Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323036323836.roa
File:                     36392e3136362e3232352e302f32342d3234203d3e20323036323836.roa (raw, json)
Hash identifier:          r0SOpt+6k6k7Q8rPd4xMdATfnB+C5VF3By/YeDM12qk=
Subject key identifier:   BA:88:73:A4:4D:77:78:C7:5C:56:97:03:9F:1A:9F:4C:B4:4A:8D:82
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       2754926D7FB58E9082F1E3F1C5E38638D37EC9BF
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323036323836.roa
Signing time:             Sat 18 Jan 2025 18:13:08 +0000
ROA not before:           Sat 18 Jan 2025 18:08:08 +0000
ROA not after:            Sat 17 Jan 2026 18:13:08 +0000
asID:                     206286
IP address blocks:        69.166.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:54:92:6d:7f:b5:8e:90:82:f1:e3:f1:c5:e3:86:38:d3:7e:c9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan 18 18:08:08 2025 GMT
            Not After : Jan 17 18:13:08 2026 GMT
        Subject: CN=BA8873A44D7778C75C5697039F1A9F4CB44A8D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:a2:25:8e:de:22:72:20:24:98:18:31:16:
                    fa:5c:1e:d7:d5:98:33:b9:11:f3:40:b2:28:51:45:
                    4a:5f:a1:b8:c8:46:17:f4:ef:4d:06:0f:d8:90:ff:
                    20:53:51:1e:d7:d2:a4:1d:06:b6:9b:8c:20:1a:ad:
                    df:c0:fb:79:94:49:d6:8a:ab:0a:fd:b4:9e:48:6a:
                    e9:0a:18:a4:aa:65:d1:f9:39:a5:70:41:bd:dd:d2:
                    d3:fc:b3:ea:ee:49:f2:91:bb:e4:c5:66:08:85:8a:
                    8b:a7:21:90:61:56:b3:9c:4b:ad:c4:e2:1d:53:18:
                    b5:45:5d:7c:14:9e:97:97:9c:15:a9:81:6b:a3:f2:
                    3e:73:8a:cf:b4:eb:e2:da:0a:72:88:9a:db:1e:ef:
                    2c:04:7a:bf:12:39:67:d7:b5:a0:55:80:b8:c4:2d:
                    03:4b:d3:62:e1:45:24:24:be:92:b0:f7:a9:ec:d2:
                    a0:8c:32:a0:d5:19:7f:58:f4:44:a5:45:69:4a:64:
                    1b:a4:41:3b:00:38:1d:7a:25:ab:54:48:9d:54:58:
                    50:03:ba:30:94:da:23:89:ee:16:fc:67:73:1e:da:
                    c0:d6:f9:2a:22:b0:bf:97:78:c0:41:89:91:bc:67:
                    48:59:1b:eb:76:32:4b:9f:c5:8e:15:5b:38:d7:f8:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:88:73:A4:4D:77:78:C7:5C:56:97:03:9F:1A:9F:4C:B4:4A:8D:82
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323036323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:67:0a:87:63:2b:b0:d2:c3:65:8d:fb:b3:b4:64:1d:46:
         8d:ef:82:7a:6a:29:01:22:e6:18:b0:0f:10:08:ad:01:2e:47:
         6b:53:63:5e:9b:ea:6e:3a:1c:ca:3d:f8:9d:f4:a8:6d:8f:66:
         3b:5d:52:65:80:a9:b8:c0:de:91:ae:eb:f3:81:1d:1c:27:3f:
         a4:a5:ff:26:33:cb:a8:0f:c6:e3:3b:2f:77:b6:24:19:9f:52:
         d8:44:66:21:01:86:9c:f6:0b:0d:85:e2:8c:08:fa:75:ef:a4:
         7b:8f:7d:f6:92:ce:36:c4:d7:d7:a1:7e:d2:bd:47:cb:b4:49:
         4a:c7:18:f9:79:d4:ac:bb:00:2b:37:ce:8a:59:03:3f:b4:16:
         ff:dd:1a:6e:32:1a:ff:b8:27:eb:83:23:dc:c5:85:ae:38:75:
         07:96:10:75:e7:9e:61:40:18:ef:dc:4a:33:3a:39:e1:69:07:
         11:19:34:40:a4:5f:67:4e:b6:cc:b2:a6:28:d5:60:00:9e:d0:
         83:b9:6d:c8:70:b5:78:39:d3:f7:1a:00:81:78:22:4c:6a:23:
         c6:44:7b:a3:51:b9:30:5e:10:18:08:7d:5d:6e:ca:7e:40:09:
         11:5a:c3:c8:24:33:ef:b2:a4:d1:a7:cf:76:44:13:71:7a:87:
         c8:10:d5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:31:55 2025 by rpki-client