Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/dc72b90c-8967-3a03-99e5-6598e2a93245.roa
File:                     dc72b90c-8967-3a03-99e5-6598e2a93245.roa (raw, json)
Hash identifier:          K4pLNEmmYKSiHtmW1+1z0JSafyzq8bbfiI9+1QrRfuo=
Subject key identifier:   39:1A:11:EB:22:92:F6:71:83:60:37:31:63:C8:2A:8E:6F:4E:FA:05
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F43285849552955E4298CBD6BDECAE1A0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/dc72b90c-8967-3a03-99e5-6598e2a93245.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     4540
IP address blocks:        69.51.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:55:e4:29:8c:bd:6b:de:ca:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=b6f85140-f542-4a6d-a56b-7fb2728c5a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:23:be:1b:13:29:97:03:8f:31:6d:9f:5e:
                    8d:c9:0b:79:80:3b:09:4e:ee:41:f1:15:53:ba:1b:
                    ea:4b:3d:37:96:80:f6:45:1b:ac:59:fb:86:7b:69:
                    97:ff:b9:77:64:47:4c:0b:52:5d:93:9e:ee:3e:2e:
                    da:e5:54:70:80:73:a7:20:a3:c8:74:c0:70:3e:71:
                    c7:7b:80:69:ee:28:73:e9:ba:b7:3b:82:43:95:21:
                    c4:d1:f6:c0:b4:b9:ed:2d:e3:20:eb:79:a7:94:3a:
                    2f:2f:2b:43:a1:6c:4f:45:8b:92:4f:6f:55:7f:36:
                    a5:6e:2b:a0:22:db:74:39:88:43:82:ba:ef:a2:76:
                    81:54:3a:2b:81:31:09:c7:06:11:2f:51:7c:f1:9f:
                    bb:69:b1:ea:09:11:f3:a0:d7:39:ad:ec:ab:56:67:
                    2c:8c:a6:50:de:44:8e:60:3e:52:73:d9:28:13:5e:
                    07:bf:43:e7:37:37:00:64:f9:32:ff:5c:2a:10:21:
                    34:46:9c:98:15:31:68:99:61:2c:37:33:7c:1b:0a:
                    5d:d3:3f:4a:dc:bd:1f:1c:99:bc:b8:20:77:dc:ba:
                    d1:72:ed:cd:ad:8a:8a:85:41:22:1e:f8:15:59:c9:
                    b5:5a:5c:37:a3:e7:b6:c6:69:5e:ff:92:43:69:ac:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1A:11:EB:22:92:F6:71:83:60:37:31:63:C8:2A:8E:6F:4E:FA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/dc72b90c-8967-3a03-99e5-6598e2a93245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:57:00:4d:03:6c:41:ae:0b:7d:e9:13:68:79:e1:30:5a:
         e7:47:ce:1d:54:6b:eb:da:98:d5:6c:1f:38:3d:87:86:23:a1:
         6e:9f:e0:ac:e2:fd:4e:cf:3b:c3:44:81:f0:f7:ae:e1:5f:39:
         28:3c:a2:56:42:48:81:6e:2b:85:48:fc:56:a2:27:87:9c:ff:
         7e:17:5b:2d:54:6e:b1:10:09:85:3d:1b:8b:a6:d3:20:f7:67:
         5e:e1:cf:28:55:5b:2d:97:6a:24:5d:ce:79:13:df:1a:5e:73:
         32:63:a6:49:a6:06:d2:62:1f:39:f9:86:b7:b1:2d:01:8e:4c:
         f9:25:8f:35:0e:fb:6b:9c:55:30:6a:24:eb:07:d8:d2:c8:d5:
         9f:b8:f6:23:fe:6e:76:27:68:5e:d0:17:61:f3:11:44:da:50:
         6c:1e:20:1c:07:b0:72:33:4d:4d:1f:80:6e:8a:86:5d:36:c9:
         87:c6:6e:98:e9:4f:6d:33:31:7a:84:f8:9b:85:ff:2b:3c:4c:
         e4:8f:8d:2b:c2:d6:e6:b5:31:94:7a:10:86:d3:ba:6f:f8:23:
         eb:14:84:ce:c9:73:a7:fe:1b:02:71:fe:dc:4c:30:99:f6:b7:
         10:9a:17:f8:fc:23:20:8b:6e:c4:80:b2:4a:2c:6b:ec:f9:74:
         bb:e5:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:34 2025 by rpki-client