Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa
File:                     d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa (raw, json)
Hash identifier:          2f3d7P/HXKPPOJsNbm1QZdjU9lqzSHPabYePiqDNxcM=
Subject key identifier:   46:06:89:04:FD:E9:A0:B6:1A:3E:D3:53:61:77:56:65:23:D4:3A:C2
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F432858490179A62767E35EF5477CBF00
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa
Signing time:             Wed 26 Feb 2025 01:34:44 +0000
ROA not before:           Wed 26 Feb 2025 01:34:44 +0000
ROA not after:            Tue 27 May 2025 00:34:44 +0000
asID:                     14618
IP address blocks:        69.52.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:79:a6:27:67:e3:5e:f5:47:7c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Feb 26 01:34:44 2025 GMT
            Not After : May 27 00:34:44 2025 GMT
        Subject: CN=7cd9917e-2239-4045-9e35-e31e8d91332d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:7d:13:1f:a3:38:97:e9:86:a9:24:b5:f9:
                    ed:1b:7e:f8:cc:06:79:b7:e2:a6:44:65:c1:5a:7f:
                    96:6b:be:60:a5:80:bd:23:a8:24:f0:fa:8f:a1:01:
                    6f:84:13:c5:64:fb:ee:ef:9f:d4:ba:9d:cc:68:93:
                    60:c4:d5:7c:ca:80:da:29:ab:1d:b8:38:8e:b5:1c:
                    c1:09:a0:5f:4e:11:9c:61:78:09:1d:ef:c7:cd:15:
                    dc:c1:f8:3d:26:11:72:2b:b1:13:52:e9:52:a7:97:
                    3f:a0:46:44:c3:ee:be:d1:a0:63:dd:eb:98:24:88:
                    ed:cd:cd:ba:79:fb:ea:68:1e:14:9c:ac:2f:99:36:
                    1b:c4:ea:ce:09:89:2f:5d:aa:10:3d:d4:86:43:5c:
                    69:e8:d9:e1:e4:28:c2:7a:45:9b:4a:24:33:32:3f:
                    8a:ad:bf:8f:b6:a8:e8:07:28:55:b1:13:40:ff:53:
                    29:0d:f7:74:b6:53:15:43:33:43:72:39:36:78:dd:
                    df:81:0a:cd:b0:e3:3b:b5:35:a0:03:1f:8e:a4:10:
                    b9:57:c9:20:65:8f:57:1e:e0:9c:bf:05:cf:50:3b:
                    17:5b:99:fc:5f:e2:69:dc:4c:44:77:96:22:f1:a4:
                    3f:6c:ea:35:0c:10:cf:00:62:2d:f2:8b:eb:ae:85:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:06:89:04:FD:E9:A0:B6:1A:3E:D3:53:61:77:56:65:23:D4:3A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:14:a1:d5:c0:60:00:73:fb:e9:1e:00:7b:04:fb:1a:6a:e2:
         8f:5f:e9:c9:a8:c4:3a:b0:cd:d6:48:d7:a7:c6:fe:d8:14:b3:
         9a:43:ff:f4:94:89:4d:f0:cd:c3:34:2b:34:10:de:21:f8:cb:
         44:f0:a5:a7:77:d3:b1:94:a5:ad:90:97:5d:74:9c:05:5a:c8:
         0c:5e:18:35:62:71:31:03:f7:e5:16:9f:4a:12:28:d8:79:d2:
         4b:30:18:6c:d6:dc:ec:52:b7:47:68:c7:05:cb:ac:c3:32:e1:
         1f:35:38:b9:cb:45:39:e0:cb:68:a6:e3:61:63:66:6c:1f:4b:
         ce:14:b9:7e:00:c7:01:49:78:be:b0:84:49:e5:14:ba:24:49:
         5a:ac:d1:bb:db:f6:1e:44:23:ec:6c:3a:63:b1:4d:82:5c:a3:
         e5:dc:73:b9:99:57:21:25:7d:f0:d6:e4:25:36:62:ac:a5:70:
         0b:6f:a9:e4:61:2c:3a:54:7e:eb:f7:a0:2e:c2:2b:56:de:86:
         13:04:d7:bd:2a:a5:90:21:81:5b:8b:3f:51:d7:33:04:3a:df:
         a0:c6:6e:68:1f:b4:94:7d:d4:e1:5f:c1:90:1d:6f:be:a2:5d:
         4b:52:0b:db:b5:99:37:9f:54:ab:3e:8a:ad:21:36:84:35:c2:
         ce:2b:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:24 2025 by rpki-client