Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
File:                     9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa (raw, json)
Hash identifier:          ohQSntlg8YgzkW+pK96uZfUpaMZRaWyNaJ+OgUm3vVg=
Subject key identifier:   9A:F5:CF:D4:43:48:1B:45:C3:7C:AA:72:DC:AF:15:22:B4:83:7E:A2
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F432858492DA6D13CCB43449B98C5C000
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
Signing time:             Thu 13 Mar 2025 21:21:19 +0000
ROA not before:           Thu 13 Mar 2025 21:21:19 +0000
ROA not after:            Wed 11 Jun 2025 21:21:19 +0000
asID:                     40934
IP address blocks:        69.48.238.0/24 maxlen: 24
                          209.40.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:a6:d1:3c:cb:43:44:9b:98:c5:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Mar 13 21:21:19 2025 GMT
            Not After : Jun 11 21:21:19 2025 GMT
        Subject: CN=9f6087a3-4ada-4e6d-97b6-36e83eea6506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:d9:80:df:8d:5b:de:e2:eb:3b:cb:07:a2:
                    5f:03:a0:97:65:4e:72:97:7d:4a:5a:76:42:62:38:
                    a7:0c:71:c6:7c:f9:d3:ff:dd:a9:96:49:f9:d0:5c:
                    77:76:f7:61:ab:09:61:e7:3b:ed:f8:f2:82:d6:c8:
                    b2:32:c1:d4:cc:fd:a5:46:bb:f9:ef:d5:c1:6c:ee:
                    15:08:3b:af:97:6b:f6:08:49:50:79:28:b6:e5:d8:
                    f5:3e:63:c7:b1:1b:ca:7c:0d:81:01:05:db:c1:94:
                    e5:43:b1:1f:93:dd:50:bc:45:c4:d2:37:eb:f3:18:
                    ca:fc:ae:21:41:e6:9d:34:bf:48:c7:a1:38:6b:1c:
                    77:95:9e:83:ae:3f:59:68:f4:fe:76:30:85:c2:47:
                    bc:63:84:5d:ad:a0:3a:96:4a:c0:8c:78:6d:e8:5c:
                    54:5a:74:19:e8:53:4c:cb:69:cb:af:70:54:af:dc:
                    5c:56:40:5c:49:c2:c6:10:8d:ca:81:0b:5b:9c:a3:
                    83:a0:16:ec:fc:ce:58:04:6f:07:f1:0a:9d:a5:6d:
                    b9:b0:41:09:f8:35:9d:cc:fb:ef:c6:1a:fd:fb:6b:
                    74:a0:27:36:18:b6:56:c4:6b:45:42:e7:3a:0b:52:
                    52:18:07:a2:cc:f7:b4:5c:ef:50:66:9a:d8:1f:d2:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F5:CF:D4:43:48:1B:45:C3:7C:AA:72:DC:AF:15:22:B4:83:7E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.238.0/24
                  209.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:8b:84:67:8f:21:57:b3:9e:d8:85:8e:be:5a:d7:2c:5a:
         7a:bd:07:58:3b:2a:ed:2b:63:f2:4f:11:0a:2b:54:c8:95:f2:
         27:24:72:52:ad:91:50:4e:ee:29:af:7a:c4:22:06:c0:84:a1:
         63:95:d7:02:1d:94:a2:55:41:40:72:bf:2f:f8:97:5b:4e:b9:
         23:b5:dd:c6:a9:e9:8a:4c:3f:b7:fd:73:03:33:c3:3d:52:d6:
         2b:59:1b:c0:4b:4c:54:ea:c4:c9:30:f7:f4:13:ec:27:1f:df:
         c3:5d:7d:75:9c:71:44:4d:01:97:0d:36:09:a3:1d:5c:8c:ef:
         78:f3:29:8d:1c:7c:4e:a6:1a:b0:1d:1b:f5:70:6c:be:ad:6f:
         d8:bf:29:67:64:b6:07:88:cc:b4:fd:83:1e:99:13:44:64:8e:
         0b:7c:d1:a4:04:9a:52:27:a4:59:98:66:e2:4a:36:ff:82:81:
         9f:4b:df:71:f5:6a:22:14:cd:36:ef:e4:23:3a:c8:c4:8e:94:
         3b:aa:50:7a:04:55:80:72:7d:49:e6:7f:61:24:4a:e5:8e:ee:
         80:ed:1b:9d:d2:fa:d0:22:92:33:2e:96:7d:4d:c1:16:69:74:
         5f:2a:ff:3d:aa:08:fb:60:d2:d6:5e:18:fd:7e:92:e2:13:53:
         ab:db:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:30 2025 by rpki-client