Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa
File:                     c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa (raw, json)
Hash identifier:          rcZBzyVl8uRz2TVRZmAKgUVHwpRQgaRrxLZUNPHkt+0=
Subject key identifier:   93:7E:3D:18:6F:08:FD:D9:26:AC:19:BC:6A:6E:F1:AC:B1:32:9E:4B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C55787D2BD4B2507A92B52C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa
Signing time:             Tue 04 Feb 2025 12:37:30 +0000
ROA not before:           Tue 04 Feb 2025 12:37:30 +0000
ROA not after:            Mon 05 May 2025 11:37:30 +0000
asID:                     30036
IP address blocks:        173.21.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:57:87:d2:bd:4b:25:07:a9:2b:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:37:30 2025 GMT
            Not After : May  5 11:37:30 2025 GMT
        Subject: CN=e00123fd-72aa-47f0-8951-2c27cccc0c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:72:62:5d:e3:12:ad:a0:f3:68:fc:0e:1a:
                    d7:3c:0e:13:2b:89:c5:d9:46:f7:be:fa:b0:ef:13:
                    de:d8:54:2f:66:4d:7a:b0:07:30:ec:e5:10:85:5e:
                    8a:b8:51:3c:a8:31:45:ba:e7:eb:b8:e9:b6:35:12:
                    e9:e8:d5:a3:59:ab:e2:7b:da:77:b5:00:2d:d6:d8:
                    02:2a:38:67:6e:e8:60:87:71:35:b2:fd:21:c8:ef:
                    92:20:07:5f:46:8c:a9:1d:ad:99:db:1f:0c:fd:cc:
                    63:eb:6d:a4:9e:92:3d:f6:13:a7:5d:0b:eb:83:49:
                    75:16:f1:6d:43:95:1e:4e:46:d0:68:46:0a:e0:90:
                    36:31:68:da:13:c5:b0:4a:23:8c:fd:ed:c4:97:e9:
                    72:27:01:f1:ed:0d:b7:5b:33:67:f8:f8:86:d0:bc:
                    12:2e:00:f1:39:7a:92:9c:7b:f3:bf:97:84:fd:23:
                    6e:73:37:7e:66:02:cf:2d:6a:5c:72:c6:0e:f2:ee:
                    63:fe:07:1f:c1:c1:fb:8f:7d:6e:49:d4:30:d7:a3:
                    6d:05:ad:59:9f:9c:7f:d8:75:88:0a:40:32:be:23:
                    a8:1e:c5:62:e6:05:bb:74:8a:49:87:48:22:27:77:
                    a7:4c:56:91:4f:1c:4e:94:43:a6:90:ea:a2:1f:8e:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:3D:18:6F:08:FD:D9:26:AC:19:BC:6A:6E:F1:AC:B1:32:9E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c387f5ff-dbdb-304b-bf9b-b508fa7b3253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:35:29:69:56:64:f4:82:7a:5d:71:36:94:eb:68:31:e1:
         41:5d:35:b3:63:34:20:7e:98:e5:2d:65:2c:0a:f2:ad:42:76:
         d9:04:18:0b:bf:9b:d9:36:d0:1d:64:5d:f3:52:ab:8a:f9:23:
         d3:b6:67:f3:55:3f:d3:dc:57:3d:3b:63:cd:5a:42:c4:a5:c7:
         f3:56:7e:41:af:17:5d:7e:0d:c8:fb:79:52:c2:62:52:a5:a3:
         67:39:08:25:b5:be:a3:3d:e7:d0:ec:bc:2c:19:e4:38:9b:e2:
         76:ba:b9:7c:81:20:25:4f:c2:70:a4:40:df:3f:89:9e:e9:af:
         fd:fd:6f:04:ce:a3:db:9c:b3:a0:a0:7e:49:45:b4:2e:07:2c:
         22:82:f3:5b:d7:34:97:1c:28:ba:73:2f:82:d4:62:d6:68:1c:
         00:f8:4d:1c:37:ed:28:ac:d2:bf:f5:39:7e:fe:7f:d9:0a:8d:
         17:13:0e:c5:b8:5f:43:3e:17:48:f9:ab:c3:48:f0:a9:73:ef:
         6f:b6:2c:43:44:3a:58:69:2e:0a:13:11:03:8c:bb:ee:3a:15:
         a0:a0:6c:d2:76:fe:3d:db:73:bb:5c:60:ec:ee:bd:d6:6e:21:
         6a:2e:bc:fa:60:14:82:f6:dd:42:f0:24:53:b5:b6:23:65:2a:
         6a:86:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:33 2025 by rpki-client