Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e933d057-ecba-343a-b296-defb404b9834.roa
File:                     e933d057-ecba-343a-b296-defb404b9834.roa (raw, json)
Hash identifier:          GmakBYxTk1uGv6W5qhherz4Lq5j3a3ncwO7wNqCeUx0=
Subject key identifier:   44:7B:38:1C:81:57:3B:A3:B4:6E:63:44:E9:12:F4:D0:97:25:1D:F1
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285848CC7B9397CF4DC56BC740B330
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e933d057-ecba-343a-b296-defb404b9834.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        161.69.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:93:97:cf:4d:c5:6b:c7:40:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=c72b3cef-6c89-44e4-9718-7b28e0d01f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7c:65:c4:5c:21:95:2d:62:01:e8:96:1e:2f:
                    ab:3f:a2:71:89:61:ee:20:b4:89:21:d8:5f:1e:89:
                    2f:48:05:f4:eb:87:d5:b8:3a:84:f4:34:64:40:b8:
                    74:3c:da:09:1a:27:71:f4:92:fe:8c:b0:05:f1:4b:
                    dc:7b:0f:da:cd:05:d2:4e:d1:98:50:18:3a:5d:eb:
                    ec:75:d0:1f:ba:f4:30:03:a0:b2:b8:c8:30:3b:7e:
                    08:78:f8:e6:72:37:fe:ad:58:33:f9:2e:0e:33:cb:
                    15:46:59:29:77:9c:90:49:94:91:d0:9c:0b:98:f9:
                    e9:2e:a2:6e:7c:59:13:c4:3a:80:9b:ef:8a:f1:95:
                    dc:db:b5:cb:00:77:bc:c4:d6:8a:00:34:75:69:73:
                    0d:95:0d:ac:7b:fd:fe:25:ac:30:e4:07:08:d2:dd:
                    3d:6e:be:ff:63:28:ad:4e:17:16:e0:c6:54:59:ed:
                    1a:b1:62:ad:2d:b0:48:3e:a2:d4:43:d7:49:54:67:
                    81:81:17:ef:7c:b0:29:e4:57:d7:4f:fd:20:af:3e:
                    c2:56:b7:ba:de:c8:6e:e0:2a:ad:f3:92:2a:f3:45:
                    6a:c5:e2:25:7c:c3:d6:52:9a:88:e4:84:3e:7a:e9:
                    68:36:ff:9a:a2:7c:3c:2a:c7:35:74:3f:da:15:d6:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:38:1C:81:57:3B:A3:B4:6E:63:44:E9:12:F4:D0:97:25:1D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e933d057-ecba-343a-b296-defb404b9834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:11:af:cf:9b:c5:8e:2f:53:a5:57:03:5d:e0:ae:38:57:
         76:53:49:b7:0e:c7:cd:6a:3a:5b:16:36:67:8c:12:63:b6:c1:
         bf:45:0e:03:f4:8e:a1:67:ad:a6:4c:cb:db:21:09:d2:8f:cd:
         6d:b7:53:34:20:f4:5f:37:0b:c9:da:b1:e2:bf:b7:cb:4a:b4:
         7a:42:36:54:4c:9a:16:d0:9e:27:2e:7c:6d:ef:9f:41:6b:b6:
         b6:4e:d2:7f:a6:3c:21:83:6c:31:4c:58:df:06:be:55:89:ff:
         e0:61:52:19:59:00:59:5a:44:60:bc:7e:0d:e4:de:8f:d2:d1:
         34:86:c8:b7:d6:f4:c2:eb:20:59:23:f4:f2:42:d2:de:32:07:
         ac:60:c5:c2:ce:84:7a:cf:a7:9d:ef:f7:75:62:ae:7a:60:4e:
         d7:52:7d:43:ac:b2:36:e8:a3:c2:7a:98:2f:95:6f:88:07:3b:
         6b:e4:e7:49:f6:fe:db:65:9c:fb:6b:1a:2b:55:a0:2a:b4:b4:
         05:54:c4:8c:8b:99:f1:22:5b:fa:de:6a:89:9d:bf:8e:a6:e9:
         0f:af:8b:eb:c3:48:5d:4b:9d:9b:38:13:cb:17:e8:39:b1:6b:
         c0:42:45:1f:b6:4f:ac:e3:cb:78:3b:e4:b9:69:64:de:70:da:
         42:b3:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:05:19 2025 by rpki-client