Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/66a4bb4d-c434-3bf6-b4c0-5c8cd7eb5f7f.roa
File:                     66a4bb4d-c434-3bf6-b4c0-5c8cd7eb5f7f.roa (raw, json)
Hash identifier:          vktn1IyZdOYg4jeFGUXioQ06oMBzCJjjLQ16Y10wvb0=
Subject key identifier:   D7:C9:29:71:5A:24:2E:09:62:01:28:58:3F:F8:45:AF:A7:AB:26:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C58633295F8AA2883EF09E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/66a4bb4d-c434-3bf6-b4c0-5c8cd7eb5f7f.roa
Signing time:             Tue 04 Feb 2025 14:11:32 +0000
ROA not before:           Tue 04 Feb 2025 14:11:32 +0000
ROA not after:            Mon 05 May 2025 13:11:32 +0000
asID:                     30036
IP address blocks:        173.26.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:86:33:29:5f:8a:a2:88:3e:f0:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 14:11:32 2025 GMT
            Not After : May  5 13:11:32 2025 GMT
        Subject: CN=2e0ccabd-4ac1-495b-8360-8e752d810eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:e9:2c:dc:2d:74:da:41:9a:9d:53:24:b7:
                    ab:ab:5b:89:ea:f1:32:36:20:7f:eb:95:39:6e:ed:
                    ea:98:54:3e:ce:61:c3:43:1d:34:b7:40:9b:21:cd:
                    78:28:7b:a9:32:ae:d8:d5:5a:94:8c:5f:92:c5:e3:
                    d6:62:d9:2e:4d:00:5c:00:1b:11:bb:9b:35:88:e7:
                    72:22:7c:eb:63:e3:33:64:01:15:42:2d:4c:3e:ff:
                    0e:7b:99:a0:c5:36:61:7d:a3:05:df:ed:5a:56:31:
                    02:6b:76:28:26:19:8b:fe:cf:3e:b8:38:9f:d5:be:
                    d3:1a:00:4a:7f:e1:e1:62:b8:90:53:a0:03:8d:5a:
                    49:0a:1f:a1:7a:04:97:57:36:d1:ad:69:2a:7f:4c:
                    ac:4a:e5:84:b2:34:db:a2:b5:93:fe:4a:df:4c:1c:
                    b0:6b:9f:66:82:b6:97:a5:50:49:d4:5c:46:e0:88:
                    6b:8d:eb:b8:43:08:da:ac:bc:95:11:d8:9c:2b:3d:
                    9f:d1:b8:fb:8e:4e:72:da:61:f3:a6:2b:00:10:4a:
                    1e:18:c2:a9:e7:3a:89:ea:01:1b:88:45:0a:cb:05:
                    c6:05:d4:14:de:98:69:e6:fb:db:50:bf:58:20:16:
                    c8:5b:fc:f3:d0:60:ba:45:3b:c4:a7:9e:9c:0c:db:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C9:29:71:5A:24:2E:09:62:01:28:58:3F:F8:45:AF:A7:AB:26:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/66a4bb4d-c434-3bf6-b4c0-5c8cd7eb5f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:de:21:28:3e:ca:22:1d:b5:c9:ee:cd:5e:57:3e:99:74:
         61:bd:f4:ee:8e:5f:18:6f:4f:cd:23:d5:94:28:1e:2a:ee:dd:
         a4:30:3e:f5:6d:5a:0c:cf:69:e8:76:f6:c7:0e:02:53:42:4c:
         c3:da:68:19:de:08:26:52:98:fc:92:04:d5:d5:b1:1f:01:bc:
         dd:57:98:06:61:67:0d:60:d6:b2:fc:cb:9e:7f:0c:d5:0a:f8:
         56:5f:93:e7:b8:76:94:f9:8b:16:b9:58:5b:17:71:75:10:32:
         5e:c1:d3:2f:46:85:33:c3:bd:cc:21:cf:91:68:85:85:4d:e7:
         6f:e6:88:33:66:9a:2d:9b:fd:6f:3e:3a:24:5e:28:da:04:37:
         2d:18:1e:a4:f2:d9:8d:c3:43:2a:2d:55:0b:52:ff:9d:ab:95:
         37:ee:04:ea:1f:4d:d7:fd:0d:08:78:8a:63:06:24:54:82:3e:
         0b:b3:28:b7:d4:1f:69:41:af:af:93:79:d2:ea:c4:80:b7:59:
         09:ef:8e:fa:e8:1f:32:3a:de:d1:ab:ff:2b:5f:27:b9:80:26:
         84:e9:6e:09:f9:6b:db:c7:74:5d:99:fd:ad:bc:63:19:f2:3d:
         ed:d2:91:8c:c9:8c:24:29:ef:12:8d:0f:d9:0b:9b:20:e7:a6:
         92:27:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:50 2025 by rpki-client