Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c16078a9-2a6a-320d-b9bd-87578f68f57a.roa
File:                     c16078a9-2a6a-320d-b9bd-87578f68f57a.roa (raw, json)
Hash identifier:          kMdiHZtUmI33emQIdTFqqzLbX9JW4AUycCOX3etHQwI=
Subject key identifier:   87:03:B0:45:65:FA:15:B1:1E:6F:46:67:46:81:9E:93:BC:02:1F:C3
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285848696062BD0278D73F6AF10880
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c16078a9-2a6a-320d-b9bd-87578f68f57a.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     20454
IP address blocks:        67.43.44.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:62:bd:02:78:d7:3f:6a:f1:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=624ee563-2a71-4ce3-929d-03eb74f85ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4e:03:a6:c0:57:aa:2a:de:83:8f:ce:d3:1f:
                    f9:54:13:b9:c0:68:5e:7b:5a:64:8b:7d:84:b7:ce:
                    42:b7:5f:87:f8:78:76:50:cd:c4:ad:4d:a2:5c:2c:
                    ea:c8:25:1c:8e:ab:08:52:3f:66:a0:1f:e2:5b:35:
                    74:e9:4b:44:40:f7:a9:92:79:9a:29:8f:22:f9:20:
                    6c:5c:bc:43:4a:d9:fe:0f:f7:34:ea:59:34:73:6b:
                    3b:13:ca:d1:86:89:3c:aa:d8:ee:c6:0d:e2:aa:c5:
                    c1:49:bc:c5:d3:4e:0d:b6:8e:75:81:64:ba:ad:76:
                    2b:58:9b:01:41:d2:b4:8e:a8:35:86:b0:22:53:c1:
                    f5:75:3a:a9:a6:01:32:05:9f:bd:f7:bd:a3:3c:a2:
                    f7:73:94:67:06:e2:e2:cd:a2:51:98:31:95:8e:af:
                    65:dc:16:8c:30:66:82:f3:6d:06:89:fd:61:cd:74:
                    0a:2d:55:c0:03:17:e7:55:5a:58:b2:ce:bb:8f:c4:
                    a2:ea:97:5b:67:b0:8a:4a:db:24:25:bd:d6:5a:46:
                    3d:30:9d:05:e6:df:f0:c0:3f:b6:fd:1a:e2:32:ba:
                    ca:8b:d1:7d:29:d9:2a:14:56:2a:5d:68:af:12:8b:
                    d2:2d:1c:ac:4c:48:35:8e:df:ec:8e:69:ea:e0:f1:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:03:B0:45:65:FA:15:B1:1E:6F:46:67:46:81:9E:93:BC:02:1F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c16078a9-2a6a-320d-b9bd-87578f68f57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ff:9c:a7:2e:cf:b9:a5:ad:ee:b1:7b:9a:89:80:1c:fd:99:
         04:64:e8:8f:c2:44:f4:d0:c8:e9:1a:05:fe:e9:2b:e0:27:2a:
         e3:c0:17:d4:38:e0:8c:fe:1d:0e:e4:04:6e:8d:a2:ac:9b:2f:
         42:63:f2:0d:53:f8:89:a8:5a:4e:4e:11:52:9d:78:3d:2a:d3:
         5f:1f:20:4c:20:35:5c:5f:23:cc:cf:cd:d0:08:96:c2:a0:41:
         dc:2c:e2:86:7e:72:98:d1:1a:ad:56:e0:2e:ff:35:b8:0d:96:
         4f:38:81:83:64:96:32:37:de:2e:ed:22:84:aa:50:25:d0:93:
         51:39:80:ef:ea:aa:9f:99:79:75:16:f3:db:12:16:d6:87:a8:
         c7:95:1d:f5:af:13:94:35:8b:db:66:38:95:d1:3e:70:0f:61:
         30:a6:b4:67:7f:11:8f:66:ce:0c:15:ea:39:c4:0f:19:03:41:
         51:ac:18:75:99:9d:97:f9:4b:a7:88:e6:83:54:ae:1b:c9:a6:
         11:28:2f:c2:df:ae:cb:05:6e:b9:1f:1f:40:7f:bc:bc:77:1c:
         a9:a3:fc:75:3b:73:d9:96:a4:64:8c:bb:bb:e7:20:3d:e8:76:
         a0:60:1b:d8:de:ea:b9:b8:d6:c5:38:e6:4f:a1:06:61:bf:14:
         21:d4:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:59 2025 by rpki-client