Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
File:                     24563349-a664-362b-a317-02cb1d641489.roa (raw, json)
Hash identifier:          /sfL5+0QjG2VcGRWI5Kr1tC+eZfqQHtIaSrpmR92Zxk=
Subject key identifier:   45:1A:55:36:63:07:10:03:34:7D:B0:B3:90:B5:22:EA:A3:62:13:2F
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584812D534C6E2809D428D9DE800
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     35874
IP address blocks:        69.58.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:34:c6:e2:80:9d:42:8d:9d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=e04e974b-2a1e-4ae2-b71b-935a390656c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:e8:6c:ec:04:eb:ef:9d:65:a3:56:fd:44:
                    4a:94:2c:34:42:50:4f:95:21:d5:2b:0f:c3:c4:08:
                    3b:c8:10:b9:19:fa:7f:58:70:ab:77:ac:2e:f1:de:
                    51:c4:48:22:fe:6e:88:8a:f2:54:84:dd:7d:26:74:
                    5c:c6:01:8c:e4:0a:0f:cf:42:f3:79:84:c3:d7:16:
                    16:ee:f6:a0:fa:87:83:d9:d1:af:77:30:25:26:58:
                    8e:c2:6e:90:4e:ea:e0:5d:ca:45:87:9d:b4:10:73:
                    69:ec:56:b2:8a:ec:07:dc:58:46:40:39:72:77:42:
                    49:f6:e7:a9:9b:b9:31:8e:3d:aa:ae:c7:8e:c3:64:
                    8c:9d:3f:8a:59:52:8d:17:f3:4a:4d:6e:e0:2d:3f:
                    b0:82:92:7d:2a:c8:e0:bf:76:d1:0c:b1:45:02:b8:
                    62:6f:4b:ff:21:ca:65:03:92:bc:b5:54:80:ab:27:
                    ce:9d:8c:eb:8e:dd:ba:1f:23:4e:80:1f:bd:08:3d:
                    5c:8c:dc:35:fc:f4:df:37:b6:14:ac:0b:24:2c:06:
                    89:8e:3e:b7:a4:3f:a1:d1:08:d5:b4:7f:e6:3e:95:
                    5a:af:a1:5f:47:2f:5f:e7:bd:ba:86:9a:12:74:21:
                    4c:08:16:78:0c:d2:61:bc:db:9f:aa:13:05:80:39:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:55:36:63:07:10:03:34:7D:B0:B3:90:B5:22:EA:A3:62:13:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:30:00:4f:35:71:90:ca:7c:6d:70:74:44:8e:b0:ae:0c:ae:
         9d:31:50:63:65:20:85:b3:1c:9c:7a:90:aa:66:93:b3:9e:1d:
         8c:db:e0:f3:af:0d:a5:60:fe:ef:32:e8:d5:fe:26:e4:93:e9:
         39:c4:6e:b1:1d:6c:99:98:4f:85:e2:ab:cf:00:34:3c:48:d2:
         5a:c2:aa:fa:69:ec:da:31:76:8b:25:a6:44:cf:ac:b7:47:d8:
         f7:03:0d:1c:f3:b4:97:de:b6:20:89:60:16:c6:84:b7:6e:b6:
         93:28:44:4b:7a:08:4a:f9:b1:95:c3:bb:8f:4e:3c:5b:51:27:
         04:61:bf:ff:21:ab:27:00:a1:69:21:22:6a:ff:99:fd:ab:8e:
         97:7e:1d:3e:be:2b:24:cc:a0:f8:7e:31:c2:e2:6b:39:56:ae:
         48:24:9e:74:b8:b2:b3:79:3e:64:0a:60:ee:17:47:c8:70:b2:
         80:a7:66:cf:b3:4a:d6:f1:9e:fa:fa:48:7d:da:27:a5:20:41:
         50:b5:04:a7:6e:16:5e:53:f0:2b:9c:65:cb:81:a6:74:fb:9b:
         a3:e4:fc:35:b4:52:af:8d:6f:c9:8d:79:eb:09:63:8e:14:00:
         1a:0d:91:37:18:90:29:a3:82:1e:74:88:d6:6b:00:6f:e6:f5:
         2d:a1:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:43 2025 by rpki-client