Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa
File:                     9a8cb9c9-2a82-314f-831e-767a34553ab5.roa (raw, json)
Hash identifier:          jDQZLn45vtCRfVBBtV5VewNL1HSM2s24JnBxq+wb4FM=
Subject key identifier:   AC:65:C0:40:5C:E3:EE:C2:0A:A9:F7:B3:57:B2:E1:75:A8:A8:C7:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B736CCF1FD93FF476D7C0880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa
Signing time:             Thu 30 Jan 2025 11:10:14 +0000
ROA not before:           Thu 30 Jan 2025 11:10:14 +0000
ROA not after:            Wed 30 Apr 2025 10:10:14 +0000
asID:                     30036
IP address blocks:        173.18.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:36:cc:f1:fd:93:ff:47:6d:7c:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:10:14 2025 GMT
            Not After : Apr 30 10:10:14 2025 GMT
        Subject: CN=5350c577-e703-4854-856a-37c9176382e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:64:df:6e:a9:f9:4e:71:5f:60:d7:8b:2c:2a:
                    2e:44:be:0c:23:13:61:83:4d:b0:45:37:ac:7a:89:
                    0e:d7:f5:d0:67:da:f3:fb:d9:ed:84:8c:ea:b5:f0:
                    4b:9f:db:a6:06:2e:4c:e3:e8:df:d0:3e:2d:2f:fc:
                    c3:eb:ed:1c:cf:6e:ae:41:8d:40:4d:3d:2f:6b:bd:
                    46:c3:a3:97:07:26:22:49:5b:a0:f5:3e:c7:8c:48:
                    49:c9:54:cf:d8:59:14:f0:d7:c0:41:5c:dd:19:fb:
                    cb:2d:12:72:48:e1:32:e8:d6:c8:23:82:76:c6:7c:
                    21:c9:08:03:19:41:cd:bb:4c:0e:42:5e:da:5b:e3:
                    de:cb:5e:e1:73:ba:09:56:30:4a:22:89:2f:97:3e:
                    3a:01:1b:db:57:e7:b4:ee:7a:38:65:30:13:91:2b:
                    7c:2d:6a:4f:76:1e:bc:11:4a:b7:aa:0b:b9:86:21:
                    60:46:f1:a6:a9:3f:2d:10:9b:36:cd:c4:1d:4f:31:
                    bc:aa:32:3f:f0:6b:5f:72:21:b4:77:7d:ca:d8:45:
                    1a:9b:d9:33:7e:a6:42:46:f9:3c:3c:ac:5d:48:c7:
                    91:70:33:bf:6f:9c:2e:48:5b:88:e8:ea:9e:9e:97:
                    14:8b:e7:f6:7c:08:0e:d3:69:af:2d:55:a4:d3:53:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:65:C0:40:5C:E3:EE:C2:0A:A9:F7:B3:57:B2:E1:75:A8:A8:C7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:64:79:19:84:b2:2b:e0:9b:e3:47:b3:eb:f0:18:40:88:b8:
         6d:ee:6b:07:de:57:f1:83:b0:02:56:5f:05:4c:bf:7a:65:4a:
         8a:c9:7b:63:fc:78:df:a9:54:8a:f3:8e:d7:4d:88:fb:4a:41:
         a3:4e:24:2b:f2:52:4c:fd:39:9c:49:d1:ec:69:08:0a:ec:32:
         9a:19:85:a6:f7:d2:e6:8b:13:81:1c:99:d2:10:3d:31:70:66:
         e6:03:d0:6e:1e:89:6d:ee:5b:89:66:de:07:06:fb:10:c7:eb:
         4b:58:4e:11:75:ac:47:65:ab:3f:42:cf:ed:79:5c:51:a6:b3:
         6f:6e:5b:1f:19:bd:a6:0c:75:f5:44:bb:b2:78:2f:24:8a:9e:
         11:fc:ff:9c:72:f1:a6:8f:4b:a7:08:f4:a3:dc:14:6d:3f:7e:
         95:0b:6f:87:d7:68:2f:bc:31:e0:8c:30:80:76:b8:8e:ca:72:
         0f:3b:4f:91:d9:64:f6:b1:41:8c:08:f9:fc:17:35:a5:a6:9c:
         5e:0c:64:7f:82:eb:72:95:4b:84:2d:c7:85:b4:18:0b:68:d6:
         29:98:5e:14:95:4b:69:96:36:68:1c:0e:77:c0:ea:9c:27:db:
         b2:11:37:38:5c:0e:56:6d:5d:7a:62:a2:4e:66:94:88:70:da:
         e0:fa:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:54 2025 by rpki-client