Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bffc190-0b13-3306-8407-a56dd070e24b.roa
File:                     7bffc190-0b13-3306-8407-a56dd070e24b.roa (raw, json)
Hash identifier:          eZ9hSjcaFXv9zG2aoAQt3Xh51GtI8wlBkFQh1LdISTg=
Subject key identifier:   7B:C2:B4:0B:CD:4C:47:58:58:81:1E:FC:80:A1:12:98:DF:7E:65:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2605E7874653DC8151C5480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bffc190-0b13-3306-8407-a56dd070e24b.roa
Signing time:             Mon 03 Feb 2025 11:07:53 +0000
ROA not before:           Mon 03 Feb 2025 11:07:53 +0000
ROA not after:            Sun 04 May 2025 10:07:53 +0000
asID:                     30036
IP address blocks:        173.24.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:60:5e:78:74:65:3d:c8:15:1c:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:07:53 2025 GMT
            Not After : May  4 10:07:53 2025 GMT
        Subject: CN=4fc0eab6-bec4-4537-9485-8d41f1f48a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:46:7e:a2:74:08:8f:89:ed:f7:3a:9e:7e:ea:
                    c1:67:c6:ef:7a:3e:7a:6e:80:dc:a1:64:ee:8d:20:
                    f0:ae:6b:33:42:60:5b:e4:98:ff:7c:ac:3f:51:f3:
                    c1:fd:9a:a3:04:90:33:fd:50:2b:51:f8:45:e1:ad:
                    05:b0:f1:e0:3b:ce:4e:e8:ce:ef:88:c3:c8:4d:a1:
                    c8:96:d5:1b:aa:28:60:f6:d2:21:09:a3:56:a1:14:
                    a9:cd:9a:de:39:ce:19:b8:71:9a:7f:16:c0:25:5e:
                    a1:e8:45:0f:97:8e:04:fc:72:e3:57:98:30:ac:5b:
                    e6:44:50:bb:10:29:4d:b1:80:7c:25:fc:96:fe:59:
                    1c:3f:a5:f7:c7:b3:d8:42:46:73:4f:0e:35:4c:6b:
                    e9:33:ed:f5:cc:55:50:ca:15:2b:d1:f1:06:1b:9f:
                    ea:76:f3:63:0f:09:d4:fd:21:10:21:a4:8a:04:03:
                    93:77:80:56:d7:88:15:61:a8:19:a4:7a:56:6b:ed:
                    bb:ba:75:43:e1:35:9c:98:14:61:a0:f1:8b:7a:75:
                    76:b3:00:9b:73:d3:ce:72:68:02:52:25:9b:54:e7:
                    83:b4:e7:b4:7a:f8:9e:9f:9a:ce:e8:c2:97:b7:23:
                    df:7e:77:83:38:3f:95:44:ec:92:1f:cc:a4:5b:1e:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C2:B4:0B:CD:4C:47:58:58:81:1E:FC:80:A1:12:98:DF:7E:65:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bffc190-0b13-3306-8407-a56dd070e24b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:35:6f:f4:28:c1:6e:68:77:ac:08:2e:4f:ec:6a:41:a9:
         fa:32:a8:e1:23:54:6f:c9:aa:e1:66:41:f8:aa:d0:57:c8:d5:
         0f:8b:aa:d1:c0:f8:e1:19:09:fe:e2:00:7e:81:0f:cb:e2:d5:
         c1:e4:57:64:19:1d:3b:9d:44:cd:f8:7a:b0:11:a9:bf:73:aa:
         26:7b:47:df:8d:ec:a3:4a:04:94:79:68:3d:25:07:6f:ea:35:
         dd:f2:32:47:70:8f:04:4e:b2:1e:55:df:a8:42:d7:cf:c1:aa:
         63:2c:af:9b:b4:97:44:91:ce:79:8e:d7:bf:c0:47:4c:e9:38:
         b8:95:fc:8f:db:9b:e9:19:61:26:cd:e5:88:1c:a4:e2:50:25:
         8e:51:66:f6:b4:0d:da:11:0e:a3:19:2a:bd:b9:21:b7:e6:5d:
         64:f3:eb:b5:a4:00:5a:03:51:04:eb:f1:87:99:82:bc:74:a5:
         1f:03:7c:e6:99:db:c4:65:bf:2a:6e:e8:c4:75:5d:15:15:a2:
         c3:eb:14:4d:55:80:f6:3f:d2:91:ca:f7:7a:1c:36:5b:dc:95:
         93:dc:bd:40:92:11:f1:9e:6d:3c:78:0c:5a:88:b0:bb:6c:d1:
         8d:26:fa:61:0b:dc:fc:45:8d:ce:cc:ed:6d:37:c2:dd:4f:ba:
         d3:fb:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:55 2025 by rpki-client