Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/ecb53943-4766-3d3a-9698-a672eace45db.roa
File:                     ecb53943-4766-3d3a-9698-a672eace45db.roa (raw, json)
Hash identifier:          GZFpg5e1ASLE4ZqVHYgRp+Tvli3FHQm4Ks1DMjbeACI=
Subject key identifier:   4C:F2:F9:B5:54:01:85:4E:4F:1D:26:BF:3B:2C:60:8E:A3:74:E3:0D
Certificate issuer:       /CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
Certificate serial:       010D0C9F43285848090FA7E5B56F64118A26D480
Authority key identifier: 7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/ecb53943-4766-3d3a-9698-a672eace45db.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        69.2.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:a7:e5:b5:6f:64:11:8a:26:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=43907b11-43e3-4872-ac2e-177d6b6eac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:d7:10:ce:22:70:cb:c8:89:f7:a5:cf:ed:
                    3a:d2:12:1e:5e:33:32:c5:ce:a1:93:a9:3f:f4:2b:
                    6c:fc:05:7b:01:7f:2d:45:c3:c2:24:1d:44:81:ca:
                    0b:0e:9d:a4:83:66:53:4a:75:e1:7d:fd:1a:b8:12:
                    bb:1a:85:71:93:69:71:c0:7c:23:c5:8e:d0:ab:c2:
                    0f:c1:2e:e5:be:9b:63:9d:8e:da:4f:5e:ef:0c:d5:
                    a2:73:3f:0b:6e:6b:15:67:07:36:a3:c3:b2:2a:ee:
                    95:c6:04:c2:85:c9:1e:be:8a:50:15:5d:59:2c:9d:
                    9f:e7:0f:db:9c:48:f5:0d:21:71:5e:08:82:ad:09:
                    85:e6:71:bd:15:ec:00:ac:e1:4f:a5:5d:47:4c:6c:
                    c0:75:e4:e4:25:b3:f9:73:4a:3f:89:b7:c0:93:e8:
                    92:1e:07:cf:b7:d1:85:ab:02:3f:35:46:ae:33:6a:
                    f9:c0:2a:87:4b:bb:39:02:f6:4b:15:1d:11:58:36:
                    1a:e9:b4:1e:8a:ba:53:39:13:b0:71:0b:65:bc:f3:
                    f1:41:fd:3b:a0:1b:d6:54:18:ad:a3:51:4d:b6:c7:
                    63:23:5d:00:0c:46:3a:79:3e:fe:a4:0a:8c:af:dd:
                    31:fb:9b:3b:2d:42:85:96:e9:9a:63:6a:a3:9c:1a:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:F9:B5:54:01:85:4E:4F:1D:26:BF:3B:2C:60:8E:A3:74:E3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/ecb53943-4766-3d3a-9698-a672eace45db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.crl

            X509v3 Authority Key Identifier:
                keyid:7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:e5:c3:57:34:09:0b:13:64:fe:18:a3:ba:c3:14:00:5a:
         22:db:0a:9f:7d:84:ae:de:e2:b2:a4:b5:20:af:88:50:4e:d1:
         ce:3a:c2:fe:bc:a1:27:84:63:4c:9c:76:58:3f:4f:72:e8:1f:
         0e:de:61:69:c6:a7:16:45:d1:ba:1f:07:13:b8:c7:c6:4e:11:
         26:04:82:cb:09:f7:3d:14:7e:30:05:41:8a:ad:08:7c:ff:8e:
         87:86:ba:57:81:4f:80:61:81:47:0f:4f:c5:4d:df:35:df:ab:
         d9:04:08:20:87:9f:cd:95:b0:72:2b:86:6a:ee:be:2b:fe:22:
         61:5b:61:4e:ce:cd:b6:44:fe:d2:3d:78:14:cd:45:38:d8:80:
         cb:62:43:7d:b8:87:37:69:48:f4:00:23:45:8f:03:d4:12:0e:
         8a:56:7e:5d:cf:11:d3:20:4c:84:d4:52:71:8c:6a:fe:87:7c:
         64:5f:d6:a1:9d:ef:4f:ec:d1:a8:1f:bc:2e:e9:c9:3a:82:0f:
         49:76:c6:14:a6:d4:dc:d6:ee:5d:d8:66:49:36:5d:f9:cb:e3:
         9c:e4:ea:fa:24:b5:35:4c:55:ef:13:2d:ab:c6:d4:00:53:fd:
         0c:5b:fd:2f:4e:01:85:c3:65:85:c8:92:6f:f5:8f:39:b6:67:
         9f:24:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:50 2025 by rpki-client