Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa
File:                     3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa (raw, json)
Hash identifier:          qvZzRrJl4kSB5udcDFYxc7eWxz+D5NtpToYRo6+lQ7o=
Subject key identifier:   9C:73:F6:D7:1D:3E:F2:BF:01:C3:4A:CC:05:8D:B6:14:FD:7C:BA:60
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB16552EE906E69B3C682380
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        200.69.24.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:55:2e:e9:06:e6:9b:3c:68:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=733ef727-98b8-4925-ae01-bbfd454e548a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:69:98:fc:e6:d2:be:82:21:ab:54:32:9b:
                    0b:8c:58:2e:23:95:bc:85:3a:8f:23:28:58:5e:7e:
                    66:44:94:87:bf:6a:07:de:16:14:62:10:58:3b:1a:
                    5e:fd:31:08:02:15:aa:49:ba:6b:4d:8d:9f:4f:e1:
                    1a:64:a3:60:24:4d:f7:d4:25:01:a1:a1:46:84:44:
                    1b:6c:35:95:84:13:11:db:55:01:35:62:d9:57:bd:
                    b0:70:06:30:bb:ec:f4:67:d7:4d:8d:0e:9c:76:a2:
                    b7:11:fe:97:6d:93:a5:95:a8:d0:44:e3:f9:75:ce:
                    e8:af:54:24:19:42:c8:28:26:9a:dd:58:26:df:39:
                    4b:6a:9d:c1:96:48:46:c6:af:cc:a8:fb:9b:3a:b0:
                    0b:8a:3e:81:65:11:df:f9:de:83:f1:c6:21:7b:f4:
                    ee:77:0a:62:d5:19:f8:f1:3e:7e:c7:6a:7f:53:58:
                    21:89:de:13:f4:e5:0b:fe:bd:8d:b1:6b:73:c0:46:
                    61:8d:6c:b6:b8:2b:43:80:62:fb:bd:94:85:d7:6a:
                    ac:78:e9:b0:34:c3:5f:65:6c:e3:9c:f8:c6:d8:d0:
                    c9:4f:e2:78:ad:f6:19:50:03:39:74:ee:f2:25:1e:
                    40:77:e3:c9:c4:aa:c9:3b:bb:9e:5e:7a:a0:36:82:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:F6:D7:1D:3E:F2:BF:01:C3:4A:CC:05:8D:B6:14:FD:7C:BA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3520c7e6-6ee8-34ed-88f4-ceaf3074624a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2b:99:e4:15:28:f2:e9:9b:87:15:c3:79:95:fc:73:e8:34:
         e8:cf:bd:bb:5e:34:0e:be:2f:3f:62:48:ec:f5:2f:fc:84:46:
         07:8f:85:56:a0:2e:ed:0f:8a:fe:8b:d0:fd:df:18:4f:7a:87:
         d0:0b:99:54:88:cc:a7:42:39:48:f6:97:53:69:43:fb:57:f6:
         cd:36:20:67:0d:93:75:e4:9e:56:c0:28:f0:70:36:fb:d0:8d:
         c3:72:a1:5f:17:f5:81:3f:3a:6a:24:1d:3b:d6:a8:b4:a5:bc:
         dd:a5:0a:93:39:75:53:77:cb:fd:e9:01:b5:05:b1:76:38:f4:
         61:77:09:f9:c9:e5:58:34:98:48:24:8a:09:9c:fb:75:f5:12:
         ca:ee:3f:53:78:a5:0e:b7:ae:33:d0:98:85:6b:e9:33:51:e2:
         cf:48:a8:f2:f9:e7:d1:7d:30:0c:c9:fa:d5:dd:8e:b4:4c:69:
         7c:c6:41:c2:c5:6c:5c:1d:bb:52:c4:58:04:83:4d:06:15:62:
         f9:37:03:a1:b2:b4:94:f9:ea:2f:cf:2f:fe:4c:b6:74:29:a9:
         1c:91:e3:af:60:99:e8:09:10:4f:3e:50:04:d3:cd:56:37:30:
         49:78:06:90:f9:1a:54:cc:25:fc:f5:90:40:dd:73:7e:ad:89:
         9c:36:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:14 2025 by rpki-client