Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8975e8b2-79d0-3d60-8b52-c28a478a5c03.roa
File:                     8975e8b2-79d0-3d60-8b52-c28a478a5c03.roa (raw, json)
Hash identifier:          PsZBm/iWXMW/RbOMuxlX0ixDW9pUnvoVfjTnboZN+7I=
Subject key identifier:   58:F2:A5:A3:AE:94:82:06:40:16:1A:67:D5:E2:F5:D1:09:8A:BE:C5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5867F9D5C0B4DD6FE1D56C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8975e8b2-79d0-3d60-8b52-c28a478a5c03.roa
Signing time:             Tue 04 Feb 2025 14:12:08 +0000
ROA not before:           Tue 04 Feb 2025 14:12:08 +0000
ROA not after:            Mon 05 May 2025 13:12:08 +0000
asID:                     30036
IP address blocks:        173.30.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:86:7f:9d:5c:0b:4d:d6:fe:1d:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 14:12:08 2025 GMT
            Not After : May  5 13:12:08 2025 GMT
        Subject: CN=a87d75d6-64bf-42c2-975f-3dce2b69ca2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:84:01:d8:c6:7f:9c:2a:5b:de:e2:d9:88:
                    29:e2:49:44:fa:55:06:8e:f8:db:a5:fa:27:54:c9:
                    81:2d:04:13:25:2e:07:f4:7e:bb:5e:9f:31:dd:01:
                    54:60:9c:93:7a:24:d8:d3:15:31:ed:90:cd:6b:cb:
                    8f:d7:b7:ab:84:a9:c7:81:7c:f9:c1:b8:55:82:65:
                    62:a2:9c:76:a1:45:8c:56:55:a9:4e:c4:84:90:d0:
                    a3:a8:f3:4f:6e:82:f8:d1:15:fc:3b:d2:6b:f6:50:
                    45:f4:eb:f1:9c:7b:d7:23:09:cb:2e:6e:0d:08:7f:
                    0e:dc:fd:cd:ae:bf:2c:0e:09:e5:35:a1:ca:de:e3:
                    37:8f:ad:be:c6:9b:94:da:49:9c:e8:e5:4c:c2:81:
                    a0:bc:ee:fa:e7:bb:83:63:6b:37:be:ca:8a:bb:80:
                    00:9a:08:38:cd:b0:7f:0d:8d:03:a3:98:07:f9:44:
                    fe:0c:d8:7e:89:bc:f4:a8:d6:72:76:14:b6:e4:e8:
                    9d:cc:15:4e:d6:c4:e5:b5:7e:5a:a0:9f:e8:46:ef:
                    09:6d:ae:6b:57:dc:95:06:89:32:95:cc:bb:d2:3b:
                    d6:05:2e:0f:01:43:a7:c9:23:03:38:c6:2e:ad:68:
                    d0:95:38:c2:fb:30:65:2a:af:ca:04:ae:cb:28:f4:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:A5:A3:AE:94:82:06:40:16:1A:67:D5:E2:F5:D1:09:8A:BE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8975e8b2-79d0-3d60-8b52-c28a478a5c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:39:92:90:06:34:5f:1f:12:54:07:f7:df:44:83:fa:d8:73:
         5f:b4:d5:44:fa:e9:0b:d7:d3:32:c6:f2:15:0c:c6:58:9e:97:
         11:26:2a:aa:7e:3f:a6:b8:a5:08:da:1a:de:f0:7a:51:97:d6:
         cd:e0:6d:24:c4:99:b9:37:8b:ca:8e:f7:02:13:77:db:f1:02:
         ad:70:f0:ca:b6:67:d9:57:1c:80:07:95:9b:56:70:5a:ff:33:
         e2:65:e9:0e:f3:ad:11:57:43:91:c0:b6:7d:00:e4:d0:33:cd:
         95:ff:c3:e6:f1:72:2e:17:49:df:f2:cb:24:2b:f0:1e:d2:46:
         57:67:fa:66:a2:63:8a:b0:55:00:40:28:bd:4e:f6:31:ba:74:
         91:94:d7:45:8f:dc:1f:f5:17:66:0e:ff:3d:90:a3:27:59:ec:
         7a:d8:6f:a5:da:82:72:82:d5:ae:84:6c:ec:fa:b3:dd:56:b5:
         6f:ce:93:fa:85:0a:d5:9b:1a:17:08:b8:23:2a:b3:11:f7:f1:
         36:91:02:30:a3:64:5e:4f:bc:6d:19:87:a7:9f:cb:22:cc:f9:
         1d:35:58:05:fb:e9:ac:31:f1:8e:aa:38:93:59:5a:b0:5d:c6:
         63:79:de:f5:75:1d:53:f4:61:d8:8b:25:f5:78:f2:b4:14:56:
         5f:7d:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:39 2025 by rpki-client