Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fab526a-edfa-391e-9bc5-148d4b72f4b0.roa
File:                     4fab526a-edfa-391e-9bc5-148d4b72f4b0.roa (raw, json)
Hash identifier:          EG9oaioLCK08GXEKSsxDN5HcC3d3HyNnj1XfvnKZ1Zk=
Subject key identifier:   B6:6C:C4:CA:A2:6A:5A:5C:6C:F8:63:67:B7:8C:C4:E5:64:18:44:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C35BC15E69692159995E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fab526a-edfa-391e-9bc5-148d4b72f4b0.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     13367
IP address blocks:        69.180.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:35:bc:15:e6:96:92:15:99:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=9861ab16-cb6e-4171-bcbb-40051540756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b8:a2:a9:55:b2:6c:54:ef:25:14:9c:4e:a3:
                    a7:90:3a:bd:41:47:13:21:e3:17:4b:f6:2d:eb:97:
                    38:29:0a:18:b0:d3:fa:90:31:f8:a5:51:99:a7:61:
                    c5:bc:50:b2:ca:36:4b:6c:8b:d8:45:5d:9f:cd:d3:
                    b2:87:d8:06:19:de:7d:b0:08:8c:69:90:c3:22:63:
                    27:e6:cc:b0:21:ab:a2:98:37:40:39:63:04:69:a2:
                    32:ac:ea:11:60:87:47:f3:7e:01:cc:56:e3:7a:30:
                    96:c8:f7:65:e3:a4:82:ed:4c:03:5c:c3:f6:89:91:
                    76:ae:49:7a:cc:bb:68:c6:3d:a2:29:44:28:31:aa:
                    98:72:b0:ea:c5:81:bd:b4:3a:12:75:e1:71:b3:92:
                    2e:0c:ad:e3:75:88:6c:c6:62:99:8d:18:fe:8c:e6:
                    89:03:73:97:54:b7:0c:ed:06:bc:ba:d8:d8:b1:d2:
                    50:6f:df:43:f4:8f:fd:60:7f:7b:82:dd:01:ad:dd:
                    b8:c0:19:ab:18:cd:0a:66:9c:94:27:dd:23:0b:92:
                    03:c0:03:64:46:a7:31:68:b9:af:a3:cb:5a:b1:2c:
                    f5:42:06:99:c8:21:a1:99:8b:ad:3f:a6:06:3e:6b:
                    01:19:95:58:04:93:a5:88:e2:19:7b:49:8a:68:a6:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:C4:CA:A2:6A:5A:5C:6C:F8:63:67:B7:8C:C4:E5:64:18:44:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fab526a-edfa-391e-9bc5-148d4b72f4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.180.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:ca:a7:84:d9:20:a0:1b:80:ab:8a:42:ef:d0:5c:9a:ec:
         21:2d:7b:9e:42:1d:76:e7:a0:08:b9:ba:13:d4:e6:d9:81:97:
         a1:c7:52:ca:eb:53:f5:f1:87:38:63:11:ec:3c:fd:41:f2:64:
         50:24:85:be:61:5f:0e:c2:2c:8f:76:5b:09:5e:6d:a7:ff:d7:
         6d:41:d7:7a:5a:f8:bf:0c:e1:f5:76:f0:05:e0:bb:f4:16:d4:
         85:66:02:56:ad:f8:a8:74:30:49:a2:72:5c:99:a3:71:a0:da:
         48:40:6b:9b:86:63:7b:87:37:ab:f1:53:f1:d6:0b:c8:49:6d:
         a6:45:42:bd:37:41:01:54:74:7c:d7:22:cd:e9:df:f7:54:18:
         10:5a:0c:29:8d:57:3d:17:ff:7f:13:34:2f:8d:b2:ae:d1:09:
         bc:fc:e6:ea:58:76:ac:71:4f:9e:21:32:21:89:43:11:f2:f4:
         0f:45:7d:6b:37:2d:08:ad:33:2f:60:a1:eb:11:20:e9:5f:37:
         29:19:0c:83:73:51:8b:a0:28:57:89:52:62:86:7a:4a:7c:12:
         0a:2e:f3:b6:db:ed:ee:65:dc:42:94:a0:25:1e:f0:59:a1:ce:
         d6:38:88:c0:d4:2a:0a:56:40:42:57:54:5e:f3:54:ff:50:ad:
         bc:a7:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----