Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/9b01083d-4e5f-3fd0-8340-8f04c3481ac6.roa
File:                     9b01083d-4e5f-3fd0-8340-8f04c3481ac6.roa (raw, json)
Hash identifier:          ANQrrZFbX9qC9f/owI+EDdRLLCpY0fx8kZCzOKywkl0=
Subject key identifier:   2C:1B:D8:DB:05:68:31:F5:AA:C5:32:DD:FF:05:1F:AD:3E:99:EB:91
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F4328584968B41DC746CF2D468709C920
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/9b01083d-4e5f-3fd0-8340-8f04c3481ac6.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     30081
IP address blocks:        69.31.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:1d:c7:46:cf:2d:46:87:09:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=c999ab54-40fd-4cc7-8c0c-4f6f2b992f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:6b:ab:9b:b8:a6:a6:5e:4d:4b:ba:88:97:
                    b9:d2:08:10:c8:f6:83:ba:c5:af:45:2b:01:d8:97:
                    30:d2:2c:04:8b:77:55:ed:3f:b4:03:c3:3c:20:85:
                    66:04:c1:25:45:04:5e:76:bd:a6:67:d5:5b:cf:92:
                    08:57:33:f1:1a:ee:35:b3:68:58:93:df:70:85:a7:
                    1e:9d:4f:9a:00:26:ba:36:ef:44:0a:2d:c8:b4:58:
                    5f:ec:b0:89:51:31:21:1a:83:1b:06:c9:da:3b:61:
                    11:f4:9c:12:92:01:e3:4a:bb:12:e9:27:33:75:0e:
                    66:42:2b:e4:5b:fc:da:53:9c:54:b3:d2:50:1d:ec:
                    17:ea:3c:8e:41:fc:10:19:83:f9:af:2f:ee:69:10:
                    a9:8f:f9:9e:16:b8:73:93:a5:49:75:2c:4f:67:d6:
                    c4:5b:bf:03:b3:28:b5:38:36:5e:83:48:d4:0c:60:
                    88:21:67:62:52:2c:57:fc:91:af:c4:40:de:77:7d:
                    a8:fa:95:18:98:0a:b5:d9:96:cf:3a:09:a7:c5:10:
                    f0:5d:c4:0e:14:53:8f:ec:2c:3b:e4:1e:3c:60:05:
                    3b:7b:34:52:9e:61:fa:e0:01:df:ad:84:74:2f:f4:
                    e2:d3:3a:87:ad:a3:ec:a8:a8:07:81:c1:00:a1:7b:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:D8:DB:05:68:31:F5:AA:C5:32:DD:FF:05:1F:AD:3E:99:EB:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/9b01083d-4e5f-3fd0-8340-8f04c3481ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.31.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:29:f9:c4:bc:51:b7:48:05:e2:dd:b2:dc:0d:0e:2a:bf:
         85:43:93:01:b9:3f:91:1f:2f:25:05:13:15:7c:f7:3a:77:f7:
         fa:27:df:c3:eb:ff:45:4b:35:b5:03:88:09:ba:f8:b5:6e:94:
         db:2b:65:3b:c5:cf:70:3b:bd:cd:f6:ec:fc:63:27:b5:80:44:
         19:7e:4d:c9:d2:4e:dc:7d:71:ce:09:79:98:c7:75:87:79:12:
         8c:60:ae:fb:24:33:81:a1:3d:e7:28:95:02:cb:dd:3b:ce:db:
         46:60:5b:10:42:2a:41:34:62:89:14:42:5c:d9:dd:de:79:c4:
         d5:2d:28:49:3b:35:cf:d2:78:90:f2:ea:38:e5:8e:ab:93:0e:
         ee:ce:bc:92:9a:7d:c1:b8:06:21:e4:57:19:b1:54:f5:47:1a:
         37:02:85:bf:8f:a6:cf:8c:11:4b:47:88:0d:09:18:74:c6:60:
         91:e0:d8:3b:dd:2b:c9:fa:55:2b:5f:58:bc:8c:47:42:f8:5c:
         cb:19:77:40:e3:5a:b7:58:9c:b4:4e:b2:56:d4:49:97:47:f2:
         aa:b5:21:56:42:76:4f:c1:76:38:e4:71:3d:06:40:ad:8b:a0:
         e9:67:88:1f:03:2f:ea:86:49:25:b9:57:53:eb:6d:5f:e0:42:
         3f:ba:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:06:48 2025 by rpki-client