Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa
File:                     b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa (raw, json)
Hash identifier:          gnbV2KxEN2mC4B7s85I11O2SfBB3Z9wAJHVsmt4t53I=
Subject key identifier:   01:E8:69:6F:A5:7C:EF:17:78:66:E8:F5:83:71:AD:91:AB:44:E0:6D
Certificate issuer:       /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial:       010D0C9F43285848AF2B7A42B97308B3477CE080
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        69.52.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:7a:42:b9:73:08:b3:47:7c:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=360f6806-e43b-44e3-b4dd-e72e7f304943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:b3:3a:7d:82:99:7f:da:5c:b2:79:c2:a6:
                    c0:a2:38:ee:27:aa:bb:a2:2c:1c:f3:53:eb:eb:fd:
                    94:ca:2e:d8:32:05:2a:44:1a:37:ac:0d:bc:78:15:
                    ea:74:ea:c2:06:b5:b1:ed:f5:28:31:de:a7:74:85:
                    ab:34:db:ee:13:40:ef:c7:19:34:58:df:58:33:10:
                    f5:6d:23:da:99:52:b5:f3:7c:f7:2d:89:f4:66:5b:
                    85:a3:0a:23:42:5d:c3:db:b9:b8:21:07:69:5b:ae:
                    56:01:6d:8f:5c:ba:b0:60:60:02:95:17:be:cc:8a:
                    78:fd:d6:ac:25:13:13:cb:ae:fb:8b:c9:44:75:53:
                    6e:b5:dc:bd:26:36:f6:d8:14:84:84:ed:4b:4d:3c:
                    e7:52:69:7b:07:3d:45:88:c0:e5:f0:31:ec:40:19:
                    10:84:19:f9:e4:51:b3:48:91:8e:94:98:99:b2:8e:
                    6f:a2:56:f0:b5:54:38:80:26:f5:03:7e:0d:60:d9:
                    31:c7:73:7d:ea:03:8c:4e:37:34:e4:9d:f7:fc:06:
                    dc:f0:4a:13:7a:4e:0c:ea:3b:ca:b5:37:bc:34:49:
                    0e:0b:65:ec:b6:21:1a:3a:21:25:54:f0:7e:f9:cd:
                    82:2c:74:07:35:bc:67:e1:50:91:b6:d5:0b:4e:a8:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:69:6F:A5:7C:EF:17:78:66:E8:F5:83:71:AD:91:AB:44:E0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/b67a2dbd-b0cb-39ee-903e-0461eb4717a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl

            X509v3 Authority Key Identifier:
                keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:db:61:10:c9:8b:a2:5e:0e:34:d0:76:95:75:54:4f:a1:
         c6:de:77:bd:ac:44:0f:57:30:61:f9:df:b3:13:89:8c:d3:73:
         0d:89:36:ac:f1:c6:3a:c0:59:69:6c:75:08:27:a6:6e:f3:a7:
         fc:34:4f:8b:6b:c5:32:72:df:a0:de:5d:75:56:59:1a:e1:35:
         05:ed:64:dd:ed:d9:9f:54:58:61:66:e8:89:b6:d3:7a:27:fb:
         b6:cd:cc:3d:97:31:5c:af:67:c6:4d:ba:25:98:f0:a0:75:ac:
         55:8e:12:7e:a3:98:94:00:de:a8:54:5c:aa:85:d6:b8:7d:f2:
         fc:e3:35:03:c5:2b:8d:9c:51:b5:b0:a2:87:87:92:0d:ff:6c:
         62:f1:94:13:8d:70:14:a1:a9:cb:87:09:51:40:0d:60:2a:b8:
         54:c5:25:b0:eb:11:63:b0:35:42:d2:b2:f0:1c:65:ab:3e:d9:
         19:36:af:fa:d3:7a:a5:5b:87:8f:bb:96:83:f4:f0:49:5a:e1:
         bb:fe:3c:0d:98:dc:58:e0:90:41:f1:06:54:2d:a8:0d:21:c9:
         56:ad:62:09:3c:b5:8f:13:95:17:63:d3:28:93:8f:fd:0b:2a:
         4c:78:e4:bd:d8:51:68:43:a9:6c:e2:cc:40:7b:7c:8c:c7:0d:
         10:f8:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:03:33 2025 by rpki-client