Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74f7b179-d350-3df7-8a84-df668b6878a8.roa
File:                     74f7b179-d350-3df7-8a84-df668b6878a8.roa (raw, json)
Hash identifier:          pRiE5TAZw3eEKMVJZls7fYdPjDTx4PaEIj7PVaqvk9k=
Subject key identifier:   50:CD:C8:7D:AF:FA:0A:04:4F:E0:5F:CA:00:EB:60:62:47:97:7A:B0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B736FD594FEBD78667E7DF40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74f7b179-d350-3df7-8a84-df668b6878a8.roa
Signing time:             Thu 30 Jan 2025 11:10:37 +0000
ROA not before:           Thu 30 Jan 2025 11:10:37 +0000
ROA not after:            Wed 30 Apr 2025 10:10:37 +0000
asID:                     30036
IP address blocks:        173.25.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:36:fd:59:4f:eb:d7:86:67:e7:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:10:37 2025 GMT
            Not After : Apr 30 10:10:37 2025 GMT
        Subject: CN=b62fbb4c-d424-4261-abd3-58f99aad3c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:b5:d7:be:5e:c6:ab:f2:4e:c3:15:57:2b:
                    15:23:8d:ae:31:26:bb:1b:37:30:d0:c5:b8:17:7f:
                    0e:3f:70:43:87:98:d6:9f:77:c3:58:7e:81:21:85:
                    70:d2:46:a6:16:b4:76:d1:9e:a1:97:9e:40:67:bd:
                    c3:2f:50:7e:65:d6:b4:ff:be:ff:66:dc:89:34:e5:
                    5a:36:28:ff:f1:67:7a:1a:c9:7f:53:8b:a5:7b:11:
                    23:fb:57:f1:50:ae:b8:79:89:2d:57:13:08:1b:d4:
                    94:f3:c3:90:55:94:66:a8:e6:fd:d8:9d:be:21:85:
                    35:43:84:97:f2:9d:0e:8b:77:70:b7:b2:20:ac:ff:
                    6a:1a:c7:60:93:43:32:40:b1:b1:fb:cc:d8:19:fe:
                    2a:78:e3:d0:7a:26:54:8d:c7:b5:ba:cb:fb:0b:d5:
                    c3:fd:fd:b7:3c:3d:81:b0:3c:fe:66:f3:74:97:f0:
                    cc:01:67:08:1c:c6:4c:50:64:fc:53:6d:98:d6:bf:
                    3e:53:25:33:18:68:45:97:91:f2:b7:59:1c:ac:5e:
                    ff:d5:ed:a9:1a:b2:f5:97:37:e3:52:14:c7:d7:bd:
                    6b:8e:98:8b:7d:c5:73:a9:7b:6c:b5:b4:f4:21:86:
                    0d:1c:43:9a:cb:c6:09:89:72:80:58:64:c7:fa:56:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:C8:7D:AF:FA:0A:04:4F:E0:5F:CA:00:EB:60:62:47:97:7A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74f7b179-d350-3df7-8a84-df668b6878a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:71:6c:08:f7:8a:ce:dc:a5:97:07:82:bb:4a:20:d5:69:
         66:4b:94:59:64:79:d2:c4:6a:20:53:0d:e4:e7:8e:4d:8a:2e:
         c7:83:52:92:c2:0f:6e:2d:9c:4c:4f:58:3a:4c:5a:e7:11:52:
         2c:94:40:a4:f1:a5:98:94:e8:57:cc:db:6d:02:5f:96:78:88:
         db:65:7a:20:ae:8c:2f:20:c6:8a:31:b6:ff:40:8d:91:82:9c:
         98:52:e6:5b:df:8d:bf:a8:4d:87:be:23:92:eb:95:3a:87:3c:
         e6:ff:08:c0:77:b7:0b:c6:83:ff:cd:67:2f:21:e9:b4:82:24:
         20:5a:bb:24:b1:2e:89:a5:c0:36:94:c9:31:3d:71:7b:05:7d:
         f8:a5:c7:1b:e1:da:9e:2e:57:c1:09:0c:c2:4f:d8:34:f8:d4:
         8a:20:6f:ea:37:d0:48:29:75:58:5b:ec:07:3e:d9:78:6c:96:
         d5:6a:e0:91:96:ab:9a:29:c2:5e:43:60:21:61:8d:ca:36:64:
         c8:df:32:83:31:76:fc:cf:77:3d:3d:52:e2:c5:ba:db:fd:a4:
         6c:af:01:69:e0:55:d6:81:69:f3:d1:58:72:2c:42:1d:38:22:
         3f:bc:33:4a:2d:cf:25:2f:89:d3:01:a7:3e:07:c4:6e:ef:8a:
         56:5f:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:31 2025 by rpki-client