Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e4e074b2-c730-3b38-839d-f25294829415.roa
File:                     e4e074b2-c730-3b38-839d-f25294829415.roa (raw, json)
Hash identifier:          R5XvEeyy+9Yy6mqOJqychyOg/pM6oMeyRD7tDmJ6oYw=
Subject key identifier:   2F:B9:F1:5F:3F:13:AF:AA:3C:20:F4:E0:C0:C0:E9:24:E2:4C:41:5D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584957F40F5F15D6D08AEEB6D180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e4e074b2-c730-3b38-839d-f25294829415.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        170.114.90.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0f:5f:15:d6:d0:8a:ee:b6:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=85a08e62-f583-4f97-b858-18048813a803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:10:16:4c:a9:78:e0:f5:1d:1e:d2:c3:0b:
                    c9:ad:0f:9b:df:82:b3:02:e9:63:fa:d5:80:97:19:
                    62:2f:71:92:54:5e:cc:4c:8d:01:62:89:ba:83:aa:
                    78:03:d0:f7:f0:a6:cf:73:18:8e:43:19:cf:fd:00:
                    4a:bb:85:c1:d9:f8:f0:9c:0b:87:99:e0:6b:ed:ed:
                    30:a3:f1:1c:7b:df:6d:3c:35:9f:0b:81:ca:d7:03:
                    83:09:34:18:18:7a:89:43:cb:7b:bc:da:78:2d:51:
                    2e:46:42:b1:55:63:13:27:76:53:f1:b8:4b:fc:ae:
                    71:7a:7c:66:d1:f6:e9:85:41:ed:8c:95:fa:52:0d:
                    ec:ad:a9:37:d8:79:52:3e:e0:8b:ec:3d:a6:7e:aa:
                    da:a4:2e:09:84:fa:c1:7a:61:77:ea:43:a5:18:b0:
                    e3:0e:5a:2b:cb:ac:85:05:e3:2a:40:14:12:e0:12:
                    13:5c:28:dd:a8:db:db:1f:41:73:16:d6:0e:f8:d9:
                    1f:e8:37:e2:10:e5:a0:d7:55:30:90:c6:d3:7f:16:
                    49:42:6e:19:5d:20:09:75:05:d0:a1:76:ff:69:b7:
                    fc:dc:16:e5:1a:b5:54:cb:75:dd:cc:50:20:a0:7d:
                    12:92:25:85:aa:c4:a5:ca:33:af:0c:54:ed:04:3f:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B9:F1:5F:3F:13:AF:AA:3C:20:F4:E0:C0:C0:E9:24:E2:4C:41:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e4e074b2-c730-3b38-839d-f25294829415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:d9:b8:22:6d:65:a0:3e:da:3e:22:ad:9a:f5:dd:b5:d4:
         48:89:27:8c:be:88:7a:9c:1b:1a:9b:69:c2:1a:eb:a7:88:2b:
         48:75:2e:de:fb:de:4f:0c:e7:37:14:4c:2c:af:ee:05:db:98:
         3a:42:8c:71:1b:e8:ec:3f:7a:32:5b:ae:05:9e:26:d0:c3:2a:
         3a:2f:26:4c:6c:77:49:de:a9:39:17:b6:82:59:59:88:3c:05:
         c4:b6:a2:15:de:72:00:6e:bb:58:46:31:28:60:d8:8a:10:26:
         6f:4c:29:a8:b8:49:86:c8:6e:e4:cb:0d:48:15:90:03:c8:18:
         2b:ac:1d:25:ee:3c:98:12:b7:e9:21:a0:d1:27:5a:24:5a:65:
         2e:c9:25:92:ac:76:9a:91:98:0a:c2:13:d8:9f:42:d3:86:33:
         48:c1:1f:7e:76:d8:0e:0c:c6:89:04:09:5b:d5:7b:10:3d:d4:
         73:50:da:94:95:3f:ef:b0:b5:56:e5:70:9d:70:c5:9c:4d:3d:
         9d:ea:e9:41:1b:14:b4:b3:6a:e2:f1:26:a4:5f:48:e7:45:f7:
         3c:32:21:a8:b0:68:c2:d4:b3:dc:e6:d2:7a:4c:1f:b8:12:2e:
         8c:5e:7f:09:1f:7c:60:77:7b:64:e1:4f:ab:4b:ad:1d:8e:32:
         f7:a7:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:53 2025 by rpki-client