Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa
File:                     4a5442e4-4342-3d66-a184-657b4ad68e47.roa (raw, json)
Hash identifier:          rrpnqBmo76MCRAWRUwVzkxcV08Mf93dj0Rpfe4kkKcM=
Subject key identifier:   BC:6D:D7:08:AF:C1:CE:A4:D6:5C:BA:F0:BE:44:F9:23:CF:DF:2D:D0
Certificate issuer:       /CN=b69046d2-7700-4ec6-9370-cf52edb1555b
Certificate serial:       010D0C9F43285849203C1847BB0C67D73BD5DC90
Authority key identifier: 39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     14267
IP address blocks:        132.253.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:18:47:bb:0c:67:d7:3b:d5:dc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69046d2-7700-4ec6-9370-cf52edb1555b
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=6598227b-9b8b-4721-8456-c8ad11694730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:c8:ac:a1:0b:87:72:7a:c5:89:4f:7e:d6:
                    4a:fb:4c:c7:aa:25:bb:04:24:64:05:05:4f:6b:94:
                    0e:ae:db:02:ca:a9:37:8f:cd:89:ca:cf:05:6c:7a:
                    65:d3:d2:c6:b1:c8:f6:d4:e8:da:6e:50:e8:03:dd:
                    6c:a5:9d:a8:ba:a1:da:1d:77:70:e4:96:94:39:4b:
                    11:dc:b7:bc:c5:e1:4c:16:d4:fc:89:e6:ce:30:35:
                    82:f7:1e:e0:13:8e:d1:eb:40:dd:13:03:95:de:09:
                    56:d4:9f:2e:5e:4e:c7:71:cb:3d:40:be:af:33:df:
                    41:87:65:9c:24:cc:7c:85:40:a9:47:85:b6:43:e7:
                    70:19:f5:67:b9:0a:19:84:e4:42:3e:c1:15:d9:b4:
                    2d:1b:1f:9d:da:b8:b1:6b:7f:66:18:40:d1:9e:96:
                    47:e1:fb:9c:0f:9d:8d:14:ec:2b:17:d1:a5:7d:15:
                    a4:e3:fa:cd:a2:ed:0e:af:86:7f:f8:85:62:b8:42:
                    81:22:3b:44:38:b1:62:41:c7:1d:29:b8:5d:98:01:
                    54:de:62:a9:be:4d:bc:0a:e9:86:db:b7:f7:e3:69:
                    c7:2f:58:2c:7c:06:da:c0:f2:64:3f:5c:24:98:b8:
                    14:f3:ad:79:c3:6d:2b:9b:8f:32:02:1e:d6:b0:dc:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6D:D7:08:AF:C1:CE:A4:D6:5C:BA:F0:BE:44:F9:23:CF:DF:2D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.crl

            X509v3 Authority Key Identifier:
                keyid:39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d9:14:18:6d:53:79:6c:21:f6:42:a6:d5:18:31:4a:f2:b3:
         12:b9:e6:30:bc:21:9e:95:15:d0:70:31:bb:ed:2c:4f:56:86:
         6a:18:10:81:db:b2:5a:ca:b3:7a:2e:3a:37:5a:e2:1c:74:10:
         55:1f:5f:76:fe:61:48:9d:ba:d6:8a:0c:87:54:e8:6f:56:a9:
         d6:27:cd:69:c9:20:92:02:5e:c6:2e:3a:ea:da:e4:5e:30:f3:
         5e:da:f2:6f:57:ea:3f:a9:b4:7e:72:6f:a0:89:d4:a8:82:b7:
         c7:f3:d5:33:18:ed:22:47:17:d9:4e:a1:5c:fb:ab:1a:5f:4e:
         c5:15:83:a7:a2:af:33:1c:2b:37:20:a0:c9:9b:05:f3:45:0c:
         84:2a:9e:12:6e:c7:01:6a:d0:2d:3f:17:66:f8:8a:bd:7c:f3:
         7b:d0:f9:dd:e6:7b:c2:4f:21:54:1f:66:9f:87:4b:4e:8c:ac:
         1f:fc:16:26:d4:a8:6c:72:3c:e5:1b:2f:9a:62:22:9d:4e:b0:
         46:88:f0:0a:e1:6a:01:3c:46:70:69:5e:12:b8:d4:bc:69:db:
         45:98:ed:d2:e9:b7:5f:97:b9:42:8d:4b:6c:d7:83:c2:88:4c:
         a6:5f:74:ad:0b:27:21:7b:16:8b:94:ab:b2:5e:ac:72:15:37:
         ea:a4:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:33 2025 by rpki-client