Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa
File:                     fa2860a7-d29d-3110-bb18-5cced3c2733a.roa (raw, json)
Hash identifier:          oyfR0XVvChXVvWI+NxqSd/mMj/Xzl2GDbo5k4FSudUI=
Subject key identifier:   37:62:40:37:8E:C2:BA:19:4D:F0:BA:A0:89:F4:57:22:91:D9:73:12
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584898D607CE27AE9D13DE4F6800
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     205272
IP address blocks:        161.69.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:07:ce:27:ae:9d:13:de:4f:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=3907d435-1a8a-41e0-88e8-47da680371f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:31:39:d5:af:ad:50:3f:a5:29:1a:61:c2:
                    5f:9e:97:2e:ed:a6:d8:c9:b5:02:c5:7e:75:39:79:
                    41:0f:94:ac:0a:01:89:e9:06:03:0f:48:4d:f3:9a:
                    b0:ff:ed:a3:7e:ad:33:44:c2:8b:28:17:83:20:28:
                    e4:9e:f1:e0:0e:e0:5b:53:9c:6c:df:11:c3:a3:02:
                    94:28:82:3f:85:27:1e:09:79:f0:aa:b0:ef:50:db:
                    d3:94:ea:ed:29:bb:32:9b:a9:f6:ae:62:84:c2:83:
                    00:3e:f3:f8:22:fa:21:9d:a6:1f:cc:c4:48:99:d6:
                    2e:56:dd:38:b0:da:81:b9:c3:9f:c0:21:ba:2a:08:
                    37:15:50:df:10:5d:42:ef:5a:f4:28:98:ef:ae:71:
                    2d:97:1e:ab:2f:3c:8f:26:08:12:d5:60:6b:37:55:
                    6d:11:79:68:b5:03:d7:01:56:e3:f6:e2:d1:ab:0c:
                    47:1b:46:fe:fa:cb:f9:a7:6b:de:21:84:5e:73:77:
                    fe:8c:ae:c4:d4:b3:01:8d:38:61:75:5b:94:82:44:
                    2b:e3:20:f4:73:bd:df:fb:91:0b:c6:67:eb:4c:6c:
                    5a:36:bf:7f:ac:29:d3:48:92:a4:60:95:04:b1:b1:
                    8d:75:b7:94:71:04:bf:4d:d0:77:cf:e4:a8:e5:0f:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:40:37:8E:C2:BA:19:4D:F0:BA:A0:89:F4:57:22:91:D9:73:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:e3:95:17:87:8e:8c:ad:bd:7e:19:df:ba:12:ef:53:6c:
         6f:e1:1a:1e:f1:e7:9d:19:ae:de:2a:98:22:12:d2:25:15:fd:
         8c:b2:c1:23:11:c4:89:b6:f2:0b:bd:a4:3a:3d:be:90:e3:13:
         93:24:2d:35:4c:69:53:bb:2f:35:75:ac:60:2c:2f:a8:88:78:
         1d:02:d6:00:08:df:40:28:02:ea:8a:f6:c0:b5:30:28:fb:d1:
         75:c4:4c:4a:81:9e:ec:83:54:6f:d1:16:58:5e:4a:c5:12:60:
         96:ad:25:a7:db:fd:53:1d:14:59:dd:da:39:0f:3d:54:91:0b:
         d2:d3:85:b6:51:4e:64:7b:1f:0f:c5:2e:b6:3e:17:05:15:ae:
         92:c7:01:db:e5:4e:e9:c5:c2:df:cd:30:29:16:dc:aa:d2:41:
         6c:f7:24:1d:df:b5:ac:bb:c4:1e:7f:20:e9:ec:aa:2d:bf:5f:
         f3:72:d6:27:2e:4f:ac:36:66:90:ab:e8:8b:39:3d:46:09:cb:
         68:94:79:40:f4:45:ac:7f:bd:3f:2a:b1:ed:f8:c6:44:d6:9c:
         f9:b6:ec:e0:75:fb:f6:8c:e7:b1:9e:b2:97:06:d4:35:26:9b:
         ca:f3:dd:c3:92:17:41:37:ba:3e:75:b4:63:57:0b:fd:21:68:
         a6:ac:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:19:31 2025 by rpki-client