Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4541975c-59be-3abc-9393-18b2eb9ee90b.roa
File:                     4541975c-59be-3abc-9393-18b2eb9ee90b.roa (raw, json)
Hash identifier:          K2/+Zx9DBvlZSBAQSpWvvF1yPfEW0wqrEA2VcUCs4rE=
Subject key identifier:   AF:42:F3:AD:11:8C:38:4F:94:14:9E:1C:74:1D:81:0D:99:16:FB:5D
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB16534C6F0882D745887EC0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4541975c-59be-3abc-9393-18b2eb9ee90b.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        69.48.156.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:53:4c:6f:08:82:d7:45:88:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=3cdef508-f2ad-4fe0-a4c6-7ce571da587e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:82:07:9d:aa:10:bf:bf:5e:82:0a:31:35:
                    6a:f5:1f:17:59:86:d0:6d:6f:59:78:9f:60:06:da:
                    d8:eb:04:0c:73:70:f9:07:86:e2:3b:45:f2:09:39:
                    c9:8f:ea:46:d2:ad:e8:88:58:77:5b:d8:a7:94:cf:
                    c4:87:8f:98:0e:fa:bf:f3:80:e8:f4:18:49:1b:35:
                    0d:d4:87:83:d9:25:18:d8:6d:1d:02:77:a1:c7:2f:
                    bf:80:d8:22:5c:97:ae:59:4d:ef:31:a3:e5:fc:33:
                    bb:a6:cf:db:03:8e:65:f8:2a:b6:d7:34:96:fd:87:
                    9f:ab:bc:dd:c8:24:c7:2f:b4:2c:ec:d2:fd:0e:b7:
                    85:8d:4f:3f:0d:d0:2e:34:61:1b:0c:58:af:fa:b6:
                    83:2f:c6:c5:35:ca:b8:87:d3:8e:21:d8:fb:e6:04:
                    ff:b7:c9:c7:8e:25:cb:af:e0:aa:8c:31:fd:c3:a6:
                    f1:74:62:2c:27:6b:16:f8:a7:5d:f7:dd:65:31:46:
                    d3:a8:84:52:fb:67:97:3d:ee:30:82:84:4c:d4:65:
                    04:04:fc:cb:82:5a:8a:7c:83:ec:5d:ff:0b:2e:ab:
                    bd:1d:94:d9:e3:a2:84:40:ec:7d:16:24:24:1c:6e:
                    98:50:ee:56:54:91:f4:fb:13:44:89:7f:c9:c5:c6:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:42:F3:AD:11:8C:38:4F:94:14:9E:1C:74:1D:81:0D:99:16:FB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4541975c-59be-3abc-9393-18b2eb9ee90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:98:00:a6:e0:7e:64:15:c9:f8:8a:18:a2:5c:12:76:8e:
         eb:f3:6f:32:de:f3:41:64:2f:3c:70:34:89:04:2e:8d:e0:ed:
         ed:4f:5e:1d:4c:e6:d5:05:c4:60:d2:e6:70:18:58:ed:82:23:
         5a:05:f4:96:49:02:d8:a5:1b:e2:5e:02:1f:f6:7e:f0:a4:af:
         05:03:5c:77:67:76:5f:f4:03:5e:9e:3d:b0:b9:95:a3:a0:05:
         e8:be:1b:d7:29:5f:9e:e7:c9:6f:67:07:3e:cf:98:83:88:29:
         f0:54:b0:bc:d5:c5:8c:1b:b6:19:60:5d:4f:2e:d4:c9:d2:bd:
         0f:43:17:56:96:32:be:10:0a:9c:3e:89:58:da:26:20:50:5d:
         35:89:a1:68:6e:27:fc:76:f4:35:51:5f:15:dc:d7:c8:23:b7:
         de:54:c0:76:d1:69:73:bd:1d:8e:5b:b4:75:09:e6:05:39:a7:
         5f:99:16:29:24:48:a8:c6:ae:ae:9d:20:00:4f:09:28:75:96:
         1c:f3:5d:ac:7a:96:7c:13:4a:ad:e6:2b:16:ca:e2:2a:da:73:
         72:f8:83:d8:14:4c:d3:df:09:2d:cd:f6:f2:a2:87:64:4e:2d:
         8b:0d:10:7f:38:3b:e3:41:43:69:40:92:52:ed:7c:93:ff:a4:
         54:cb:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:19 2025 by rpki-client