Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b17de9c-39ba-3ed9-be79-1d063d57591d.roa
File:                     4b17de9c-39ba-3ed9-be79-1d063d57591d.roa (raw, json)
Hash identifier:          9sLpuNJof7/boqnGw8mDMVYMnKO/zf8OuQDbIGw9mHc=
Subject key identifier:   94:6D:2F:93:88:10:71:87:64:81:D9:9F:AC:B2:03:3C:8A:CE:CD:72
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A99655A02A272888783A1300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b17de9c-39ba-3ed9-be79-1d063d57591d.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397243
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:55:a0:2a:27:28:88:78:3a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=964e261c-55fc-4b8e-897f-10cb91996e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b0:c0:fe:53:40:2e:3a:e4:b0:c6:1d:e1:fe:
                    4d:b9:b7:8f:71:3a:26:5e:74:1c:3d:0f:58:63:d6:
                    6d:99:b7:9f:6e:c2:2f:ac:10:90:eb:2b:f8:fc:a4:
                    ea:55:11:3f:e3:83:07:f7:f9:31:d0:f3:02:81:a4:
                    da:66:c5:09:91:31:55:09:90:a5:29:c4:b4:2c:8f:
                    c6:20:73:26:3c:cf:d1:46:a5:8a:eb:59:00:3a:e4:
                    86:f2:55:4c:8d:40:29:bc:0e:40:a4:93:92:df:5a:
                    ab:81:94:d9:e5:dc:25:19:3c:8f:02:c7:f0:d6:55:
                    70:41:82:a3:a6:aa:9d:2f:bd:e2:6a:29:f9:6b:be:
                    05:24:b8:10:02:9e:0a:c1:9d:2b:92:8b:bf:76:cf:
                    d1:8b:16:56:ef:dd:55:90:f9:38:2c:ed:90:44:75:
                    fa:8c:fd:a7:3d:c3:38:d5:0b:0e:4f:58:06:2d:06:
                    fa:c4:39:50:fe:5d:1c:e9:d5:d4:fa:c5:af:f1:b6:
                    c5:3f:b7:14:fc:35:cf:72:f5:c7:75:8b:9c:35:5a:
                    bc:e3:99:73:c0:a7:e4:7a:05:dd:2c:5d:2f:fc:7b:
                    50:22:6e:c9:3f:10:3b:1f:d5:f4:b6:e4:99:e7:1d:
                    96:6b:2b:4f:24:e1:01:af:b4:10:27:3e:12:1f:2d:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6D:2F:93:88:10:71:87:64:81:D9:9F:AC:B2:03:3C:8A:CE:CD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b17de9c-39ba-3ed9-be79-1d063d57591d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fd:76:0a:16:9c:ac:d6:aa:dd:89:29:a4:85:72:ab:ca:31:
         66:db:37:fd:e3:da:be:a9:18:b9:c6:44:ed:e6:ab:11:3c:26:
         4e:a0:72:ad:ff:ca:ee:8e:46:90:cb:75:6a:c8:0c:56:98:30:
         75:6f:bb:28:30:23:6c:7a:04:1e:4b:2b:0a:0f:a8:46:0b:39:
         5a:19:07:68:73:9e:5e:6e:04:f4:3c:4d:e5:08:81:9e:9b:23:
         87:35:a0:3b:20:9b:7d:1e:a5:80:36:7f:ee:28:62:86:a2:cd:
         d5:2d:c3:7e:3e:36:46:75:74:13:b7:76:0d:ef:cf:ca:4d:b4:
         a7:b3:f9:69:bd:0a:98:06:95:32:58:f1:18:a6:61:5b:af:73:
         a4:81:c2:75:b4:ff:02:3a:73:90:74:39:ed:e6:97:c0:b3:c4:
         87:9c:aa:7b:f6:b2:10:c1:8e:66:81:9f:32:92:8f:2d:c1:c3:
         af:9d:48:91:3c:1e:a2:a3:68:72:29:97:2a:ff:56:35:f9:0e:
         a9:75:57:c2:f8:02:b6:e8:5c:ae:e5:08:89:b3:fa:e7:03:66:
         b1:5c:1e:2b:d8:e1:db:a9:e1:1c:eb:5d:f2:b2:59:fe:74:2d:
         b8:f6:c4:cb:a9:48:38:c6:c3:ef:e3:65:ef:41:c5:d1:71:9b:
         a8:80:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:24 2025 by rpki-client