Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
File:                     55cea90a-508f-36a4-8b91-9053d99a58f4.roa (raw, json)
Hash identifier:          miQ4ypJVWXEebnVOzqHEPMdxixCcacC+0I3Pr7kqzbc=
Subject key identifier:   5F:1D:85:88:59:5A:AB:94:69:0B:7F:F3:63:87:D6:4B:94:6D:2A:47
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F432858490E16C56B6EDDDF70644F1AE0
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     6954
IP address blocks:        69.4.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c5:6b:6e:dd:df:70:64:4f:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=64f6ca2a-1492-4371-a876-03d577deb104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:24:73:e8:18:82:76:fa:af:3a:01:a2:c3:
                    36:cf:da:ad:8a:72:ce:dd:1d:d7:2a:9c:dc:e3:10:
                    45:6f:bd:f7:78:13:60:7c:be:22:b2:f3:c6:83:c9:
                    25:87:22:ef:35:8b:af:7c:cc:8c:a3:9e:25:ec:f1:
                    7d:41:46:15:62:fc:00:69:a8:e6:17:43:b7:1f:3e:
                    7c:54:eb:ba:c3:75:e3:6b:b0:dc:3d:55:72:1c:e1:
                    3f:cd:c0:5b:81:8a:b8:c2:a0:df:07:62:31:c5:c9:
                    c0:2f:b9:17:5a:d5:ff:14:da:58:b1:ce:c2:e9:39:
                    a7:bf:59:47:56:74:b7:27:5d:f3:67:7f:81:c1:88:
                    b3:ca:d2:eb:0c:33:e4:e9:4c:7c:e3:0e:4b:1e:1b:
                    98:15:88:3a:93:2f:86:c2:12:db:32:7b:c1:76:85:
                    07:d0:2d:6c:35:34:65:36:b3:5f:47:dd:4d:52:ae:
                    6c:bc:89:32:e2:45:d5:cb:66:fa:36:ee:43:b9:de:
                    59:67:7c:37:9c:bd:1f:4e:0a:f0:ef:98:7a:66:38:
                    72:40:27:6c:a3:16:a2:eb:96:2e:1c:7f:6e:5e:7b:
                    7e:9c:8c:73:23:29:25:79:73:1c:8d:93:7b:9e:36:
                    fa:53:60:b5:1c:32:7c:47:6e:7b:03:16:62:b6:07:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:85:88:59:5A:AB:94:69:0B:7F:F3:63:87:D6:4B:94:6D:2A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:8f:71:99:59:5f:3b:a9:86:e2:f4:37:2c:e9:ed:e1:a5:
         6c:ec:b0:f9:60:45:db:3a:78:60:a8:20:be:b5:c1:2a:42:94:
         f7:20:cc:5a:67:e3:1a:56:2e:09:40:f4:c9:6c:64:d4:00:44:
         da:c5:4e:b6:6f:41:7a:5c:25:ec:cc:f4:d7:cb:b2:ef:bb:58:
         6c:69:4d:2f:51:7f:d8:f2:e6:11:62:2a:c6:b8:0a:bd:72:3d:
         e4:a5:7f:e2:69:fb:e9:c6:51:2d:b6:ce:ed:23:71:17:39:a2:
         3d:8a:cb:47:3e:69:cc:d9:1d:52:93:5c:0f:65:56:e9:f6:79:
         ad:e9:35:25:92:d0:08:25:77:c0:03:6b:9a:e4:67:22:3f:bc:
         94:48:c3:61:7f:41:41:2a:5a:f2:aa:d3:fa:dc:48:20:9d:8d:
         65:24:5f:3b:52:16:6d:ac:2c:43:93:aa:ca:39:9c:64:48:0b:
         32:84:d0:8d:76:28:9a:b1:70:37:10:ac:bd:97:d1:9d:76:97:
         b8:d4:c6:3c:ce:e5:35:b8:e7:99:11:29:fc:dd:aa:34:8b:01:
         cd:fc:f6:e7:47:4b:ba:ca:1e:ab:a2:68:3f:8a:29:21:64:69:
         df:6e:be:24:f4:9d:fe:b2:c1:df:27:04:ce:a2:af:0e:61:9b:
         f2:e2:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:35 2025 by rpki-client