Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708c2b4b-5daa-3cdf-8239-6e6723e057f1.roa
File:                     708c2b4b-5daa-3cdf-8239-6e6723e057f1.roa (raw, json)
Hash identifier:          db6I2t/5K9inHQBgW9vu4FtFclF8U4Vwvbh2m2J7Wo4=
Subject key identifier:   D1:23:B5:3F:2D:62:FE:63:12:65:A0:C6:92:85:70:3D:8C:5A:CE:08
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2615C2A55138C13BD394700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708c2b4b-5daa-3cdf-8239-6e6723e057f1.roa
Signing time:             Mon 03 Feb 2025 11:09:53 +0000
ROA not before:           Mon 03 Feb 2025 11:09:53 +0000
ROA not after:            Sun 04 May 2025 10:09:53 +0000
asID:                     30036
IP address blocks:        50.80.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:5c:2a:55:13:8c:13:bd:39:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:09:53 2025 GMT
            Not After : May  4 10:09:53 2025 GMT
        Subject: CN=c018fa1f-4fe3-4286-864f-00dacdb5a206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:98:71:63:1d:f8:ee:11:d2:a9:74:ce:11:
                    38:ad:0d:e7:87:3d:c9:ea:03:91:51:df:5c:7e:9d:
                    75:41:51:b6:e6:0e:53:95:b3:cb:d7:c9:d9:d4:fa:
                    8d:f3:6b:94:1f:29:f0:df:36:51:e7:4e:46:f9:30:
                    75:cc:88:3f:5b:46:33:b5:17:31:d4:fa:86:cf:70:
                    f8:87:13:ad:f8:8f:6f:e4:38:91:e2:43:e3:49:e7:
                    85:53:57:4f:51:c7:e0:83:14:58:f1:53:60:aa:11:
                    2b:44:c9:2b:70:4c:16:9e:a3:23:13:f2:fb:9b:91:
                    f0:4a:e9:e5:ed:6c:73:f3:53:fe:cc:be:22:b9:5a:
                    68:bd:37:87:54:3e:e8:d6:9b:1f:fd:da:ef:e5:a0:
                    0b:12:42:1f:64:22:8c:2c:85:66:9f:32:1d:08:c9:
                    02:74:c4:64:ed:9c:a2:31:df:2c:03:6b:87:58:9c:
                    b2:59:f7:b9:ed:b1:35:5a:57:4f:5a:5e:b6:97:8d:
                    e2:71:d5:9d:81:2e:28:8e:d0:ac:30:0d:d5:98:53:
                    ae:9c:f9:f9:e8:c3:06:5a:fa:2e:ee:f4:b5:0c:68:
                    eb:2d:7e:48:ed:f0:f1:cc:09:4f:f0:52:60:b9:9c:
                    06:82:57:43:1f:24:31:0e:1f:69:d5:9a:25:2d:63:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:23:B5:3F:2D:62:FE:63:12:65:A0:C6:92:85:70:3D:8C:5A:CE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708c2b4b-5daa-3cdf-8239-6e6723e057f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.80.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:9d:38:90:36:f6:1c:fe:0c:37:f9:44:6a:d1:85:ef:f3:
         2a:66:94:3f:e3:ac:4d:99:60:8f:b8:4c:b4:bc:6c:b3:fc:c9:
         b1:b0:a4:93:8b:48:bf:2d:7d:c8:df:9b:8a:72:83:48:18:94:
         7f:56:da:40:b8:90:ca:bb:ac:6b:02:8d:d1:45:28:b2:8c:5c:
         cf:17:ba:5b:1f:ba:dc:af:67:47:96:14:c2:b7:d2:46:15:78:
         c1:b2:7d:b9:1b:68:7c:fb:22:8f:9d:e7:43:43:a1:29:67:2b:
         15:3c:15:eb:33:cf:e5:3a:55:b4:26:d2:37:b8:85:72:22:75:
         b5:fe:93:89:1d:a3:af:d7:c2:78:ac:78:03:d8:94:c3:0e:9d:
         91:7c:cb:e1:5d:78:50:7d:6c:41:24:e4:a2:01:a4:9c:1c:24:
         82:4b:53:30:78:de:a4:4b:57:f7:8e:11:3e:49:04:aa:3b:48:
         87:7f:77:17:9c:47:1a:3f:af:d9:67:6c:b9:cf:ed:e6:0b:05:
         97:32:d1:ae:d6:48:e9:54:e5:e1:8a:ff:14:ea:dc:40:be:34:
         a2:7e:3d:50:09:68:12:b7:b4:09:0b:8b:dd:72:ea:ce:6b:d9:
         9f:82:17:dd:49:a2:4d:3b:19:4d:17:6b:f4:b3:a3:30:15:ee:
         6d:a4:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:15 2025 by rpki-client