Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5978ccf2-c315-31d2-8928-6296b6a8aae8.roa
File:                     5978ccf2-c315-31d2-8928-6296b6a8aae8.roa (raw, json)
Hash identifier:          4UVQOP2yros5/iikOVCN9s8taTOvcqDnpW2SRcpFcU0=
Subject key identifier:   DF:A6:35:93:51:B7:FF:3D:EC:6D:26:BE:BE:F8:BC:0A:E6:1E:2D:C2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FE13D6B4E24917660E2E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5978ccf2-c315-31d2-8928-6296b6a8aae8.roa
Signing time:             Wed 05 Feb 2025 11:24:41 +0000
ROA not before:           Wed 05 Feb 2025 11:24:41 +0000
ROA not after:            Tue 06 May 2025 10:24:41 +0000
asID:                     30036
IP address blocks:        173.31.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fe:13:d6:b4:e2:49:17:66:0e:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:24:41 2025 GMT
            Not After : May  6 10:24:41 2025 GMT
        Subject: CN=4f529eaf-cde0-446c-b209-e31ebd32482c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:d4:f7:2d:4f:42:94:c7:a5:03:a0:4b:8f:
                    23:27:38:0c:78:52:0a:d1:ea:8b:c8:e0:5f:80:17:
                    95:a9:fe:49:d1:47:be:9f:dc:36:75:db:10:7f:2d:
                    90:6c:a6:1e:27:73:28:3a:2f:3b:40:79:2f:02:17:
                    4d:e0:42:ff:85:d3:4e:92:12:af:51:f9:db:e8:7b:
                    d9:ba:96:e0:b3:cd:6b:a4:8f:60:41:d5:a4:13:84:
                    2b:f3:b8:30:16:a7:f2:f8:33:85:df:3d:4d:e7:26:
                    92:d9:c8:7b:0a:07:e6:0a:6a:2d:5c:e2:bb:c2:cc:
                    46:e5:ce:31:f8:a4:67:bb:64:22:6e:12:1c:79:6d:
                    74:be:fe:38:33:e5:12:ff:31:72:3a:7a:2e:38:66:
                    1e:24:db:ab:f6:5a:9c:95:a5:f0:d8:78:ec:0a:37:
                    c9:7a:bd:af:39:9d:8b:ff:32:94:ee:6e:4d:61:90:
                    f9:2f:0e:f5:cd:c8:2e:1f:49:dc:63:f8:d7:eb:21:
                    1e:cf:49:46:ea:6c:b4:29:4f:72:ac:3f:2a:7b:28:
                    99:79:87:49:01:71:99:bf:8a:03:40:5d:1e:c3:fa:
                    77:3e:32:3d:78:e1:b6:68:96:b8:f0:07:f9:0f:14:
                    b6:b8:01:fd:4f:6c:2c:52:64:9c:55:71:79:cf:57:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:35:93:51:B7:FF:3D:EC:6D:26:BE:BE:F8:BC:0A:E6:1E:2D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5978ccf2-c315-31d2-8928-6296b6a8aae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:86:8d:a7:f9:61:b6:89:7f:15:8e:85:8f:62:91:c5:4d:0f:
         fe:e6:7d:cf:2e:ea:f7:d1:4a:13:83:ed:24:c3:84:9d:f3:3b:
         a1:e6:3c:39:4e:3b:94:09:18:47:50:be:2e:b1:c8:b4:01:03:
         8b:0e:d5:34:54:a4:37:90:d9:60:c2:e6:ba:33:00:a6:64:67:
         4c:2c:46:43:e8:62:c0:8f:14:c3:c2:49:e1:15:ff:38:2b:19:
         95:46:55:f0:dc:6c:51:7c:00:cf:8c:f2:8d:5d:45:f2:5f:33:
         86:8c:9a:82:3d:d6:91:b1:49:e1:72:53:83:22:eb:5a:af:2d:
         e4:4b:92:5c:21:10:0a:73:3a:13:a0:1c:00:71:f0:bf:cf:4b:
         61:33:28:59:a7:89:f6:83:77:23:02:7f:67:24:e4:cd:23:92:
         58:f4:a4:53:c2:de:68:40:fa:a5:bb:40:bf:76:c2:0a:de:c9:
         da:f2:6d:9f:0e:bb:42:0c:0c:5e:72:56:94:da:e8:88:b1:2c:
         5a:bf:12:18:59:d5:82:8c:5b:f9:13:72:dc:53:f5:1f:7b:84:
         02:c4:1e:df:b0:f3:4b:10:f8:24:06:4a:66:11:60:7f:84:60:
         c6:15:a7:82:9c:f1:05:28:1b:47:ba:a1:b4:61:83:c9:bf:ce:
         18:58:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:14 2025 by rpki-client