Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40280717-1f3b-3543-add2-b53861120466.roa
File:                     40280717-1f3b-3543-add2-b53861120466.roa (raw, json)
Hash identifier:          vOZlvWx+K6x4mcGRefP3DDQY2igCMqFLuuZtxst1A80=
Subject key identifier:   21:4D:76:ED:8A:92:1F:20:74:BE:AB:53:BF:47:65:5E:00:55:8E:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB090C63C1FFD69F05F7500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40280717-1f3b-3543-add2-b53861120466.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        69.253.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:90:c6:3c:1f:fd:69:f0:5f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=4cd49bf6-dd55-4087-b617-b623f8cff126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:92:ee:e4:a2:ed:59:19:0b:e7:01:45:6a:
                    51:87:28:3e:5c:f5:72:b0:de:ab:14:b5:e6:bb:7f:
                    11:46:ea:c3:f1:fe:4d:76:22:89:06:1c:7b:ec:48:
                    51:cb:d9:bf:db:53:b3:03:15:47:7d:88:2b:2e:9c:
                    cf:2c:89:ea:2f:5d:84:80:97:4c:ff:34:c6:d7:5b:
                    3c:c9:71:72:82:7c:c0:8b:3f:1c:1b:5a:e1:14:3d:
                    9e:64:b0:35:64:6c:68:5a:ab:d6:01:b9:64:b6:18:
                    c8:19:e0:d1:ef:1b:dc:f2:88:be:5e:3e:fc:83:67:
                    fd:d4:6f:53:62:81:d8:cd:26:d1:38:a5:81:68:68:
                    28:7b:58:cb:df:b8:9a:47:5e:75:d5:3e:4e:05:68:
                    92:54:04:91:5a:67:f3:ac:2b:77:3a:06:a4:29:9f:
                    8e:e7:a2:fd:e9:c0:91:65:6d:ed:69:72:2a:69:fd:
                    2d:6e:b3:fa:ee:00:dd:3f:d2:c7:14:82:6d:73:b1:
                    d9:c7:13:6e:9f:81:c1:9d:c1:98:2c:b1:44:37:d1:
                    be:d4:08:0c:c5:18:85:b6:1b:b6:6c:42:bc:2b:92:
                    48:6b:e1:9e:53:82:1d:32:85:14:74:7c:ed:77:9e:
                    70:eb:b5:84:d9:ca:03:d7:4a:8a:e4:eb:af:72:9e:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4D:76:ED:8A:92:1F:20:74:BE:AB:53:BF:47:65:5E:00:55:8E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40280717-1f3b-3543-add2-b53861120466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:ac:85:fc:c8:98:f9:35:98:9e:3b:65:d2:a4:86:dd:d2:
         9d:bf:d8:9c:b7:d5:05:92:05:c1:40:26:83:27:bd:88:8c:a1:
         bd:d5:e3:54:6a:9c:03:14:9b:31:b7:42:8a:f1:86:60:09:3a:
         94:a4:d4:6a:72:35:f8:28:dd:a2:1c:b2:8a:78:1c:9e:b0:c7:
         b2:35:4d:60:2d:07:24:56:1c:70:f7:2b:4c:38:48:b2:26:87:
         86:f3:81:65:de:8f:13:3d:b8:cf:9f:85:03:a3:a7:3d:d4:57:
         38:e3:93:63:20:d5:45:d5:33:d5:40:c2:00:dc:c0:a0:21:06:
         01:95:eb:c0:e3:80:18:13:3d:7d:3d:cb:cc:1a:e7:a7:65:48:
         07:19:37:52:ff:0f:92:da:2d:8f:25:fc:56:f5:05:e2:d4:ce:
         e4:50:c0:4e:10:40:2b:44:df:a8:a6:05:06:92:45:a1:10:e9:
         b4:6b:2a:7c:ca:93:13:99:c8:8d:b2:cd:73:13:49:4b:75:36:
         16:73:c8:8e:1c:c4:0d:b0:62:ab:23:75:9f:ea:9a:4f:d3:05:
         5e:81:e6:93:94:87:b0:40:cb:1c:b6:a5:1d:65:49:3e:25:3b:
         12:bd:af:8e:07:c7:f9:ea:9b:9b:90:b2:2a:d4:c1:36:66:9c:
         09:31:86:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:21 2025 by rpki-client