Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/039689ff-53a4-345b-9751-463f0d8d858c.roa
File:                     039689ff-53a4-345b-9751-463f0d8d858c.roa (raw, json)
Hash identifier:          d3+72VUokx1s7fPADEhKgAXsW9clM9I5h3jTR8VJWtI=
Subject key identifier:   EA:F8:CF:32:A4:9E:D8:B1:54:7D:D3:0F:25:24:70:8B:A5:D0:03:CE
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C43DA145C9E93E98B2AB5880
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/039689ff-53a4-345b-9751-463f0d8d858c.roa
Signing time:             Tue 04 Feb 2025 03:09:30 +0000
ROA not before:           Tue 04 Feb 2025 03:09:30 +0000
ROA not after:            Mon 05 May 2025 02:09:30 +0000
asID:                     14813
IP address blocks:        69.73.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:3d:a1:45:c9:e9:3e:98:b2:ab:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 03:09:30 2025 GMT
            Not After : May  5 02:09:30 2025 GMT
        Subject: CN=6bf4f705-8adf-4c0e-8ae4-16f4c664ada6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:01:2b:97:55:b2:e9:f5:f6:90:67:39:74:
                    03:bb:57:21:89:b3:b3:0f:9e:64:e2:8c:bf:8d:26:
                    30:6b:46:cf:27:cb:d5:eb:f3:74:10:e3:a0:1f:e7:
                    4e:d3:e7:4c:f2:ff:54:93:95:80:a9:32:53:9a:36:
                    ec:e8:72:9c:6a:3f:ae:e9:ec:64:e0:5d:cb:f5:ff:
                    d7:9c:f4:74:98:9e:00:c1:b9:ef:90:b2:5d:c7:d4:
                    c5:95:06:43:1d:46:91:47:63:cc:6d:c8:1c:7e:64:
                    f5:e6:aa:22:57:d6:5e:4e:22:79:08:d4:3b:77:cc:
                    2b:e3:75:9a:86:6b:76:b0:bb:8b:a6:a4:78:83:49:
                    bc:01:e3:9c:37:0f:58:df:25:85:67:7b:44:6c:4c:
                    36:a9:c9:22:4b:95:e5:70:8a:9d:71:15:19:ab:be:
                    cb:a7:82:63:9e:ec:bc:f6:a8:d1:a2:4d:32:78:44:
                    66:4a:8d:95:e6:03:3b:b6:35:b4:6a:ec:ef:01:d6:
                    48:de:a3:bd:8c:f7:a5:27:e6:e7:75:5c:7d:c0:43:
                    09:0f:bd:11:8a:31:65:bf:02:5c:07:a0:4d:15:95:
                    31:5d:2c:ff:04:12:98:12:3a:0b:8b:c3:18:4b:78:
                    94:ba:98:0a:0a:e6:4a:bc:ea:f2:30:e0:2f:4f:d7:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:CF:32:A4:9E:D8:B1:54:7D:D3:0F:25:24:70:8B:A5:D0:03:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/039689ff-53a4-345b-9751-463f0d8d858c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:3c:25:05:f6:21:9f:8f:59:fb:0c:fe:7e:10:8f:87:e5:
         24:e6:de:ce:c9:c6:bd:c0:e2:59:9b:bf:ba:82:57:d0:b1:c1:
         05:75:95:c0:db:ab:c4:07:b7:ab:b0:7c:72:5e:30:e1:57:bf:
         b5:85:eb:90:db:0d:ea:9f:03:6b:b9:4a:3c:7e:20:a4:24:d2:
         cf:b4:d7:55:90:46:e6:d2:8d:53:1d:39:66:fa:93:35:04:68:
         93:15:4a:0d:87:15:dd:3c:73:54:43:93:c1:93:4d:02:9e:3f:
         d2:e7:e8:c5:9f:32:bf:1f:2c:ac:aa:06:89:07:bb:a4:c3:6d:
         b4:ec:40:ae:a1:58:59:9a:7b:58:ea:2b:d5:5f:30:b4:94:bd:
         5e:77:ba:d4:b5:ae:fe:a1:a9:44:c3:ef:ec:da:b9:df:fb:8b:
         aa:f8:9c:b2:6b:d7:6b:98:f3:14:b5:a1:25:f7:22:3b:87:24:
         db:82:cc:9b:51:1e:8d:f6:40:99:f0:e0:bd:02:83:1a:e1:8e:
         e7:94:00:7b:0a:d8:99:04:10:a0:e4:75:7e:01:8a:8c:4b:7d:
         cf:00:33:5e:2f:72:da:62:84:54:cb:d9:29:be:20:ab:21:fa:
         35:c0:4c:85:49:12:57:2a:3d:33:f5:e7:61:b1:0b:ff:44:2e:
         75:77:4a:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEPaFFyek+mLKrWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDIwNDAzMDkzMFoXDTI1MDUwNTAyMDkzMFowLzEtMCsGA1UEAxMk
NmJmNGY3MDUtOGFkZi00YzBlLThhZTQtMTZmNGM2NjRhZGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVwBK5dVsun19pBnOXQDu1chibOzD55k4oy/
jSYwa0bPJ8vV6/N0EOOgH+dO0+dM8v9Uk5WAqTJTmjbs6HKcaj+u6exk4F3L9f/X
nPR0mJ4AwbnvkLJdx9TFlQZDHUaRR2PMbcgcfmT15qoiV9ZeTiJ5CNQ7d8wr43Wa
hmt2sLuLpqR4g0m8AeOcNw9Y3yWFZ3tEbEw2qckiS5XlcIqdcRUZq77Lp4Jjnuy8
9qjRok0yeERmSo2V5gM7tjW0auzvAdZI3qO9jPelJ+bndVx9wEMJD70RijFlvwJc
B6BNFZUxXSz/BBKYEjoLi8MYS3iUupgKCuZKvOryMOAvT9e7+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOr4zzKkntixVH3TDyUkcIul0APOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDM5Njg5ZmYtNTNhNC0z
NDViLTk3NTEtNDYzZjBkOGQ4NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUn4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKM2PCUF9iGfj1n7DP5+EI+H5STm3s7Jxr3A4lmbv7qCV9CxwQV1lcDb
q8QHt6uwfHJeMOFXv7WF65DbDeqfA2u5Sjx+IKQk0s+011WQRubSjVMdOWb6kzUE
aJMVSg2HFd08c1RDk8GTTQKeP9Ln6MWfMr8fLKyqBokHu6TDbbTsQK6hWFmae1jq
K9VfMLSUvV53utS1rv6hqUTD7+zaud/7i6r4nLJr12uY8xS1oSX3IjuHJNuCzJtR
Ho32QJnw4L0CgxrhjueUAHsK2JkEEKDkdX4BioxLfc8AM14vctpihFTL2Sm+IKsh
+jXATIVJElcqPTP152GxC/9ELnV3Sns=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:14:00 2025 by rpki-client