Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa
File:                     84370759-4ae0-3a58-8003-564fe29685a3.roa (raw, json)
Hash identifier:          5S5vVS8NR6Ov8I8+4BMxZK4yYqkqg8jSAsDmcYrNpyU=
Subject key identifier:   7D:4F:90:85:0B:EE:7C:4D:0B:22:92:33:F6:1A:F5:88:7F:36:A6:88
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858491D71617F7807D93969926030
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        69.40.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:61:7f:78:07:d9:39:69:92:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=735b0922-82ab-4e77-bbef-6bed582ffb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:d0:6f:90:b4:39:a7:0c:59:47:74:9f:93:
                    37:6a:65:e9:8f:c0:b2:b3:af:b3:c4:2f:fc:cd:17:
                    2b:c0:2f:2c:77:3b:d0:fc:8f:2b:fa:45:39:dc:8e:
                    63:19:0b:aa:08:56:11:c3:ad:59:02:50:e7:78:87:
                    5f:9e:5e:36:bc:4c:07:04:9c:ae:61:4e:25:d2:db:
                    37:45:c7:a2:b2:e6:fc:e7:a4:14:ad:04:e7:f5:f6:
                    a1:07:5b:8b:53:8c:dc:35:57:4d:12:d1:6b:f8:80:
                    63:4a:4a:4d:97:7f:4b:76:c1:b3:37:f4:d4:3c:42:
                    37:07:7a:54:f2:e8:89:03:2b:e2:f8:ba:9f:db:f2:
                    ad:88:84:df:e9:f1:68:79:5c:07:d1:0d:5c:4a:94:
                    0d:30:43:db:81:85:2a:42:f5:cb:aa:32:c4:38:a2:
                    0b:c0:b6:f0:76:b1:76:04:3f:8b:18:35:d3:b1:81:
                    cf:9f:98:6a:83:ba:40:09:09:be:9c:f3:2b:96:37:
                    53:dc:2c:81:f4:81:a5:ec:41:fb:e0:36:3e:a4:30:
                    32:ff:b5:a9:ab:22:47:6d:9b:db:65:ab:48:02:d8:
                    d2:b0:a3:37:e4:a2:4c:f2:ab:f2:f7:b2:96:15:91:
                    87:cd:22:bf:f4:2e:88:a4:df:9f:61:e5:4f:18:18:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4F:90:85:0B:EE:7C:4D:0B:22:92:33:F6:1A:F5:88:7F:36:A6:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84370759-4ae0-3a58-8003-564fe29685a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.40.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:84:e2:a2:be:68:6f:a5:0d:64:c1:28:a3:67:b2:9d:61:
         b6:73:26:41:25:75:6b:6c:7e:67:9a:bc:82:ee:0e:8b:a1:30:
         cd:07:2e:87:e7:1c:3a:0c:f9:f5:f2:8f:dc:57:61:7d:80:7c:
         f4:3b:ca:26:1b:73:76:67:bc:bc:c1:68:71:74:f4:f4:0e:b8:
         f9:eb:ee:38:46:9b:ba:33:b7:75:92:8e:3c:51:9e:be:0b:cf:
         1f:9a:36:21:69:cc:af:b7:89:87:12:7b:cd:77:d7:44:f8:c9:
         03:a2:25:39:91:d9:9e:8b:a3:3c:8a:48:32:13:a8:1d:e2:13:
         ec:33:d2:c7:51:59:73:59:a0:6b:c4:65:25:df:cf:fd:f6:ac:
         d4:4b:7b:c8:32:19:17:b3:01:5f:a2:2c:f0:eb:3f:44:c3:82:
         21:31:08:a3:9d:4a:20:03:65:d6:b0:68:d8:78:88:63:ab:9a:
         69:4f:ea:45:a6:d3:68:40:37:a5:b8:7b:99:36:d5:92:83:64:
         78:17:e7:03:9b:24:f0:5f:2b:6e:1a:2a:d4:98:f8:ad:b7:19:
         d5:e4:b5:3d:66:c0:81:8e:35:e5:75:b8:fb:d4:2d:2c:76:d7:
         a5:b5:0f:be:1b:9b:1f:f1:8f:a5:b5:27:19:84:bc:48:3d:f4:
         fc:d8:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:12 2025 by rpki-client