Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
File:                     f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (raw, json)
Hash identifier:          3kqFZqpGH420VrGPzQ0oLXYCOByjbBPZFTPKjiCwkqQ=
Subject key identifier:   E1:CE:37:73:CF:51:92:AF:C5:80:6D:BD:19:AC:36:DF:B9:36:A9:B4
Certificate issuer:       /CN=de111c10-2de5-41fa-a9e4-1e49a0479199
Certificate serial:       010D0C9F43285848854B4720645CE6268B34F880
Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     26793
IP address blocks:        69.5.128.0/19 maxlen: 24
                          162.216.76.0/22 maxlen: 24
                          173.240.192.0/20 maxlen: 24
                          205.237.160.0/19 maxlen: 24
                          206.127.176.0/20 maxlen: 24
                          2604:2800::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:47:20:64:5c:e6:26:8b:34:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=e29b9d26-2cd4-49bd-a7f4-9d26af275d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:f7:a1:12:f5:be:95:7b:39:6a:8b:f8:52:
                    da:db:9c:41:69:29:7e:d3:3d:a1:fc:9f:86:2d:c0:
                    bf:6b:cc:ff:cc:59:1c:e3:b9:06:c8:5c:a5:44:1b:
                    c9:db:49:92:e6:7f:7a:1d:7b:5a:d0:4b:29:88:c9:
                    b7:fb:17:fd:f8:2f:83:d6:2a:b7:58:e8:38:e3:59:
                    86:79:7e:03:0b:4a:f3:4a:39:cd:3b:39:06:cb:c3:
                    b0:86:2b:7f:0e:ca:b0:97:36:df:cb:dd:a1:7f:8b:
                    ca:78:de:a0:3c:85:b5:81:ef:65:9f:87:3a:83:3d:
                    3e:d8:8a:8f:71:37:49:d4:ec:3f:7e:cb:86:fd:3b:
                    43:2f:1e:f8:4f:44:e2:9b:63:d1:3c:7c:47:fb:b5:
                    07:c6:d5:2f:a0:73:39:8a:ac:f7:4d:23:db:f2:6d:
                    43:8d:01:46:51:75:c5:37:ee:66:60:e4:97:84:68:
                    3a:7e:0c:35:3d:02:20:ab:e1:3d:ab:36:8e:2a:93:
                    ca:ab:3d:94:74:e2:61:74:5c:b6:8b:8f:29:25:12:
                    be:c4:5a:00:83:a6:7e:ac:93:23:ba:87:0f:98:13:
                    d1:12:e2:86:58:9d:01:fc:f8:32:72:bb:f0:10:b0:
                    0e:1e:c5:7c:ea:37:6d:4f:29:60:8c:43:f6:0e:4d:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CE:37:73:CF:51:92:AF:C5:80:6D:BD:19:AC:36:DF:B9:36:A9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl

            X509v3 Authority Key Identifier:
                keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.128.0/19
                  162.216.76.0/22
                  173.240.192.0/20
                  205.237.160.0/19
                  206.127.176.0/20
                IPv6:
                  2604:2800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:2f:8f:b7:28:67:ea:92:04:91:9d:c9:ba:bf:c5:de:9f:
         8d:72:83:56:28:95:95:88:f2:da:f2:57:85:10:8e:a6:f0:db:
         b4:6e:29:40:d6:0b:4b:ca:f2:59:78:8a:12:e7:5f:f0:c4:5b:
         df:c4:9c:3c:a2:e1:18:c8:7c:4f:83:3f:0f:6b:c0:35:c8:2b:
         b7:74:df:1d:c6:d4:b6:81:93:ae:fe:8f:6f:e2:d4:74:91:4d:
         ad:2c:f7:a2:87:b4:d5:f1:10:8a:35:b8:0d:a3:e2:0a:7e:a5:
         fa:23:a3:99:d3:c2:58:6c:c0:93:af:3f:9f:b2:50:11:6f:e8:
         03:72:ca:19:1b:45:dd:dc:69:3d:b6:a6:e4:c3:80:94:22:7f:
         9e:15:4a:9f:5f:57:12:16:32:12:64:99:a5:39:6a:14:d2:94:
         d6:8a:ad:ef:99:2f:95:05:ea:e5:37:cf:64:6b:55:74:83:2e:
         3b:14:9f:92:44:f2:36:70:ac:0a:3d:a3:28:1f:c3:d2:cb:b2:
         8d:21:9a:f0:bb:16:99:c1:ed:03:77:b2:40:6a:f2:43:52:3d:
         0a:f1:08:43:d9:97:80:98:52:28:5f:d3:d5:26:25:5c:1c:af:
         0f:a2:a2:bc:e7:97:8b:55:16:f8:d0:79:29:f9:45:89:6f:6d:
         b8:10:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:23 2025 by rpki-client