Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa
File:                     3b7be4db-845a-366c-83ad-948a2fb50b9e.roa (raw, json)
Hash identifier:          XkR9e25GdJbM3iac/LZAPpykromYiW0+QSl8K4jIHjA=
Subject key identifier:   CC:97:8E:72:7C:18:84:E3:57:F4:68:B7:72:87:21:5C:9D:83:12:E1
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F432858491246A5DA6FACD75FEB834A80
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     20454
IP address blocks:        69.160.46.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a5:da:6f:ac:d7:5f:eb:83:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=52302d35-60b1-4bd9-aa2e-b51e7fff0be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:e2:3e:8b:3f:75:81:ed:e3:36:01:00:ff:
                    05:19:4e:fa:3d:37:d4:18:51:08:24:5c:10:fb:f8:
                    fe:e6:45:76:55:09:0f:70:d9:3f:ed:99:c9:77:be:
                    1b:cd:76:bf:04:2e:8c:18:98:24:88:2a:8c:e6:ce:
                    72:3d:b4:2e:20:e8:ae:32:06:5b:77:26:62:e2:17:
                    84:d3:06:a6:72:b4:94:96:6e:44:8a:ca:68:a2:33:
                    be:49:71:8f:e5:ae:1b:cf:d2:77:0a:b2:f3:7b:19:
                    ce:91:95:a5:29:38:6a:1e:e4:16:53:e5:4d:7c:98:
                    b1:d3:f7:88:d9:36:b0:a2:a1:0a:57:76:3c:8d:ae:
                    22:3a:e6:02:b6:11:37:15:c3:db:f3:ee:6f:8e:58:
                    e8:3a:1b:b4:00:2a:11:3b:d6:ba:8e:66:5d:91:6f:
                    3a:7e:03:06:bd:da:f3:6e:74:96:75:06:4f:ad:88:
                    d2:5a:85:ed:24:9c:d1:bd:9d:94:44:0f:8a:ed:34:
                    a2:1f:28:ba:b3:38:b1:c0:19:63:72:42:94:d9:85:
                    d2:01:6c:c8:e8:69:82:90:0a:ad:c3:3c:fe:c3:d0:
                    4f:a7:0f:14:b9:9a:e9:1f:fa:af:4b:8f:78:b7:3c:
                    5c:1d:fb:01:4f:76:b8:b8:07:39:b5:37:cf:a3:23:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:8E:72:7C:18:84:E3:57:F4:68:B7:72:87:21:5C:9D:83:12:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:5a:50:13:05:f6:3f:32:22:a9:51:5f:5e:18:b2:c3:bc:
         dc:ad:ac:ee:57:7f:48:64:da:51:c1:87:a8:25:38:7d:e5:dd:
         93:46:78:86:34:5c:71:72:4f:6d:b3:eb:ff:11:71:08:4b:b5:
         0c:f1:e7:7e:e5:98:45:3e:34:11:ee:09:11:08:b5:a1:11:b1:
         d3:51:a8:58:d5:ee:17:58:e9:0b:86:81:35:92:30:d3:a4:e1:
         84:35:5e:ff:98:d7:28:65:b0:b8:1c:62:5e:57:2a:6c:ff:45:
         14:c7:60:ba:51:e3:a2:3f:66:28:8d:39:1d:58:2f:e7:8b:00:
         f6:43:a0:91:b6:42:c3:5f:57:9f:df:c0:b1:f9:c8:32:30:72:
         4c:f2:9e:a8:b5:62:cb:fa:09:52:48:c1:65:45:12:28:50:bb:
         58:c1:e3:69:82:b1:78:c9:ee:9c:39:5d:15:1c:20:e0:a2:7c:
         f9:c0:b9:71:72:22:cd:0e:07:d4:9f:eb:e1:12:cb:37:5a:b8:
         b8:60:8c:12:3e:28:2f:15:20:1f:f3:8b:8d:b7:83:02:30:39:
         46:83:6e:3d:b1:b0:0a:3e:2f:02:69:9a:26:73:66:5d:16:54:
         f0:97:13:a3:5b:08:9d:80:35:a6:e3:23:83:32:70:f5:f4:f4:
         fc:18:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:15 2025 by rpki-client