Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa
File:                     035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa (raw, json)
Hash identifier:          cnQJZps1s1V+rMzSi/5JtwRpnYTgyVoLuFhb/xDiYLI=
Subject key identifier:   20:E3:DD:75:3A:99:8F:44:53:50:16:74:91:11:8F:63:C1:ED:A9:06
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261EE7B50EEAD32AE3BDB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa
Signing time:             Mon 03 Feb 2025 11:11:02 +0000
ROA not before:           Mon 03 Feb 2025 11:11:02 +0000
ROA not after:            Sun 04 May 2025 10:11:02 +0000
asID:                     30036
IP address blocks:        173.26.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:ee:7b:50:ee:ad:32:ae:3b:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:11:02 2025 GMT
            Not After : May  4 10:11:02 2025 GMT
        Subject: CN=4f47b0a1-2c17-4719-8fbd-b98d0d672b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:32:c2:c7:54:b7:b0:13:03:d6:86:28:80:49:
                    4f:af:dc:ab:38:4f:f7:02:b4:6c:1e:e4:7f:d8:2f:
                    c2:6d:2c:fa:02:c5:ed:b7:f1:77:2c:09:5a:12:cb:
                    37:00:e3:31:cf:2f:50:ab:26:69:7d:7b:4e:6a:80:
                    99:f6:aa:34:1a:03:a7:c4:c2:6a:b4:e8:71:97:d6:
                    db:25:2e:e3:20:58:b8:e1:f9:03:ec:fa:7a:d0:a6:
                    80:ad:b3:f0:11:0b:6d:cf:3b:09:eb:2b:91:f5:90:
                    9d:68:24:cc:d8:8f:f9:08:ee:80:e0:6b:3f:b6:13:
                    8b:d3:4b:3f:a6:e3:d2:c2:97:b1:1d:c2:d6:74:80:
                    fc:31:12:78:44:cc:0d:c0:f3:06:5c:55:2a:48:ef:
                    71:75:2c:7d:a2:26:5d:2b:8b:00:94:ab:35:6f:ca:
                    a1:3e:f2:df:79:ee:c2:2e:a4:c4:40:65:1f:9b:fa:
                    d3:90:c4:df:b2:ab:d4:08:2e:8b:3e:2c:31:be:35:
                    9d:9a:4d:ce:2c:71:a3:8c:ec:35:da:48:ec:58:0d:
                    4c:05:c1:60:04:23:46:1c:93:0c:5f:72:55:f4:e9:
                    d5:62:da:64:4b:a8:6e:82:f4:cb:a9:76:74:24:b7:
                    80:3d:c8:d7:64:4e:df:67:cf:46:b8:62:ea:bd:de:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:DD:75:3A:99:8F:44:53:50:16:74:91:11:8F:63:C1:ED:A9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:59:18:a4:35:07:9b:48:da:df:00:3e:2a:36:69:85:25:8b:
         78:85:28:2b:45:33:1f:cc:77:ba:4e:36:e5:da:29:c0:2e:85:
         ec:2e:f3:90:f0:65:ac:32:ef:a3:1d:0e:d1:9f:88:60:dd:5c:
         03:ce:37:26:f4:65:67:75:bf:db:3b:29:73:22:53:89:d1:f1:
         9a:a1:2b:9f:55:fb:3a:c3:d4:3a:2a:25:c2:7d:67:49:c5:a1:
         af:63:47:36:46:68:60:77:d7:7b:5a:06:f8:87:5d:32:02:76:
         a4:7e:58:94:a8:46:ed:05:8b:65:ea:aa:a8:48:55:3d:21:8b:
         b6:86:ae:62:b3:6d:38:82:01:9e:a8:78:19:61:93:78:97:71:
         87:a3:37:59:63:83:cb:6e:2e:e7:f4:a4:b0:bc:b8:57:76:91:
         ae:e1:d1:7d:9f:84:36:dc:c4:91:be:03:67:c1:9b:50:6f:7c:
         6f:d8:3a:fb:3c:3a:81:ae:4b:4c:74:6b:c2:fb:f0:1e:cb:99:
         03:38:34:ac:56:06:d2:f7:ee:fa:9d:d5:cb:ff:47:9b:b5:fb:
         82:6e:d6:b6:4d:7a:ed:77:3f:8a:08:6a:88:24:0d:a5:4a:1b:
         01:1c:79:11:f6:43:e4:90:c2:53:77:fb:a1:5f:1f:b5:0f:75:
         24:4f:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:14 2025 by rpki-client