Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/584885af-086b-3975-91f4-c5bd32de7571.roa
File:                     584885af-086b-3975-91f4-c5bd32de7571.roa (raw, json)
Hash identifier:          fScf3bZys/seO0naNo4w/qH7r5NI6BPFOAd1od2GpYw=
Subject key identifier:   A4:0A:8F:4F:C6:B0:BE:F2:BD:A3:F0:70:82:69:75:18:99:AD:26:10
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5773919458A675411E58000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/584885af-086b-3975-91f4-c5bd32de7571.roa
Signing time:             Tue 04 Feb 2025 13:41:21 +0000
ROA not before:           Tue 04 Feb 2025 13:41:21 +0000
ROA not after:            Mon 05 May 2025 12:41:21 +0000
asID:                     30036
IP address blocks:        173.27.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:77:39:19:45:8a:67:54:11:e5:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:41:21 2025 GMT
            Not After : May  5 12:41:21 2025 GMT
        Subject: CN=7cd103e2-f159-4669-93bb-5ef6a650f2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:db:8e:b3:e3:2e:1e:3b:38:75:ad:17:94:
                    03:b5:4e:f4:de:4c:c3:3a:80:f7:ce:07:95:ee:20:
                    27:23:9f:d7:97:9a:68:4d:51:1c:42:67:e0:4d:39:
                    b9:ea:4a:44:72:2c:63:d5:27:44:c2:3c:f7:76:61:
                    bc:88:22:40:8c:fe:a8:b8:4d:22:28:1f:1a:da:98:
                    30:6e:91:07:a0:15:cf:f3:87:17:d9:fb:89:0b:86:
                    3e:60:15:0a:57:aa:8c:c5:ea:13:2a:34:a9:49:35:
                    86:22:25:8e:ca:0b:de:c8:c4:35:d2:b9:17:ae:40:
                    eb:21:de:63:7c:a9:43:75:bf:a8:c6:cb:30:d2:9e:
                    07:1a:43:9a:66:0e:86:7f:5d:5b:00:ae:a3:5a:71:
                    5a:48:f0:96:7d:58:89:af:eb:ad:49:34:f2:a6:18:
                    a4:78:37:02:a2:47:57:ff:38:fb:3d:6c:c1:f7:85:
                    08:5d:a0:15:c3:0d:35:21:c8:50:32:76:51:3a:a3:
                    fe:5e:15:37:53:17:3e:cf:4a:b9:fb:b6:01:c3:d1:
                    8f:f1:a1:41:76:89:48:08:1e:7c:b1:2d:11:b3:22:
                    08:94:36:72:6c:02:88:29:41:e3:6e:79:fb:0b:ee:
                    85:9e:ff:e9:f9:3d:06:20:52:8c:69:b6:a1:a2:55:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0A:8F:4F:C6:B0:BE:F2:BD:A3:F0:70:82:69:75:18:99:AD:26:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/584885af-086b-3975-91f4-c5bd32de7571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:91:bf:f0:39:82:4a:d7:71:fd:65:4d:a7:6d:7f:20:52:
         87:8a:d7:80:26:26:d5:4e:4c:a2:d3:51:c7:81:78:0d:0d:54:
         21:01:f2:4a:08:4b:09:89:8f:3f:06:10:dc:e1:4a:1a:30:fc:
         f9:0a:68:aa:bc:0e:03:51:67:f5:76:03:b5:55:5c:e1:19:d8:
         66:ba:64:1e:80:3c:20:61:47:1c:ed:2f:4d:de:f0:67:04:31:
         13:bf:75:74:87:f8:dd:ba:62:b7:28:70:10:3e:46:ae:86:8e:
         a0:57:45:53:42:63:56:2b:98:4e:12:d0:b9:aa:b0:47:03:e7:
         3c:4d:53:a7:bc:82:5a:47:4e:99:cc:4f:77:5d:58:04:28:1e:
         d4:47:af:f5:eb:7e:8b:e8:24:41:1c:13:60:14:7c:c2:4e:d5:
         0d:f8:45:a9:78:e3:c4:91:7b:67:02:24:ac:e1:da:4f:63:cc:
         4e:d4:96:2a:b1:fb:ca:1c:db:0f:13:e9:54:fe:cd:b1:32:e9:
         83:f9:f0:74:0c:9f:8e:ee:eb:e2:cc:6a:c9:dd:f3:dd:68:40:
         db:1c:7b:92:37:cc:4d:00:16:a1:3a:7e:d9:c9:b9:0a:0b:1e:
         d4:6c:0c:27:35:97:eb:a2:ba:3f:74:c0:ec:36:e6:78:60:d9:
         38:a0:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:03:04 2025 by rpki-client