Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f9ee56-a884-36d0-bf1d-1e007d36b846.roa
File:                     10f9ee56-a884-36d0-bf1d-1e007d36b846.roa (raw, json)
Hash identifier:          5JjJw1s9I/O/825xOxPdE2nfdrbQwKySKEg2wyv1TAU=
Subject key identifier:   29:0D:70:89:39:11:78:F4:31:25:05:9B:C4:A7:11:53:8A:22:F3:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FD0ECC3FA039CBD60620D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f9ee56-a884-36d0-bf1d-1e007d36b846.roa
Signing time:             Wed 05 Feb 2025 11:22:38 +0000
ROA not before:           Wed 05 Feb 2025 11:22:38 +0000
ROA not after:            Tue 06 May 2025 10:22:38 +0000
asID:                     30036
IP address blocks:        173.17.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fd:0e:cc:3f:a0:39:cb:d6:06:20:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:22:38 2025 GMT
            Not After : May  6 10:22:38 2025 GMT
        Subject: CN=58342e79-f7e9-4062-bfc8-c2b68421bcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:c2:a8:09:68:70:a6:0d:3f:33:04:83:f4:
                    28:14:c0:d2:d2:da:08:fd:e7:22:09:6f:a1:b4:83:
                    fc:15:48:1f:75:10:74:a8:8b:bd:97:14:15:e5:29:
                    69:84:1a:4b:a7:8a:a6:08:44:65:88:80:57:86:6f:
                    21:43:15:3c:be:47:cf:b6:76:67:f0:b8:18:12:20:
                    1e:12:19:e7:e9:7b:5c:5e:ef:0b:c5:4b:49:3a:be:
                    5e:2c:dc:58:06:74:9c:ec:d3:da:8f:b6:87:fc:0d:
                    1d:a2:d0:9d:53:e6:b8:32:40:98:3a:ba:cc:78:10:
                    e9:d3:52:24:77:16:d7:0a:eb:df:7f:a6:e5:87:df:
                    f4:85:fb:be:07:7a:9e:f7:06:7a:6c:c8:91:dc:45:
                    5b:88:6e:19:95:ac:16:03:c0:dd:2e:49:46:d7:b6:
                    b3:5e:74:0e:64:52:0a:2a:d3:c3:9b:49:a4:7e:af:
                    5d:3d:cc:fe:8f:d8:2d:75:fb:47:b9:d0:68:4f:37:
                    43:ba:59:99:1e:8b:56:d6:f5:42:9d:45:5e:a9:49:
                    57:ef:9f:f4:f0:93:7a:99:09:b0:65:8f:a7:9c:a8:
                    d7:66:3c:95:d8:02:a5:8b:73:35:6f:d1:35:1e:0c:
                    f6:8f:02:0f:26:70:53:fe:3d:8d:9f:51:5e:65:ef:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0D:70:89:39:11:78:F4:31:25:05:9B:C4:A7:11:53:8A:22:F3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f9ee56-a884-36d0-bf1d-1e007d36b846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2b:1a:dc:39:d8:de:50:2b:cf:ed:3c:26:65:98:de:00:93:
         d4:c9:ee:fe:b6:6d:48:f2:72:de:95:26:1a:99:02:e7:da:53:
         ec:83:f9:48:69:ef:17:13:af:66:6a:d2:35:87:08:0c:50:bc:
         5e:e0:59:c7:6a:38:59:9d:b4:41:9e:73:a6:c1:01:23:63:9f:
         cb:c5:d5:14:85:89:8d:7c:5f:2e:f4:ac:3c:cb:11:cd:bd:d6:
         95:fc:d6:73:90:8e:9c:6d:71:f2:0f:3a:af:76:bb:f8:46:af:
         9a:f5:93:25:b6:72:7c:93:b2:fd:46:81:4b:b6:3e:64:be:5c:
         5a:10:d8:73:31:cb:e2:77:d1:bc:1e:68:ce:23:d8:f8:20:d0:
         0b:32:9c:67:ad:16:8f:59:64:c6:37:35:66:68:07:e6:39:91:
         a9:a8:7a:12:7b:08:e9:b3:8f:92:8e:20:3b:81:a0:39:a7:8c:
         85:1b:91:83:87:fd:47:c7:06:08:dd:b7:3c:17:8c:06:e9:ea:
         46:07:59:6e:73:e1:f1:c9:df:c5:e1:fe:d4:b3:ec:d2:c8:bc:
         16:26:9e:2b:e7:15:9d:9c:fa:36:00:f0:c0:17:75:e2:07:e5:
         e8:2d:29:bd:26:57:a8:ea:6b:db:5d:10:38:d9:4d:ea:e1:ee:
         79:c2:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:44 2025 by rpki-client