Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa
File:                     f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa (raw, json)
Hash identifier:          hZIL3vVuPvdCan0sh5Gq3qwP7z2QuhgK5iorMfoYlz8=
Subject key identifier:   1E:E5:33:9F:A2:33:74:CB:F7:47:9A:FB:5F:8E:4B:83:A6:CD:F9:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CB9AB545CCC6A69F41280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        69.136.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:b9:ab:54:5c:cc:6a:69:f4:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=76a23af8-41bc-4e59-b63f-a9afcb6e568a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:bb:b0:cf:74:0f:ff:0c:13:0a:f0:53:88:
                    13:0f:71:fc:16:4c:f2:df:64:72:3c:63:23:61:a4:
                    a7:62:17:bd:d7:ac:30:35:65:7b:21:ad:32:6e:7a:
                    85:d4:2e:b5:55:26:7e:7a:30:7f:63:cc:8e:e4:69:
                    77:ae:d8:ec:bb:33:2d:87:22:cc:16:5c:ec:25:63:
                    8c:0a:62:25:46:05:ee:4a:bc:34:79:89:4a:6c:84:
                    fa:5f:d5:bf:5e:4f:ad:50:cc:2e:3d:ea:c3:5e:2e:
                    0a:78:a0:5c:d0:92:a6:fe:2d:22:85:80:70:a9:dc:
                    62:25:64:1f:ea:3b:9c:b1:76:e7:09:40:dd:ee:fb:
                    8a:a5:38:34:4c:32:2f:4f:54:8e:62:4d:3d:c6:b1:
                    c4:5f:a1:83:c8:1c:95:b0:7d:a5:1e:9b:ba:47:24:
                    15:10:bd:94:e7:50:e3:8d:ab:47:a5:1c:82:40:f0:
                    75:75:c8:0d:9b:90:4d:df:28:05:a4:29:71:0d:3d:
                    22:14:a2:89:37:10:9d:9b:06:81:ab:79:35:52:a3:
                    8e:22:21:c3:b3:61:be:4e:82:e3:3f:40:dc:47:32:
                    14:9a:aa:6a:19:55:cc:ce:1a:63:b8:7c:81:8e:08:
                    45:43:ee:3c:95:07:7a:db:64:79:ea:11:e3:71:6c:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:33:9F:A2:33:74:CB:F7:47:9A:FB:5F:8E:4B:83:A6:CD:F9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.136.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:d7:ff:e0:d1:2f:d7:50:eb:1b:47:54:17:d9:9d:d7:14:39:
         32:82:b7:89:e4:df:4f:e1:a6:44:6b:3e:11:f9:da:75:c7:f3:
         ad:e3:c4:bf:cd:38:fb:23:f2:6d:a0:29:1a:77:67:02:cf:40:
         da:a0:54:0b:bd:ae:67:ae:74:b1:a2:10:d1:2e:bb:dc:38:61:
         0a:31:4e:c1:aa:68:da:9f:15:f1:9f:47:73:81:8b:f6:2b:67:
         fd:88:a1:56:f0:f1:ed:dc:f9:54:dc:cf:84:e6:73:3b:b3:49:
         81:6a:3b:aa:c4:08:e9:94:34:6e:d7:fb:ca:44:92:a7:8f:9c:
         76:77:1c:fe:53:84:2b:4e:62:4d:0c:1c:55:1a:b3:e8:48:36:
         08:3b:71:87:b9:63:7d:a9:5b:76:a9:ef:b1:7f:f8:6c:47:18:
         b2:23:44:50:5c:73:3d:a5:36:ce:9c:d2:d7:07:1b:c7:41:54:
         4c:ad:ec:6a:75:be:95:89:1a:f4:66:73:66:67:b2:6a:9e:a4:
         08:a4:7c:08:81:7d:80:b7:9c:b4:e2:e0:08:0d:61:fa:c9:56:
         bc:4e:a4:4f:b4:6a:6c:ec:9b:b8:f4:a5:4d:96:b2:14:5c:74:
         3f:0a:47:06:13:26:17:b4:fd:4f:d2:2a:68:95:16:ff:e4:27:
         14:2d:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:53:30 2025 by rpki-client