Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/265fce87-f900-311a-a11c-397d86ecb0a8.roa
File:                     265fce87-f900-311a-a11c-397d86ecb0a8.roa (raw, json)
Hash identifier:          hf14JOze1+n/+xLihxonWqamCPxQMG9gVCEfJ2YyX3Y=
Subject key identifier:   20:04:F0:40:0B:CE:9F:75:1C:EB:FF:BE:86:B5:39:B0:04:42:47:E1
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F432858482EC009A900111A7ED024F980
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/265fce87-f900-311a-a11c-397d86ecb0a8.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     31898
IP address blocks:        69.4.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:09:a9:00:11:1a:7e:d0:24:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=5a74909e-9d9c-4432-a912-bbda93e0864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:05:88:fa:12:4b:b2:fd:96:a2:22:61:8f:
                    79:8f:6e:bf:3c:e2:cc:6c:00:8e:e7:32:51:fe:90:
                    50:ca:ec:9d:17:84:aa:d0:1b:2d:bf:0a:0b:50:c1:
                    5a:df:bf:9f:7d:3f:ef:39:9b:c0:f6:b3:9d:c5:60:
                    8b:a6:d1:d4:f6:72:b6:90:5a:cf:be:af:9b:22:0f:
                    0b:55:8f:5d:e6:f5:76:a7:20:27:73:53:a4:6c:a2:
                    f2:37:cc:d6:bb:a3:98:9f:d3:ef:c3:15:f8:ed:61:
                    91:1d:6d:b4:7b:d1:af:28:e9:fb:66:67:4e:39:74:
                    65:0a:7d:4c:23:44:a0:5d:fe:a5:21:5c:47:da:0e:
                    0f:3d:55:fe:07:33:01:d6:a8:a3:d4:af:24:21:1d:
                    a5:b7:6d:48:86:97:05:c4:77:3d:78:8a:cc:31:e2:
                    ba:b3:01:64:9e:75:2a:6e:ed:f1:3f:77:ef:bb:0d:
                    30:1d:95:a5:fe:ae:83:91:4b:94:16:99:8b:8e:81:
                    32:15:0f:aa:aa:73:d7:1e:d1:2e:80:16:18:ba:2e:
                    17:4b:ec:49:56:93:6c:9c:1e:28:6a:bb:67:c4:a7:
                    3f:3c:f3:b3:4f:8e:a8:60:ac:0c:ec:28:24:ba:91:
                    cc:54:21:66:07:02:bc:e5:c9:4d:04:09:5e:fc:53:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:F0:40:0B:CE:9F:75:1C:EB:FF:BE:86:B5:39:B0:04:42:47:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/265fce87-f900-311a-a11c-397d86ecb0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:00:05:d9:3a:02:e0:b6:86:e4:82:e7:36:4e:1c:28:7b:5d:
         1d:4b:47:ed:98:e4:ba:4f:2a:69:72:e6:7b:21:82:09:79:90:
         e9:4a:94:3f:3b:0d:70:ef:a3:9c:63:dd:c6:a8:81:8c:36:25:
         7c:39:e4:a0:b4:ff:31:d8:e6:b2:5a:94:55:18:d4:d7:6b:e7:
         02:5d:51:9a:ee:f9:d0:be:a5:e8:a7:9c:44:d1:bb:9f:ff:80:
         e3:0a:f5:de:48:d7:0c:69:71:e7:2c:ec:01:a4:14:1b:05:e1:
         fb:f6:12:56:92:4d:5b:10:84:a2:63:ed:bc:99:d2:a6:6d:d5:
         ee:31:fb:52:a6:d7:24:1e:69:39:cc:53:69:14:ae:33:ec:16:
         a1:42:6a:23:e6:1f:57:44:02:cf:38:61:ce:09:af:cf:ad:c0:
         24:1c:bc:16:44:d2:f0:6f:bd:da:54:94:db:61:6b:4a:45:50:
         0a:ac:23:86:2a:b0:94:13:9f:84:02:a8:18:ec:c7:2f:76:4e:
         1c:6b:44:6c:03:d0:65:2c:45:71:90:87:00:5d:33:84:21:ee:
         66:0c:69:28:3c:bf:06:34:68:1c:ea:b0:b2:06:8d:41:fe:6a:
         c6:02:6c:5d:02:80:d0:53:54:65:18:eb:40:c4:32:92:00:7a:
         d6:81:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:04 2025 by rpki-client