Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa
File:                     69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa (raw, json)
Hash identifier:          9XVABywgpXrg7RKeHmw5N+k1w+t4eX0hrIeZ05woyLM=
Subject key identifier:   68:39:FA:CC:53:B0:D2:EE:CF:E1:D7:EB:D8:AF:A1:BA:33:69:29:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819B7A4A100C16C4A60200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:9b:7a:4a:10:0c:16:c4:a6:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0b71c994-5d23-4516-8817-b1ad8f5a3f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:5b:b2:2d:e8:10:1f:6f:ec:93:92:a8:05:
                    b9:f4:4d:ac:2c:a0:bc:bb:91:e9:fe:80:3b:71:85:
                    20:a4:36:aa:94:56:57:c6:ca:e3:c8:50:ed:42:ee:
                    dc:ea:25:bb:cd:82:b9:da:3d:c6:bf:db:e9:75:47:
                    d0:72:98:73:89:35:33:7a:f2:25:c8:d6:db:15:ca:
                    d8:28:2b:ca:30:b2:db:e3:03:4f:f3:7a:ff:62:0e:
                    0f:3c:03:bb:89:8a:d1:f8:a8:c6:b7:8a:71:17:58:
                    db:db:bb:f3:1c:e4:01:7d:d0:42:b3:3e:8b:a6:f0:
                    49:7e:4a:09:a4:4c:2e:94:9f:a5:5d:ef:3a:41:5d:
                    55:a3:7a:d4:f8:6e:b2:f1:d9:75:01:49:1c:a1:cf:
                    d5:50:2d:f3:ce:fe:c2:9b:30:e3:de:cb:ae:7c:e1:
                    80:6f:cb:e4:a7:3d:59:c8:04:be:21:59:c2:b3:01:
                    be:2c:6b:60:65:aa:0b:47:28:15:26:14:cb:9c:aa:
                    23:08:97:37:7c:2a:32:16:8f:ef:72:b7:6e:9b:17:
                    a2:3b:59:b0:9d:84:7c:b0:4a:11:89:f0:20:5e:93:
                    e0:52:84:c9:68:84:a4:f0:98:a7:9e:f9:2e:be:5c:
                    a1:18:dc:4a:42:01:bf:c5:e6:f8:97:d2:69:e3:ea:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:39:FA:CC:53:B0:D2:EE:CF:E1:D7:EB:D8:AF:A1:BA:33:69:29:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69926ca6-7ed6-38d5-bca4-9bfcde3a91f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:00:33:cc:65:1d:38:30:c3:f9:bf:9d:82:51:7f:6f:a6:bc:
         bb:6c:78:e8:ae:d3:6b:ff:84:10:22:05:78:ac:89:4c:dd:d1:
         9b:b5:b3:38:57:c2:f4:56:74:02:18:0b:fa:79:36:b0:43:17:
         07:8f:d5:d1:3f:17:9a:4f:52:2f:ca:71:2d:01:df:86:99:e3:
         23:1a:73:53:2e:90:5c:e8:54:38:a3:54:db:d9:39:9f:99:31:
         ef:36:ce:10:e3:43:42:66:23:79:2c:d8:c8:8c:5f:3e:16:25:
         aa:80:ba:ac:70:1a:69:23:fa:33:a5:55:b6:ff:6f:f2:61:a0:
         68:b3:d0:e3:75:4c:31:76:c6:ba:f5:ae:1f:3e:3a:61:e1:db:
         b1:18:71:da:05:3b:c4:1f:a7:59:ab:00:0e:08:b9:00:90:a8:
         e7:29:03:81:cd:fd:1f:66:b8:c8:ac:3c:e8:8e:04:1b:88:9a:
         fb:a1:70:41:de:25:3d:d2:80:74:0d:89:a6:e3:db:c8:9f:ad:
         b5:84:61:34:ed:18:73:0f:4a:3b:f3:4c:79:b9:0a:e3:71:ee:
         a9:1b:ec:b6:19:36:ac:d7:dd:fd:91:59:66:e9:83:ab:49:a0:
         eb:41:ae:6f:6b:f4:a9:e7:4d:9a:60:14:cf:00:94:d3:c6:96:
         63:10:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:14 2025 by rpki-client