         9a:80:87:f8:cf:c2:8f:5f:dd:b6:54:bc:cd:d0:78:8a:5f:20:
         75:36:20:32:2e:92:2f:f7:69:74:b1:00:b7:6c:95:57:7e:d4:
         aa:10:07:3c:92:d4:02:d3:5c:86:0d:ff:7b:05:dc:ca:e0:f7:
         e4:2f:3d:9b:c6:a9:54:11:3b:9c:ca:07:75:64:68:79:5e:4d:
         95:28:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:46:04 2025 by rpki-client