Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/7ed556b3-a15e-3534-a721-b682fc53c09f.roa
File:                     7ed556b3-a15e-3534-a721-b682fc53c09f.roa (raw, json)
Hash identifier:          D5+4ImhzwkG1LJ4UAWLvHjef10RAn2jaD1OY7j5GUSY=
Subject key identifier:   25:B4:01:59:52:7B:A0:99:6B:21:93:48:A2:E3:09:25:BA:46:3F:8F
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584955295735EF676603BB991700
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/7ed556b3-a15e-3534-a721-b682fc53c09f.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     23520
IP address blocks:        69.79.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:57:35:ef:67:66:03:bb:99:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=b54a6c5c-02df-478b-93bd-79c3a83ffb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:62:54:e8:c8:8c:45:e4:6b:a1:1c:fe:6e:
                    d9:33:bd:7a:3f:65:d6:13:af:9a:04:17:6e:cb:3a:
                    85:bc:5a:48:13:7c:97:fc:78:72:0b:13:2c:cc:6e:
                    93:a4:6e:06:d5:63:b6:11:92:1f:95:53:76:01:06:
                    ba:99:af:6c:49:8a:da:7e:0c:7e:8a:47:03:95:c0:
                    e7:53:15:7c:c2:3a:39:b2:d4:92:bf:bb:a2:a3:78:
                    28:b6:36:a3:58:22:77:3e:e1:7a:02:1d:f1:01:b9:
                    5e:c2:67:19:3d:80:5d:90:64:24:23:3d:33:21:23:
                    ba:53:27:f8:86:ba:4f:1f:3a:84:f4:b3:93:ec:34:
                    43:4d:96:12:ff:bb:20:c2:80:8b:b1:46:3e:e9:23:
                    fd:65:36:4c:ae:4c:61:6c:bd:bc:f9:38:d4:9c:1a:
                    93:6b:1c:25:98:0a:12:2a:a1:5b:9e:f3:21:0e:74:
                    11:0e:3c:b4:f2:d2:3f:22:75:f4:3c:21:b6:f1:7f:
                    de:00:d7:71:f9:2f:f0:74:3e:1b:da:aa:44:24:2d:
                    77:fb:06:91:3f:cf:cb:84:54:bc:03:bf:00:f4:df:
                    f4:d9:50:7f:5b:52:26:5e:8c:b3:eb:b8:21:bb:a1:
                    d3:60:9c:ea:43:4e:e5:3e:60:97:6b:01:b1:d5:89:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:01:59:52:7B:A0:99:6B:21:93:48:A2:E3:09:25:BA:46:3F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/7ed556b3-a15e-3534-a721-b682fc53c09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.79.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:ca:f0:39:b0:f3:84:84:c2:7a:c7:29:61:bc:23:cd:aa:
         79:1f:e9:ab:01:28:23:33:d4:5d:01:78:ce:a3:47:ac:1b:d1:
         ec:53:bf:63:27:44:47:8b:47:56:08:9b:86:74:1d:9b:22:c8:
         da:4f:47:64:09:a8:ef:2c:85:ca:f2:ac:20:88:fc:5d:af:aa:
         5d:e6:9a:1a:8b:80:86:8f:89:37:8b:08:4f:29:3c:9d:13:d6:
         92:a2:af:58:8a:db:b3:b3:03:e3:4b:66:22:15:5a:5c:10:9f:
         74:0b:d0:e9:85:6f:dc:31:d8:50:11:59:c9:54:13:6f:21:b1:
         0e:5a:36:cc:e5:39:e4:3b:d0:61:e7:9f:46:75:d5:65:a7:f3:
         dd:66:f9:42:bc:1c:35:66:26:09:63:8a:4f:c9:49:18:45:80:
         7b:f7:c9:cf:07:7f:38:47:71:e6:13:63:23:26:22:78:4b:1d:
         5e:e2:cb:37:2c:87:59:d2:fa:72:5e:bf:17:b4:01:3e:66:84:
         ec:c8:a3:42:4c:49:3d:a8:01:03:a2:14:c9:b5:43:d8:b9:ef:
         b2:00:53:cd:b7:79:ab:26:6b:d7:0d:04:6a:97:64:85:2f:4f:
         34:f9:53:2e:32:f5:a5:2c:ad:63:dd:34:3c:d2:3c:c0:88:69:
         54:29:bd:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVc172dmA7uZFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
YjU0YTZjNWMtMDJkZi00NzhiLTkzYmQtNzljM2E4M2ZmYjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvdiVOjIjEXka6Ec/m7ZM716P2XWE6+aBBdu
yzqFvFpIE3yX/HhyCxMszG6TpG4G1WO2EZIflVN2AQa6ma9sSYrafgx+ikcDlcDn
UxV8wjo5stSSv7uio3gotjajWCJ3PuF6Ah3xAblewmcZPYBdkGQkIz0zISO6Uyf4
hrpPHzqE9LOT7DRDTZYS/7sgwoCLsUY+6SP9ZTZMrkxhbL28+TjUnBqTaxwlmAoS
KqFbnvMhDnQRDjy08tI/InX0PCG28X/eANdx+S/wdD4b2qpEJC13+waRP8/LhFS8
A78A9N/02VB/W1ImXoyz67ghu6HTYJzqQ07lPmCXawGx1YmkUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCW0AVlSe6CZayGTSKLjCSW6Rj+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvN2VkNTU2YjMtYTE1ZS0z
NTM0LWE3MjEtYjY4MmZjNTNjMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARU9sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIriyvA5sPOEhMJ6xylhvCPNqnkf6asBKCMz1F0BeM6jR6wb0exTv2Mn
REeLR1YIm4Z0HZsiyNpPR2QJqO8shcryrCCI/F2vql3mmhqLgIaPiTeLCE8pPJ0T
1pKir1iK27OzA+NLZiIVWlwQn3QL0OmFb9wx2FARWclUE28hsQ5aNszlOeQ70GHn
n0Z11WWn891m+UK8HDVmJgljik/JSRhFgHv3yc8HfzhHceYTYyMmInhLHV7iyzcs
h1nS+nJevxe0AT5mhOzIo0JMST2oAQOiFMm1Q9i577IAU823easma9cNBGqXZIUv
TzT5Uy4y9aUsrWPdNDzSPMCIaVQpvc8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:04 2025 by rpki-client