Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ac55f2f7-ceec-3db2-940b-45edd55ecc63.roa
File:                     ac55f2f7-ceec-3db2-940b-45edd55ecc63.roa (raw, json)
Hash identifier:          qYBZyR8KB7blXT5GkBo1Nhk/J1MusSCruUdZh4PqXvU=
Subject key identifier:   C9:33:35:01:FF:77:E4:7B:C1:A0:C2:B4:3C:EB:A1:5D:28:3E:D5:27
Certificate issuer:       /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
Certificate serial:       010D0C9F43285848F54C776CD8CC5A486CA50480
Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ac55f2f7-ceec-3db2-940b-45edd55ecc63.roa
Signing time:             Fri 21 Feb 2025 16:54:00 +0000
ROA not before:           Fri 21 Feb 2025 16:54:00 +0000
ROA not after:            Thu 22 May 2025 15:54:00 +0000
asID:                     16509
IP address blocks:        69.67.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f5:4c:77:6c:d8:cc:5a:48:6c:a5:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
        Validity
            Not Before: Feb 21 16:54:00 2025 GMT
            Not After : May 22 15:54:00 2025 GMT
        Subject: CN=57749b35-72a2-4092-b1b5-a46c4d5824ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:ce:a6:2d:38:b2:34:82:2d:ed:d2:3a:3d:
                    6a:5e:70:80:39:88:58:69:d8:72:eb:c0:f8:0b:a6:
                    f4:8a:56:ab:3e:33:16:a0:e1:70:45:52:b4:9c:44:
                    fb:b0:3e:59:91:c0:fb:ba:35:f5:e6:33:af:0a:88:
                    17:fe:c6:a6:96:be:a4:41:98:b9:82:28:8e:25:b0:
                    f0:ec:98:00:64:95:1e:27:3c:c8:7e:68:86:2b:f7:
                    0c:dd:8d:0b:16:d7:bf:3a:69:79:02:de:82:c4:cb:
                    af:33:9b:47:a3:b5:b6:e7:ce:ed:9f:82:b4:a2:71:
                    5c:ad:a6:a5:09:60:1c:f3:5b:c8:d2:95:a1:2f:fc:
                    fe:50:05:02:0c:d7:9c:8f:40:49:bc:8e:69:19:20:
                    64:85:03:57:fe:4d:87:7c:c4:60:00:ec:1a:af:26:
                    36:b6:98:40:42:f5:cd:b4:b0:7c:63:ff:18:3b:8a:
                    ad:46:75:09:fc:3a:dd:20:77:14:61:30:50:ea:55:
                    e7:86:30:2e:ba:50:6f:49:63:d1:6b:64:5a:46:3f:
                    35:f6:69:66:f0:1f:34:d5:df:49:1e:b8:dc:72:0a:
                    7a:2b:27:85:60:04:13:5d:62:be:30:0d:0c:26:2c:
                    ee:19:40:be:11:ec:ee:8c:d3:1d:ee:54:c9:62:e2:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:33:35:01:FF:77:E4:7B:C1:A0:C2:B4:3C:EB:A1:5D:28:3E:D5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ac55f2f7-ceec-3db2-940b-45edd55ecc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl

            X509v3 Authority Key Identifier:
                keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:72:84:d6:59:5e:92:73:fa:2a:01:8f:37:b7:38:1e:f1:
         e8:e1:d8:fe:4e:b0:fe:b1:f5:92:9d:f5:8c:c7:10:13:f9:49:
         ae:ec:6b:09:71:47:6e:15:87:d1:87:eb:ed:70:b3:0d:4f:d2:
         8a:4a:98:e4:fa:52:c7:6e:fe:b9:db:0f:ce:1d:dd:07:0c:fc:
         65:a1:ad:de:85:e5:4a:aa:8c:37:4b:be:a0:61:14:5b:7b:72:
         bd:e5:73:19:2a:73:ef:5e:2e:50:bd:9b:bd:cd:55:9b:61:1e:
         da:34:3f:48:5f:a4:ba:fc:c4:5a:f8:fe:7e:78:00:97:d2:63:
         9e:30:2b:9f:51:72:cd:3f:66:fc:32:ad:6e:db:57:88:61:6b:
         b5:c5:42:7c:b4:b0:e9:7d:3d:f0:3c:b7:f5:ad:bf:de:29:e4:
         b8:a6:01:cd:10:dd:86:d1:9d:a2:30:a1:1a:bf:23:38:fa:6f:
         68:fe:b1:bd:a6:2c:0b:02:12:9c:0e:ae:79:10:ee:81:f9:50:
         9f:70:95:ea:ed:96:a0:03:3a:0a:2d:cf:ea:39:53:93:db:8b:
         51:87:f7:a5:d4:d3:66:f5:ea:a8:9a:25:bf:e5:9e:ae:7b:8c:
         a5:3c:b4:75:06:26:ae:29:a5:9c:50:e1:a9:ec:56:e6:ac:ae:
         35:19:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:17 2025 by rpki-client