Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/25a8ad66-52f9-3b0b-adc1-f2eb73a6b90b.roa
File:                     25a8ad66-52f9-3b0b-adc1-f2eb73a6b90b.roa (raw, json)
Hash identifier:          W+797d0wrT2ykcQnjzKLxTtIgvhZwdoz6XJoVlignbM=
Subject key identifier:   8F:5B:85:CD:29:78:36:8A:C4:97:02:B9:F9:A0:22:62:BA:0E:6B:FD
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F43285848E9CBDA4C02EC092A359F1820
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/25a8ad66-52f9-3b0b-adc1-f2eb73a6b90b.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        69.72.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:da:4c:02:ec:09:2a:35:9f:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=04a7b5df-05b4-4eba-9f1b-9dd1061f3898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:ec:0d:bf:e6:5f:8f:40:38:50:54:23:bf:
                    5a:7e:19:a8:cf:64:4d:50:48:af:f0:f6:db:3a:2a:
                    ec:47:53:05:35:59:f4:45:7b:22:3b:4e:47:8e:73:
                    fd:eb:2f:f2:71:e5:1e:6b:0f:49:cd:7d:65:f6:9c:
                    4d:f1:1d:6b:d1:31:3a:f8:ef:68:4f:d0:f4:89:a5:
                    b8:c7:b7:62:59:60:ec:2f:71:8c:68:6a:17:27:20:
                    3e:58:5b:d4:49:5e:ea:47:d0:70:2f:d2:31:34:26:
                    1c:0b:a0:79:6d:a0:9b:c8:46:f0:d4:fb:84:b4:87:
                    0d:05:eb:68:7d:df:fe:d8:0e:a5:d0:de:a3:e2:1d:
                    c0:74:b7:10:ca:e0:58:ce:fe:ba:92:5a:d8:20:0b:
                    ca:41:9a:60:d3:2c:24:a4:9b:e2:14:10:a6:9f:d0:
                    fd:de:70:c7:8c:48:32:ff:ea:34:ab:24:35:99:0a:
                    79:2e:86:a9:9d:57:4a:98:58:5e:f1:26:46:46:28:
                    84:0f:a5:f0:e6:e7:46:c0:f2:c0:ea:e0:a8:f5:1a:
                    fb:94:91:09:e9:b1:f7:b3:ff:22:34:21:09:79:bb:
                    38:c4:83:3e:be:e6:9c:11:66:0c:6b:d2:ab:0f:44:
                    16:92:7a:8b:09:b3:7d:08:66:0b:26:e9:73:21:83:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:85:CD:29:78:36:8A:C4:97:02:B9:F9:A0:22:62:BA:0E:6B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/25a8ad66-52f9-3b0b-adc1-f2eb73a6b90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:02:79:b0:fe:d8:a6:52:16:21:b0:a5:29:48:04:5e:b9:5a:
         71:ff:01:64:e6:0d:02:83:f9:51:cb:00:7d:34:b7:63:af:2d:
         67:d8:5e:f2:99:32:30:05:d5:fd:26:62:ba:81:c4:ee:fb:b3:
         bf:63:fe:60:2a:bd:ea:f7:20:4a:6a:1a:d2:6a:ea:be:19:f6:
         6d:46:b7:93:23:a7:05:6f:b0:44:34:70:7e:58:6e:16:08:b8:
         db:d9:4b:5f:59:f3:44:1e:dc:bf:17:ce:8b:a7:88:ef:7c:dc:
         e2:9d:89:26:36:0d:54:98:38:9d:83:9a:1c:38:96:22:0e:02:
         72:43:79:70:b5:5c:de:20:52:d3:7a:f5:30:d7:92:fb:93:f8:
         32:07:50:bc:31:9c:a5:37:7c:ca:0c:74:4e:46:4c:1a:01:4b:
         8e:20:10:32:a6:d0:15:7c:b4:cb:0e:36:66:4e:51:bd:89:5b:
         ac:08:50:1e:e8:ce:7f:58:cf:94:69:1f:5c:f4:1d:ac:a4:9a:
         1a:8b:69:c3:ba:b7:b4:1a:a0:71:fd:e0:a4:5d:2f:2d:91:2e:
         0b:99:43:53:ce:56:52:4b:06:9c:0a:4d:eb:0d:1c:44:c3:7c:
         78:2b:b4:b5:31:c5:2a:c1:92:db:a8:0e:b5:3d:2d:89:6e:10:
         ed:b6:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:56 2025 by rpki-client