Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/318b22f8-de62-3b36-bb79-ef783c6cdc78.roa
File:                     318b22f8-de62-3b36-bb79-ef783c6cdc78.roa (raw, json)
Hash identifier:          xggFBbi23YKIzn6qqrcdFbsrp5e/ajXyRtKTbHfM2tM=
Subject key identifier:   C6:87:E1:70:EE:73:A4:53:CB:C5:14:B2:08:57:BD:1A:6A:0C:8F:26
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F5F1CB2AC90CCB3AF44800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/318b22f8-de62-3b36-bb79-ef783c6cdc78.roa
Signing time:             Wed 05 Feb 2025 11:08:18 +0000
ROA not before:           Wed 05 Feb 2025 11:08:18 +0000
ROA not after:            Tue 06 May 2025 10:08:18 +0000
asID:                     30036
IP address blocks:        173.16.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f5:f1:cb:2a:c9:0c:cb:3a:f4:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:08:18 2025 GMT
            Not After : May  6 10:08:18 2025 GMT
        Subject: CN=9d5afa0b-b36d-4aad-9a91-6b39073c791d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:b0:53:94:90:f0:bd:7c:7b:4f:0f:c1:53:
                    42:e2:f3:9e:e9:6e:84:d9:7c:b2:ce:d0:67:62:0b:
                    71:86:d2:10:92:c8:56:84:37:e0:63:ab:81:96:4a:
                    31:88:44:fd:64:75:bd:ee:e3:b9:32:cb:a2:84:eb:
                    04:c4:28:23:ca:25:19:53:93:58:58:cd:bf:3a:89:
                    93:bf:a8:52:5d:45:01:f8:87:41:bc:0a:4c:ae:a7:
                    7f:0e:c1:5a:49:ae:92:45:86:41:99:02:63:95:c9:
                    67:ba:6a:f9:32:ea:ff:33:7d:e6:fe:6e:c1:d9:64:
                    de:b3:f7:02:83:8a:96:d1:10:19:ac:c4:c7:f7:9a:
                    dc:9c:11:65:bd:07:38:ac:61:33:5c:54:cf:57:03:
                    aa:32:c8:d7:f3:fc:8b:86:3f:b1:45:31:d2:77:a9:
                    25:c3:11:9d:7d:ff:26:5b:08:06:ed:75:0c:30:fc:
                    05:e0:16:61:8c:42:b1:cf:41:d9:78:ca:29:29:bb:
                    8c:64:5a:39:e2:d8:59:9a:26:20:16:c1:4c:b1:c0:
                    d7:68:7b:94:53:a2:41:dd:6d:e8:06:20:b2:2a:0b:
                    a3:a8:cd:ab:a1:dc:3a:46:5c:f9:16:83:d6:c7:ea:
                    32:6c:06:9e:df:4c:23:7a:73:d0:16:02:9f:be:5f:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:87:E1:70:EE:73:A4:53:CB:C5:14:B2:08:57:BD:1A:6A:0C:8F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/318b22f8-de62-3b36-bb79-ef783c6cdc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cc:d2:21:d3:46:2c:db:3b:df:1b:35:4f:be:26:b0:9c:a5:
         5a:1d:a6:26:5d:bd:7a:3d:f9:65:2a:e9:b4:45:07:00:35:83:
         16:47:c0:eb:f7:c5:a7:52:a5:58:79:f0:91:51:b4:56:26:47:
         6d:c2:10:f9:4d:45:f4:ee:d6:b2:f3:1e:a5:c0:9e:10:d3:37:
         ee:fc:fb:2f:00:96:23:7e:d3:9c:ab:c8:fd:2c:46:89:a8:51:
         b6:77:fd:bc:eb:10:2d:7b:6c:ae:1c:ef:e3:ff:dc:cd:4a:df:
         5a:7d:08:d5:0b:b1:63:42:fb:19:c6:00:ca:3b:41:ff:0e:c9:
         d7:08:a3:e6:7f:93:a3:21:ed:85:9b:31:7f:aa:4f:82:11:81:
         a1:03:f3:d4:0c:f6:c5:67:b1:89:a0:5f:da:19:fb:c7:d3:8c:
         36:53:4d:0b:39:3f:02:f8:2e:d3:66:15:87:26:c2:00:a3:b8:
         42:c7:9e:28:4c:30:5c:2b:1c:bd:71:ee:0a:66:0d:d1:b7:1b:
         4d:fe:81:a5:1e:e8:56:fc:f8:d7:c9:02:da:29:5b:ac:0a:ca:
         f1:b2:37:61:49:a2:c0:86:25:91:c5:6a:da:68:db:8d:34:9e:
         e8:9b:df:8a:e3:e9:b1:e9:79:87:e8:8d:8f:6b:76:ef:6b:8d:
         f0:d5:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:47 2025 by rpki-client