Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32342d3234203d3e20313531383732.roa
File:                     36392e3136362e3232362e302f32342d3234203d3e20313531383732.roa (raw, json)
Hash identifier:          loDr/Wz+BiwGTA3YjOu1ifen1zDweMGEJnosV3dABpo=
Subject key identifier:   B6:F0:D1:08:07:AE:B7:89:62:B7:98:CC:EC:83:FC:84:51:22:0C:70
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       19CB26AF6E3715023FA355CE2FD22DE932577571
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32342d3234203d3e20313531383732.roa
Signing time:             Sun 09 Feb 2025 19:16:05 +0000
ROA not before:           Sun 09 Feb 2025 19:11:05 +0000
ROA not after:            Sun 08 Feb 2026 19:16:05 +0000
asID:                     151872
IP address blocks:        69.166.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:26:af:6e:37:15:02:3f:a3:55:ce:2f:d2:2d:e9:32:57:75:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Feb  9 19:11:05 2025 GMT
            Not After : Feb  8 19:16:05 2026 GMT
        Subject: CN=B6F0D10807AEB78962B798CCEC83FC8451220C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:ec:af:22:23:af:21:b5:1a:4d:d0:eb:f1:
                    ac:20:6e:ba:47:27:cf:72:9f:48:b1:e9:b7:78:c4:
                    ed:71:22:42:a3:09:06:ed:da:81:90:08:6a:f3:2d:
                    d1:96:32:1b:05:86:49:6e:87:60:5b:6f:b8:c4:d1:
                    11:69:97:f8:5b:ff:cf:04:ef:35:ca:48:f6:17:0e:
                    2b:80:80:bd:15:ea:07:13:50:a2:c0:33:9c:ed:95:
                    6b:0b:2a:e8:47:7b:e6:c2:77:83:76:6a:23:b1:ab:
                    e6:7a:2f:19:9f:3e:c0:e5:15:89:31:a9:04:55:54:
                    cb:1e:45:bf:b5:1f:0c:d2:3b:83:a3:50:ee:4a:1d:
                    0c:bb:56:d2:eb:69:d4:dd:ab:85:95:4e:31:e4:c1:
                    92:c2:8a:ab:f1:dc:1c:cb:05:90:50:14:e3:a2:5a:
                    2c:fd:fc:91:f1:1c:32:6a:de:44:b8:da:4a:b3:dc:
                    31:b9:fc:de:3a:45:27:25:5d:78:c2:92:a2:d2:de:
                    20:7b:f4:7c:89:09:0e:ea:13:52:49:c1:eb:67:b1:
                    3b:38:31:50:7a:b6:8d:b8:dc:d7:54:75:f5:3e:8a:
                    35:b5:e2:4b:6a:09:1b:d4:af:64:13:f1:59:0a:e2:
                    1a:06:e9:6c:86:38:14:93:0e:58:cf:c9:18:55:41:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:D1:08:07:AE:B7:89:62:B7:98:CC:EC:83:FC:84:51:22:0C:70
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32342d3234203d3e20313531383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:21:f4:eb:94:6b:4f:50:34:48:ef:25:cb:cf:9f:af:de:3a:
         f8:49:2a:b1:30:a7:05:12:dd:e8:b2:da:05:b4:e1:66:77:ed:
         cf:a7:92:71:0c:eb:f0:4d:96:89:23:61:9b:9e:d8:e3:fb:2e:
         c8:a5:1f:7d:47:b1:35:63:33:6e:2e:d7:f5:e1:a2:1a:6e:04:
         7a:c6:81:2a:af:b9:a6:bf:f1:c4:f0:4b:e5:ed:f3:b6:d1:90:
         f5:2f:48:c7:22:a6:6e:90:a7:78:ad:c8:00:e0:ee:55:46:f7:
         67:80:6d:63:6d:f1:4d:cb:db:a2:66:40:4a:0e:b8:a4:ec:5e:
         39:ff:e3:99:de:b2:fd:48:f5:94:9f:89:55:4d:5d:bd:a3:46:
         12:39:1c:1b:ab:5e:21:18:10:31:6d:4c:39:05:6a:d6:9e:96:
         aa:75:bd:29:6c:98:2b:16:1e:2d:8c:a3:14:df:03:a2:29:fd:
         1c:bc:44:5c:27:a9:49:f8:c0:a2:19:5a:9f:65:80:5e:8b:9c:
         7f:3f:b7:0e:91:9e:39:08:fe:56:3c:85:3f:ba:1a:ac:3b:f3:
         c4:1a:3a:86:2c:3f:ce:3e:0a:74:b7:1b:aa:43:0b:23:fd:46:
         ec:70:68:0b:06:7e:f8:a3:e0:98:24:5d:0b:2c:36:1b:00:75:
         d4:79:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:24 2025 by rpki-client