Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa
File:                     8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa (raw, json)
Hash identifier:          grnllsBMmO5bXrKs8LHqsV8v1AXq0O3GsXuEZ1QXrb8=
Subject key identifier:   96:85:10:B9:02:5A:C4:55:9E:80:DA:25:18:F2:16:19:95:0F:D1:C2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C263A850285B07B816A50AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa
Signing time:             Mon 03 Feb 2025 11:14:30 +0000
ROA not before:           Mon 03 Feb 2025 11:14:30 +0000
ROA not after:            Sun 04 May 2025 10:14:30 +0000
asID:                     30036
IP address blocks:        173.25.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:63:a8:50:28:5b:07:b8:16:a5:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:14:30 2025 GMT
            Not After : May  4 10:14:30 2025 GMT
        Subject: CN=6ee52e8f-1492-4413-91fe-543f9b46c3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:d6:8b:c4:c6:4e:47:e4:3a:41:2a:fc:eb:
                    ba:15:ba:66:9b:e0:5b:6c:62:91:4b:24:c3:3d:f9:
                    ef:4c:d6:c2:6a:d3:c0:e5:78:1a:06:f0:ee:c9:83:
                    b4:0a:00:af:aa:32:d2:ee:b0:1c:e5:65:78:01:5e:
                    7a:8c:1a:07:f9:24:66:1f:74:e2:a3:de:98:08:bd:
                    3a:d8:21:65:57:63:8a:bc:3f:84:21:13:74:11:77:
                    41:45:de:72:e4:7e:12:99:7e:5f:c3:7a:4e:83:cd:
                    3a:60:64:ac:79:a0:4f:30:b0:8b:d6:56:6f:67:54:
                    16:be:8f:41:31:14:c3:eb:c7:4e:e3:2c:a7:fa:ef:
                    32:f4:40:c1:f9:03:6a:15:ed:16:3b:e6:dd:42:e9:
                    2e:2f:28:23:7e:3f:12:72:1c:25:23:bc:74:03:a0:
                    b6:0d:d1:dd:f4:1f:a0:a6:59:ab:f8:92:1f:3e:e5:
                    eb:7b:f5:4b:d0:bc:61:e2:d8:1c:d7:c0:6f:21:6d:
                    48:a4:a2:d3:37:2b:5e:a7:73:df:54:78:d6:67:af:
                    96:cc:8e:e7:80:96:c6:e2:38:94:91:d2:06:71:ef:
                    be:22:10:b2:2f:31:c1:d1:78:94:7a:64:98:67:66:
                    1f:c3:ab:43:aa:c2:16:0a:cc:da:80:8d:ad:07:2c:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:10:B9:02:5A:C4:55:9E:80:DA:25:18:F2:16:19:95:0F:D1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:56:e5:b2:77:ee:21:fc:27:9e:20:b9:a2:6c:53:9b:fb:d1:
         6b:6f:b8:af:82:f8:08:37:2e:ca:c8:e8:21:77:df:35:ae:dc:
         6f:f5:1b:50:4c:f6:df:5e:e0:aa:77:d0:69:53:fd:3e:ea:54:
         d9:e9:f1:5d:df:e3:08:ec:95:93:3b:fb:89:d5:9c:b0:a4:3a:
         52:40:31:8e:6c:b7:34:e8:b3:44:b5:73:62:1e:2a:4d:2a:93:
         0e:7c:46:3e:20:f6:4e:eb:11:de:12:37:fe:d3:3c:ba:8f:4a:
         6b:80:2f:7a:28:f9:a8:ce:60:a3:13:c2:3d:b0:64:b8:c6:36:
         24:03:36:72:61:ef:a7:93:06:19:e6:7c:76:28:f1:59:07:13:
         9d:84:12:8b:5d:c0:dd:7f:2a:2c:79:2b:52:f0:fc:ba:7d:98:
         b2:c3:e8:c3:4c:82:4d:c4:2b:c4:99:a8:a4:8e:cc:26:41:04:
         66:69:2a:d4:b2:10:78:2f:fc:09:11:30:33:03:6b:00:04:ed:
         c3:85:ce:1f:71:38:40:88:7c:fb:46:06:d5:1f:b0:f4:ea:65:
         a4:5e:fa:ec:8e:8f:45:39:d6:1c:b4:78:5b:5a:b9:10:9a:b9:
         79:b3:99:60:09:3c:bb:23:77:02:2d:56:3d:32:de:2d:08:8c:
         90:be:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:12 2025 by rpki-client