Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa
File:                     1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa (raw, json)
Hash identifier:          dJOTWxE4O+Q8p0A4KqoEN3/kGutdDRokvBgAkZ4/ABE=
Subject key identifier:   48:1F:90:B4:E5:79:AB:44:44:A0:72:ED:9F:95:A9:11:9A:22:C2:78
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858493AA3DDDA0AB913E841E352B0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     212374
IP address blocks:        69.168.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:dd:da:0a:b9:13:e8:41:e3:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=aefbcbe8-d74d-4224-bd03-6470bdb7dd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:9e:06:7e:08:3d:cf:28:c8:a5:e5:9a:3c:
                    88:f7:c2:b8:e8:3e:4c:da:72:44:20:22:f3:4e:b2:
                    b6:fe:2b:55:53:09:39:c8:b7:6b:bf:ad:99:92:3c:
                    9d:a4:2d:7b:fb:4d:c3:04:48:63:89:55:05:11:f7:
                    9a:b5:6e:85:18:3b:6f:fb:b4:d5:af:06:16:9f:4c:
                    9a:bb:72:9c:79:5d:6a:5e:3c:c2:28:d1:d5:c5:7c:
                    1e:f4:44:91:c1:32:c4:ce:2d:6e:00:b4:eb:50:4d:
                    91:44:b2:fb:1d:79:0b:38:43:7d:59:a4:8f:f9:b7:
                    70:cc:85:d2:d2:fc:dc:7e:8a:58:58:28:4e:59:b3:
                    2f:9f:ef:8b:c2:fc:23:c7:92:f8:ce:78:be:b8:4c:
                    ae:ef:70:f5:cb:22:96:0f:e4:30:e2:37:4d:a2:86:
                    22:06:b9:0a:f3:d3:30:0c:4e:2d:66:9b:f6:2d:39:
                    3c:13:b6:66:e9:ae:1c:d8:4c:9a:b3:b2:c3:77:3f:
                    87:9a:9c:09:98:bc:89:cb:94:2a:2a:43:39:92:ed:
                    c4:88:03:12:3f:96:a4:42:04:1b:85:af:e6:0a:0f:
                    49:f1:de:9e:19:ed:9b:00:c9:75:63:f6:5b:11:32:
                    ac:43:c9:a7:65:7d:3f:85:3a:74:12:f4:de:71:85:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:90:B4:E5:79:AB:44:44:A0:72:ED:9F:95:A9:11:9A:22:C2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c5:59:07:98:4a:73:68:5a:1d:f3:eb:6f:b6:4c:26:59:e1:
         69:d5:52:91:3c:26:b4:a9:3a:ae:18:e4:52:69:9f:95:75:5c:
         78:2c:bc:25:e3:79:1d:39:13:0b:35:55:19:f0:9c:db:17:2a:
         7e:26:92:31:c5:6c:d1:64:fc:ae:56:8f:e0:7c:bd:51:23:06:
         e3:e5:b4:9d:ed:4b:f1:1d:47:c1:4c:4c:dc:e9:7e:96:fc:e4:
         43:4c:9f:c6:8f:5e:33:13:b5:11:02:76:a7:f9:bb:7c:cd:cb:
         e8:35:be:2a:bf:d7:cd:e6:aa:ba:16:11:b1:d9:d8:88:6b:d2:
         76:47:9e:43:96:77:b1:6e:f1:dd:a6:3a:e0:a8:dc:1f:3c:df:
         96:07:51:d0:fd:ce:09:10:cd:02:62:8e:e8:dc:d2:50:42:66:
         3d:2f:0c:53:b9:3a:71:de:7f:c9:a6:c3:46:e4:a6:e8:21:33:
         62:9e:99:66:15:91:bc:88:a9:9d:1b:6d:36:ac:cd:58:37:8e:
         d9:5e:7c:60:43:35:dc:3e:22:98:ba:2e:79:6b:65:43:30:06:
         f3:65:0f:44:93:ac:1a:5f:9c:e8:fd:1d:e9:71:a5:c4:da:92:
         7e:cc:fb:1c:65:cc:cd:36:81:7e:fb:6d:05:c8:1c:82:bc:31:
         de:7c:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:53 2025 by rpki-client