Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c288ec44-27cd-32fb-a857-8f8ba3d84888.roa
File:                     c288ec44-27cd-32fb-a857-8f8ba3d84888.roa (raw, json)
Hash identifier:          TStt+cp0+GL5JeQsqfmCteS+I8fCjZIqL+VLW5AY4+k=
Subject key identifier:   0F:E8:97:E6:25:31:BC:09:F0:BB:BC:05:20:47:AE:8C:3C:7C:B9:9C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57F887EF84804F38C96A2C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c288ec44-27cd-32fb-a857-8f8ba3d84888.roa
Signing time:             Tue 04 Feb 2025 13:58:06 +0000
ROA not before:           Tue 04 Feb 2025 13:58:06 +0000
ROA not after:            Mon 05 May 2025 12:58:06 +0000
asID:                     30036
IP address blocks:        173.27.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7f:88:7e:f8:48:04:f3:8c:96:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:58:06 2025 GMT
            Not After : May  5 12:58:06 2025 GMT
        Subject: CN=e450d527-03e7-4464-b462-b4a4c41e1c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:7e:10:52:81:1e:cd:b6:6b:b2:ad:19:d0:
                    94:df:dc:93:e8:80:ad:1f:e9:93:e4:7f:08:7e:84:
                    67:e6:f1:65:b1:dd:c6:5c:d7:6e:6d:bf:b1:34:16:
                    5a:79:b3:bb:97:6a:10:65:dc:af:cf:a3:23:47:4a:
                    18:7b:c2:b3:0b:57:0d:5b:b5:af:15:e4:89:c3:52:
                    46:7e:35:d3:bc:56:6f:31:7c:ed:e0:79:dc:78:9a:
                    62:6b:27:3c:4a:91:99:e7:ea:54:31:e9:75:43:96:
                    79:89:75:e2:ec:73:e3:69:78:1b:ce:ca:f6:d3:23:
                    7e:26:d7:06:fd:73:9a:1c:e3:80:4c:3f:ef:9b:9f:
                    b2:51:a3:c5:03:b3:d8:1f:a9:66:eb:ff:b0:6d:40:
                    65:f1:54:3d:fd:6e:65:aa:12:ce:9f:9a:23:2e:9c:
                    86:cc:81:b5:b9:be:dc:ef:a4:bd:aa:30:c0:2f:65:
                    4c:86:bd:73:fe:48:bc:3a:b1:bd:4d:56:a2:ff:4d:
                    85:2c:68:ec:02:aa:61:43:9f:14:d5:1f:58:57:fb:
                    66:08:80:a7:6f:92:72:a7:9d:c5:02:65:70:f7:0d:
                    b2:cb:a9:5c:af:38:20:d5:1b:60:33:68:8c:36:4e:
                    cf:60:6e:10:2b:ed:78:5b:e8:a9:a9:2b:63:6d:d6:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:97:E6:25:31:BC:09:F0:BB:BC:05:20:47:AE:8C:3C:7C:B9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c288ec44-27cd-32fb-a857-8f8ba3d84888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:23:13:dc:0c:15:f4:62:c8:27:bf:10:d4:df:e0:ca:69:4b:
         ef:b6:4d:09:a3:5d:ca:2c:4d:33:80:15:da:45:02:8a:e3:e2:
         82:73:93:cf:b9:f8:b8:b8:eb:14:0e:f5:48:a4:4a:ca:74:8f:
         53:ca:7e:72:94:b5:e6:ec:f9:74:55:13:c5:6d:06:96:0e:e3:
         f6:5e:57:b5:59:a6:c8:c7:be:90:2f:65:a9:cc:50:3b:cb:f3:
         60:96:7a:b2:78:26:9c:9c:6c:6c:12:c6:5e:a9:0f:02:f2:7f:
         d9:09:6f:aa:37:72:36:52:7d:cb:8c:17:0a:af:bd:6f:55:88:
         70:77:d2:5b:89:70:30:8e:d1:ce:59:61:77:30:6c:62:79:48:
         71:a1:13:a2:9b:1a:40:4c:14:17:89:48:24:f0:6d:45:6a:9e:
         9d:19:be:1b:86:cb:94:54:84:95:f4:4f:05:e4:b3:07:00:54:
         de:80:81:58:93:1b:f1:2b:d3:ac:4a:0e:28:12:6e:54:16:7d:
         b6:f1:e4:f6:14:a6:38:cd:b0:f7:61:a4:47:9a:24:41:fd:70:
         2c:75:38:92:23:db:5f:45:96:34:ad:9d:cb:98:36:1f:6f:2c:
         30:c2:3f:34:ee:ea:10:23:d8:f0:db:5f:ea:3a:ff:fa:d8:df:
         78:f8:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:54 2025 by rpki-client