Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fe02989-7514-34f2-9fa3-0e3680efeefd.roa
File:                     9fe02989-7514-34f2-9fa3-0e3680efeefd.roa (raw, json)
Hash identifier:          gZucZZdUhPLBR+pbI4noZVOV0i2/WWCDUra4Fr/T5+Q=
Subject key identifier:   EC:2C:6C:12:E0:A2:D9:7A:F0:13:32:8B:B3:0E:CE:73:66:51:8C:48
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848EF6168DB94117539489A0E00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fe02989-7514-34f2-9fa3-0e3680efeefd.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        173.45.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:68:db:94:11:75:39:48:9a:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=6bdd8604-3361-473f-a613-a58c63404200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:27:33:07:c3:f8:eb:35:53:39:0a:85:0c:
                    7c:6b:3a:5d:76:28:08:f2:d5:4f:46:3c:eb:79:5e:
                    ea:c7:36:3c:84:14:01:c7:6c:d1:d2:65:2a:3a:e4:
                    d4:94:8c:c2:27:88:05:24:68:3f:7b:c8:2d:37:9a:
                    bf:d0:7e:cd:a5:56:46:d9:8d:18:eb:6b:2a:b0:50:
                    8d:80:53:a1:9b:e1:02:70:5f:fc:43:bb:59:54:97:
                    f5:27:d1:df:3c:97:6a:3e:73:1e:7b:31:bb:99:5e:
                    65:e6:9f:68:2d:02:46:96:c6:49:5a:07:ea:c3:5e:
                    5a:b8:d3:d8:c6:64:df:5c:2a:ef:7c:02:38:10:90:
                    8f:a1:58:12:13:08:f7:b2:8a:8a:2f:02:9f:12:8b:
                    ad:6d:04:5d:22:35:30:39:88:a9:94:10:ef:7d:af:
                    37:5e:16:f3:34:02:36:6d:c4:58:36:96:57:20:94:
                    37:8a:cd:b3:4a:a7:24:c4:aa:ec:1c:50:15:70:1b:
                    df:f2:48:56:46:1d:b9:6f:2b:3a:b8:cb:14:d4:f1:
                    17:37:0d:16:3b:e3:e6:be:b6:b9:bd:e4:89:32:ac:
                    b2:68:43:64:12:15:67:1d:b1:12:f5:b6:29:a8:0f:
                    f9:85:94:7a:00:a8:94:96:b7:e6:f2:97:c0:ee:4b:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2C:6C:12:E0:A2:D9:7A:F0:13:32:8B:B3:0E:CE:73:66:51:8C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fe02989-7514-34f2-9fa3-0e3680efeefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.45.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:50:6a:e0:5e:0b:a0:87:a1:43:8e:47:07:e2:76:da:b0:01:
         95:19:8b:69:13:8a:a1:b7:29:c0:5a:c4:76:a2:ca:c5:55:ba:
         a2:70:6a:dd:d8:10:51:a4:78:ec:c6:7c:17:b6:d0:76:9a:df:
         02:68:76:e9:1a:7a:ea:a8:9e:fe:75:8d:08:6d:6e:0a:0c:b4:
         a6:34:c3:9b:3a:52:1d:23:37:95:af:92:2a:03:53:16:d3:a2:
         f9:35:93:8e:56:c1:7f:c8:1d:82:2a:26:d3:90:24:cc:b4:0c:
         e9:c4:37:ac:ff:47:0a:c1:ea:2b:6f:c0:e5:f6:d2:d5:d2:3d:
         22:f7:69:c4:e8:23:50:03:90:a8:38:d7:0b:b6:70:8c:93:9a:
         87:72:85:d4:65:fe:0d:10:bb:e6:8e:59:2b:85:98:0e:ab:92:
         8c:2e:9f:bd:57:10:e2:17:62:2f:2c:ec:98:4e:60:a9:f0:2a:
         96:51:12:45:6b:9f:6e:32:18:ee:3b:d3:e6:2c:9c:6d:7e:49:
         8f:65:dc:4d:33:34:f3:c5:a8:14:29:35:ff:16:85:2e:05:c3:
         75:91:f2:a1:72:1d:f0:f0:53:cf:4e:aa:02:64:89:36:64:38:
         45:90:8c:f7:f5:0d:36:2d:49:5c:78:45:b2:82:41:87:da:e4:
         96:c0:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:31 2025 by rpki-client