Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d49ff543-f7fc-3a70-9198-60862052f138.roa
File:                     d49ff543-f7fc-3a70-9198-60862052f138.roa (raw, json)
Hash identifier:          2OozkcmAvZjXdC5KQTXi7oyIWL5OiH2R+mifnFTn7BM=
Subject key identifier:   92:B5:28:EC:52:08:54:65:36:8B:AB:F7:D8:32:12:6B:C0:51:C6:5B
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858492184047872D4210A135BBEC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d49ff543-f7fc-3a70-9198-60862052f138.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        104.244.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:04:78:72:d4:21:0a:13:5b:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=dfe3df6f-8eb2-455d-8c3d-d6d39d85abfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:94:5b:6d:ed:f4:78:33:c0:33:9b:d1:4a:
                    fa:3b:0c:ec:40:72:b3:77:de:4c:8b:a9:c4:82:ff:
                    f7:c6:f7:7c:e1:5f:9f:ad:fe:00:9e:36:e3:35:04:
                    24:64:b1:6e:0e:16:b5:f8:71:7a:1e:55:46:6f:4a:
                    8c:3e:89:32:39:b4:fc:1e:dc:7c:4f:15:f7:da:f6:
                    9d:fe:33:b6:b9:69:5e:e6:37:31:ad:11:5d:8f:0d:
                    84:f3:a6:a6:c8:4f:65:83:dc:67:b1:6e:54:61:37:
                    fa:a0:2c:8a:59:08:19:a5:c2:44:30:03:9d:21:6f:
                    7c:54:4f:e4:0e:f5:b5:b2:ad:ca:48:66:de:56:ff:
                    fd:39:21:8d:c0:f3:46:f0:9d:63:f2:5b:0e:20:3b:
                    03:4c:38:e6:e5:08:d1:1b:f7:b0:67:05:84:35:a0:
                    c9:83:5b:5f:4c:e6:06:ca:8c:66:15:9c:6e:57:5b:
                    bf:ea:9e:f2:60:6f:0c:83:f0:23:0f:61:82:c3:21:
                    aa:89:7d:23:12:f0:58:a0:5d:3d:c3:19:39:1b:8d:
                    35:2b:c9:2f:51:18:3a:56:b2:14:d2:2b:3a:26:0d:
                    5f:b3:65:19:80:50:bc:66:ce:51:85:15:ca:8b:6e:
                    73:8a:78:90:56:87:d9:cb:55:e1:30:bc:19:13:46:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:28:EC:52:08:54:65:36:8B:AB:F7:D8:32:12:6B:C0:51:C6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d49ff543-f7fc-3a70-9198-60862052f138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e8:94:62:f8:04:1b:0e:02:12:99:9c:09:6e:50:cd:f5:e0:
         53:78:3d:c0:9c:6a:3a:ca:8c:06:bd:36:3a:8b:92:c3:70:1a:
         c2:f6:91:72:86:fa:1e:ed:1a:55:a8:93:f2:d0:38:41:d0:c9:
         56:36:b5:a3:24:42:ed:3f:10:ed:2d:41:aa:52:0c:f1:e1:94:
         0c:20:64:e7:b0:5a:6b:de:8c:2e:f8:ca:49:60:74:60:74:45:
         1c:a4:8e:77:9f:51:8f:ab:7e:dc:fe:eb:b2:5b:12:72:d6:8e:
         51:8c:d3:67:84:69:35:50:72:7d:1e:46:79:d1:ef:93:0b:2b:
         18:64:f0:ab:eb:dc:83:4c:79:15:d0:74:1d:b7:29:ea:83:11:
         7a:c0:1a:fe:83:97:56:b0:bf:e8:57:b1:37:18:88:68:77:a9:
         a3:d5:33:ef:15:87:e2:51:3d:35:49:4c:b4:17:bd:c7:a8:f2:
         a2:d1:e5:17:24:a2:b0:ac:6e:bb:6a:ea:63:49:fe:c4:e2:9b:
         ea:6f:01:23:ac:53:0e:98:21:24:b5:92:0b:c0:99:aa:c2:1a:
         74:47:1b:70:a7:d7:05:36:5f:52:9b:f2:2e:9b:13:b6:f5:c3:
         a0:6e:cb:04:2b:f4:be:86:30:ca:91:14:4b:65:8b:11:57:54:
         2d:93:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:54:25 2025 by rpki-client