Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a97f85-b799-3662-a6f4-654b953fc63f.roa
File:                     25a97f85-b799-3662-a6f4-654b953fc63f.roa (raw, json)
Hash identifier:          vH8V/SEJmD6x0/TT2l4+PvP2Zvk8rmLz0VY+GTrWCzo=
Subject key identifier:   59:EA:C7:D7:B9:5B:90:D8:31:32:40:6F:E0:2E:7F:94:44:D1:52:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E22A5A4E0D07E640AC900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a97f85-b799-3662-a6f4-654b953fc63f.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        69.142.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:22:a5:a4:e0:d0:7e:64:0a:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=423c8137-511f-4f17-b660-e28e3362791b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:c8:50:43:80:f1:31:46:9a:c0:b4:37:5d:
                    0e:88:11:70:9b:15:62:e5:84:ae:1b:53:f6:a8:23:
                    56:a9:72:21:57:71:cf:c3:25:49:3d:c8:87:57:0a:
                    8d:96:4b:59:e7:a3:bc:b8:fb:1a:e8:a0:22:80:5e:
                    d0:84:1b:75:5e:fb:a6:b9:4f:9c:b1:51:e6:30:dc:
                    be:80:59:08:56:27:a0:16:f8:b7:f6:1d:ed:92:98:
                    5d:e6:24:05:dc:15:30:cd:29:7b:5f:9d:69:36:85:
                    e2:c2:77:9b:5f:c6:18:a2:cf:66:b2:49:d4:c4:2c:
                    84:31:7f:37:7d:bc:89:7b:55:a2:c3:f0:88:c8:88:
                    74:30:0a:5e:69:49:f6:c4:d0:26:f7:cb:10:91:94:
                    55:76:9a:23:00:79:9c:52:3a:82:37:30:7e:a6:0c:
                    c1:19:ac:40:90:eb:ab:73:f8:b6:cc:57:b1:e8:8d:
                    5c:70:01:0e:bb:43:34:43:df:db:9e:50:d3:fb:21:
                    da:a6:27:fc:86:64:b1:ea:f4:4f:24:72:95:6b:3e:
                    fc:95:b8:f6:33:93:3b:62:69:85:44:09:89:d7:ff:
                    fb:3d:05:88:d7:a1:d4:42:7d:bd:1f:4b:53:c2:d5:
                    2b:6a:6a:0c:24:5d:45:72:44:2d:33:54:93:ef:e0:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EA:C7:D7:B9:5B:90:D8:31:32:40:6F:E0:2E:7F:94:44:D1:52:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a97f85-b799-3662-a6f4-654b953fc63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:f6:ab:cd:6a:43:8a:bb:30:69:ac:96:73:a7:50:5b:bd:
         09:f6:1b:f0:84:57:b0:57:c9:ef:7a:ac:01:6e:d1:47:6f:3d:
         30:58:43:f6:d1:c1:03:05:1c:a1:59:3f:36:d5:ef:7c:0d:3e:
         ec:d4:29:74:aa:fb:2c:07:d4:59:5e:ee:95:ff:42:3b:5d:45:
         24:47:bc:ad:c5:6f:b9:17:2f:b4:37:f0:75:33:d1:f2:28:f9:
         e5:11:7e:ff:04:5c:6d:12:30:3a:ce:8b:08:34:df:80:4d:28:
         f1:c3:90:53:94:51:e0:ac:92:45:4c:e1:75:8a:f4:12:15:25:
         3b:02:10:07:12:80:a4:36:75:fc:1d:26:2b:7e:c4:4d:3c:5d:
         db:f5:58:df:ad:f0:9d:3f:37:b4:63:e1:37:23:ce:ce:d0:6b:
         3c:97:03:a6:11:a2:93:bd:07:50:9a:95:b9:cd:7c:a7:f4:eb:
         23:e3:cb:d0:06:b9:d0:37:3e:1f:c2:73:d2:69:45:60:3a:56:
         89:03:06:1a:42:85:05:55:60:43:f7:92:14:db:cb:58:e6:59:
         13:ab:2a:fb:1e:1d:1f:1d:78:6d:a2:c9:a9:13:6e:de:b1:8d:
         4c:0c:21:cc:15:a2:f8:d9:ea:d2:e8:7b:bb:7a:6b:89:96:b1:
         70:ba:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:34 2025 by rpki-client