Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa
File:                     4ee5944c-2578-327e-8b6d-d50b04da84cd.roa (raw, json)
Hash identifier:          mMaixTsrQUxnlhwi8FtFPJhFhqwitp4CmRrgV0Fhi88=
Subject key identifier:   52:5D:65:4F:9A:12:DC:99:C5:F8:86:CB:83:C7:5C:EA:1D:60:06:D4
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F43285849350EB0215A80D50B7D5B5180
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        173.241.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:b0:21:5a:80:d5:0b:7d:5b:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=4146c8f0-d732-4133-b869-d0d5ffa8c405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:c2:5b:fb:45:e0:2d:ce:ff:25:47:5d:ad:
                    45:29:52:08:83:ff:de:14:47:2c:0b:4c:2e:96:57:
                    3a:9b:58:ba:df:2e:6f:cd:13:45:d8:d1:15:e7:05:
                    db:c9:db:e4:06:5b:7b:b2:fe:76:37:02:26:6e:22:
                    ac:e9:43:61:db:20:cd:e2:00:ac:3a:6e:53:20:24:
                    d5:47:6b:2c:63:14:20:64:ae:3f:95:e9:e5:6a:71:
                    01:6c:f6:03:86:56:bb:3a:7b:6e:77:92:96:80:a2:
                    8b:65:17:e8:03:6d:99:45:b5:70:80:d1:d2:dd:42:
                    bf:32:aa:d1:d3:d3:e3:49:31:3a:cc:59:8f:1f:cd:
                    d1:90:86:ff:89:28:2b:bb:64:6d:d5:c7:e0:e0:90:
                    ba:0c:28:f2:77:3c:04:b7:20:d8:b8:5b:42:aa:8d:
                    bc:da:39:09:fe:00:f0:80:bc:b1:60:c8:91:96:14:
                    e4:ce:6f:e2:6b:15:6a:2c:a9:70:75:a1:71:cb:c3:
                    c8:66:d3:9c:53:61:da:ad:f7:72:e8:0f:1d:7f:01:
                    56:dc:25:18:ac:f4:e0:95:a7:17:a8:25:e8:9f:3c:
                    e7:44:82:f2:97:fd:c6:62:aa:f6:fa:58:29:94:33:
                    9e:12:d9:06:ca:6e:67:e0:4d:31:e3:99:6a:0a:d5:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5D:65:4F:9A:12:DC:99:C5:F8:86:CB:83:C7:5C:EA:1D:60:06:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:59:c8:29:eb:69:5f:a6:6e:ff:a2:c1:01:ff:c4:26:25:67:
         c2:4b:09:82:7d:c8:ed:36:ad:3c:95:0d:0e:85:6f:49:fd:05:
         4f:74:a4:18:7b:94:90:83:9c:f6:5e:94:58:5b:00:31:78:bf:
         73:b4:57:6d:13:8e:87:ab:90:38:b2:64:1e:2c:09:e7:cf:64:
         28:d6:23:51:34:e4:17:6d:68:ce:ca:03:3a:f9:dd:2f:3a:f1:
         9d:42:77:b5:90:49:29:d4:ad:2d:f9:6d:24:a6:12:d2:6a:74:
         2e:08:b9:7a:fb:a9:e5:60:f5:a0:8c:2f:15:ff:51:33:bd:4a:
         2e:c5:8a:62:06:1b:15:cd:97:86:8c:3f:55:d6:78:95:aa:22:
         c2:21:18:b9:ce:8a:76:29:5b:1d:92:f2:9c:67:03:d5:65:5b:
         f6:50:5f:65:59:16:69:c8:d6:a4:ce:d0:e6:a8:45:30:f2:12:
         c6:a9:22:00:15:f7:35:72:60:db:01:a9:7f:8c:5c:a5:48:e3:
         f6:fc:2c:5b:71:b7:7a:4a:a9:95:28:a7:b3:b3:37:84:67:4b:
         4a:f1:cf:2e:df:d7:48:26:7b:51:0d:04:57:05:f2:a0:ec:8b:
         e3:4b:c7:74:0d:36:25:01:09:f2:1d:82:a6:78:8e:5d:e0:01:
         22:24:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:28 2025 by rpki-client