Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc1ddec6-aa9e-3022-862c-f899edef20a7.roa
File:                     cc1ddec6-aa9e-3022-862c-f899edef20a7.roa (raw, json)
Hash identifier:          7ib8G/STPgKjL76Sr82E6mJypzXqplhwXyIPDndB1Iw=
Subject key identifier:   D7:1A:1B:F1:C0:6F:B8:7E:B8:28:EA:E5:47:45:3E:E7:8E:0C:B7:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF54CC9970FFC029A15B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc1ddec6-aa9e-3022-862c-f899edef20a7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        69.243.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:54:cc:99:70:ff:c0:29:a1:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=833f139e-9597-4486-aa75-2ede07c01ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:f3:fd:b9:05:c4:15:da:9d:8a:60:7b:81:
                    f0:08:5e:45:58:51:a7:b4:1e:00:bf:e4:44:b9:36:
                    b6:c4:28:22:c5:f0:e8:a7:1d:c8:98:7e:79:e4:eb:
                    55:a8:96:28:95:db:24:bb:7d:e3:74:76:7f:2a:47:
                    3b:89:ad:56:ec:d8:39:74:e7:9b:dd:38:06:20:7b:
                    ce:e3:70:e4:ca:cd:45:30:42:c9:18:e3:69:79:7c:
                    a7:84:71:92:52:0e:83:23:e2:2b:b6:6c:63:1a:da:
                    50:d7:dc:a8:2b:0d:72:f7:ca:00:0e:47:e7:05:09:
                    7d:98:9f:9b:8c:06:75:66:40:e0:39:77:2a:00:60:
                    b1:56:e1:ec:92:a3:12:fc:03:e1:37:0b:d2:48:17:
                    e4:2d:d2:33:49:a5:e6:c7:3d:43:83:64:96:57:7d:
                    14:0c:66:92:15:a1:f9:07:e5:70:16:8f:e4:54:99:
                    87:a6:6e:13:c2:ba:eb:18:60:da:0b:5f:7a:fc:7b:
                    f3:78:26:80:99:9e:c3:92:58:1a:3d:52:f1:d0:e1:
                    c1:c2:19:5e:75:4e:fa:11:6b:f7:4e:8d:14:d2:6c:
                    d1:ee:24:07:2f:c0:ec:8e:fb:8e:61:a0:59:91:55:
                    8e:45:d6:19:ec:ab:e4:33:76:2b:22:e1:19:bc:b3:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:1B:F1:C0:6F:B8:7E:B8:28:EA:E5:47:45:3E:E7:8E:0C:B7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc1ddec6-aa9e-3022-862c-f899edef20a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.243.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:66:9b:81:a6:4f:dc:22:1c:29:d3:86:94:61:fc:2d:11:08:
         2c:a3:c8:1d:d0:57:21:54:3e:36:77:e7:76:ff:65:d1:82:0c:
         0f:da:eb:b8:d7:74:c2:c1:45:a7:1b:22:47:86:92:ed:4c:02:
         58:1c:ae:03:be:d5:32:d3:36:bc:b7:f4:7a:b1:e8:07:8e:8b:
         0b:3c:62:c7:1e:a5:b2:56:f9:81:c9:42:94:6b:21:37:d0:90:
         e8:c3:64:f8:65:97:bf:3c:e7:5f:80:aa:be:4f:82:a6:9c:a7:
         ec:ac:f0:61:15:39:cd:5e:85:2e:4d:da:a8:f3:0e:5c:a9:a5:
         46:25:37:aa:24:f2:f3:49:0e:b9:1c:ab:d0:0d:c3:44:4f:96:
         30:52:0b:7c:5c:9c:73:55:ed:21:cc:82:0d:39:15:c6:b9:c0:
         63:64:a2:33:5a:bd:e3:bb:d5:f0:3f:83:6d:0e:c6:c4:01:37:
         10:45:eb:42:4c:53:45:e6:a0:09:35:da:d6:30:2e:62:d5:24:
         ad:ff:b2:c9:20:f3:56:d2:d7:f4:f5:27:ec:c9:11:7a:8a:5e:
         83:ce:67:cd:f3:7b:57:be:dc:78:b3:e2:04:76:be:ea:c3:80:
         e8:e2:d5:31:27:75:96:bc:09:e1:43:b1:87:ba:30:7a:fd:59:
         07:45:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:22 2025 by rpki-client