Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecb360ba-095f-37ab-a90d-337c5aab8f32.roa
File:                     ecb360ba-095f-37ab-a90d-337c5aab8f32.roa (raw, json)
Hash identifier:          WBH//R3dg7ORH24/Xewpo7YnCFD5hDuSNjGwQ7SRK9Q=
Subject key identifier:   A5:AC:7F:54:AE:51:38:40:D9:84:42:F1:4E:73:D7:11:EF:36:0A:7A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B235891E4281702A897B0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecb360ba-095f-37ab-a90d-337c5aab8f32.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     11404
IP address blocks:        69.36.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:23:58:91:e4:28:17:02:a8:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=0a67eda4-262a-4527-83ff-56aadf49135c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:d6:f0:24:f2:87:5c:25:cd:d5:76:06:22:
                    d3:f2:95:ac:3f:d2:6b:37:a2:d9:2d:7f:51:43:0f:
                    f9:64:f8:37:13:56:ac:e6:61:04:d2:47:a8:57:87:
                    ae:03:8b:90:88:46:82:77:7a:0c:fa:0b:bf:b4:e4:
                    d4:69:09:f7:c4:02:ef:04:5c:5c:b4:d7:9a:3b:ec:
                    d8:7c:a8:90:c0:e9:15:e0:04:db:6e:ec:7a:93:e5:
                    0a:b7:5a:3e:a9:79:37:a2:45:75:dc:92:35:88:fd:
                    e3:58:2d:8b:58:e5:be:a6:d3:d2:63:41:8f:7b:64:
                    71:7b:49:36:a4:2f:0b:20:c3:97:e5:13:db:12:d5:
                    41:3d:eb:6b:f3:73:82:bb:35:a8:a6:0a:8a:7a:63:
                    ca:d8:b2:ab:71:9a:b7:21:be:81:0a:3f:d7:41:2b:
                    b3:16:86:e5:81:bb:d4:de:3c:05:68:a6:22:05:33:
                    ce:bc:85:00:2d:3c:99:da:5b:d2:fa:3f:82:d7:24:
                    d4:84:f9:d4:87:78:9f:2e:97:47:0e:cf:d5:20:d8:
                    0c:b0:77:97:b4:b8:fd:39:ef:f0:b2:9a:dd:11:8f:
                    bb:28:e4:8a:65:41:b7:28:b8:c7:e5:a3:62:64:59:
                    b1:a5:16:89:4d:29:47:92:85:8e:58:36:20:a3:b6:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AC:7F:54:AE:51:38:40:D9:84:42:F1:4E:73:D7:11:EF:36:0A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecb360ba-095f-37ab-a90d-337c5aab8f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:ca:39:19:1c:f6:c9:ad:4f:35:ae:28:95:da:93:2e:ed:
         bc:7f:22:ed:fb:8f:15:fe:ee:cf:90:ba:fa:a8:13:a6:6c:b8:
         34:5d:9f:4c:5c:03:a3:95:24:fd:04:a3:20:79:86:96:8b:35:
         e8:3b:35:d5:4a:9d:42:ee:0a:74:1a:f8:99:e2:e5:b0:8a:53:
         cb:2f:82:b1:62:74:13:b6:a0:41:3d:62:2c:32:26:60:2e:d2:
         05:35:f9:87:41:55:60:77:35:c5:7f:57:c5:a7:cd:b8:ae:b8:
         8a:26:bd:e3:b8:5e:7b:c5:c3:ba:b2:c7:e8:d6:6c:fe:42:62:
         56:9d:33:0b:2f:5c:98:27:73:10:1b:f7:eb:e9:ef:24:f3:e9:
         96:dc:6f:6a:70:6b:15:3c:b4:2d:7b:1d:2c:49:36:12:b1:57:
         87:89:66:98:b9:79:19:30:d4:a6:67:19:c0:14:da:84:20:d5:
         b2:c2:f4:a0:26:ec:5c:31:5b:2a:69:04:9a:3a:36:77:4d:66:
         87:88:2c:b9:26:db:81:9b:6b:68:44:6b:71:5f:d7:1c:2d:71:
         62:6a:4d:ec:bb:2b:d5:55:3d:91:12:97:0a:07:db:44:52:22:
         76:04:34:6d:32:5a:a1:fc:dc:39:e0:44:66:05:d0:c8:ee:be:
         85:3a:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:06 2025 by rpki-client