Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/508b7723-765b-332c-b599-9956e35c3860.roa
File:                     508b7723-765b-332c-b599-9956e35c3860.roa (raw, json)
Hash identifier:          ldqeFFK9oICUB05Xw+quFdjwAao0aVNlLgQ/2bkaYPU=
Subject key identifier:   6D:91:1E:A5:4A:0D:41:6E:B4:D0:A9:C2:D4:FF:57:B5:BD:0F:5B:C3
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F432858487CEB31B5F5248E365F87B040
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/508b7723-765b-332c-b599-9956e35c3860.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        69.52.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:31:b5:f5:24:8e:36:5f:87:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=2846bc57-083e-4a03-b606-7502f5f33671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:4a:9f:fd:1d:b5:13:cf:3d:b5:e1:91:75:
                    f0:9b:3b:bf:98:62:e8:a3:0e:b8:91:63:0c:94:39:
                    90:f5:c4:70:fd:be:e1:04:9a:57:37:91:7e:72:4e:
                    8b:a0:7f:d0:dd:4e:81:73:37:0a:93:1a:d0:fd:05:
                    8c:f7:ac:3b:c4:69:99:84:cc:0b:fb:a5:d7:a8:53:
                    75:32:6b:0b:ab:98:ba:72:cf:66:08:ea:bb:91:93:
                    9d:d9:13:2b:b6:2d:b6:f8:cc:77:43:34:90:a4:f5:
                    16:cb:34:7a:68:0c:53:ea:a3:dd:fb:90:43:99:0c:
                    90:63:3d:af:d5:fe:0e:04:a7:bc:c6:27:6c:89:f9:
                    d9:6b:56:0d:19:ed:17:75:c3:1e:3e:7d:0b:60:96:
                    e7:77:a6:fd:98:a1:9a:69:6d:a0:8c:a7:30:e6:a5:
                    69:87:f1:06:4b:70:cd:ce:05:e1:b7:1a:88:2a:ac:
                    cb:92:3a:a1:9f:e3:bd:af:5a:98:92:a7:61:84:d8:
                    49:f8:94:54:da:21:12:76:c5:c5:6e:a9:17:05:bf:
                    c7:60:dc:21:34:5f:61:49:d0:4d:fb:d0:83:01:f4:
                    31:f6:a3:2e:56:c6:bf:8e:e6:4d:8c:03:1d:7d:c0:
                    b2:af:90:cc:7c:b1:cf:13:48:9e:56:61:0a:c2:36:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:1E:A5:4A:0D:41:6E:B4:D0:A9:C2:D4:FF:57:B5:BD:0F:5B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/508b7723-765b-332c-b599-9956e35c3860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:72:0d:6d:6c:de:88:e7:3c:57:e4:04:ee:db:00:b4:91:3c:
         b2:2c:a1:d2:9c:a4:7a:b7:09:9e:ae:a2:29:74:3a:4c:af:9b:
         09:bb:ad:03:60:41:fe:2c:84:a0:0b:7f:dd:66:c2:93:c4:99:
         7c:b3:12:6a:0f:25:84:42:b5:a3:e1:f9:5e:68:52:09:00:eb:
         e9:d1:09:04:df:da:7b:8f:f4:69:c4:89:5e:08:1d:bf:32:db:
         d9:4f:d2:a9:90:87:34:f0:c3:84:0e:cb:0b:1b:96:31:f3:3e:
         1d:5a:19:40:2e:13:1b:3e:b5:65:c8:af:ab:68:0d:d0:55:2b:
         95:db:25:8f:aa:8d:9b:27:67:5b:f1:0a:b0:ce:5d:3e:90:35:
         5c:e9:81:85:49:66:1f:f4:f2:fa:f3:13:47:52:c8:f8:b1:9c:
         13:c6:56:20:ef:1d:6c:cb:e0:78:76:16:d7:7d:31:9e:23:eb:
         7a:bf:d2:9f:f3:ac:a6:e5:36:7c:36:fc:42:6f:f4:4e:d2:20:
         70:07:ff:40:da:4a:ab:82:9a:f6:5c:d3:3d:54:bd:c3:fe:cc:
         98:c6:c8:ba:30:de:7c:5a:a2:04:3b:96:1f:16:24:52:38:6f:
         cf:5e:75:ec:e9:47:27:0d:3c:5c:a0:d6:43:b5:b3:a1:39:93:
         eb:fe:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:28:55 2025 by rpki-client