Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa
File:                     d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa (raw, json)
Hash identifier:          xWLoAqZ6ttL+YNb3Z7QVSXsoOA6W2socAHVW2rUa1XE=
Subject key identifier:   03:E7:80:43:3B:2C:8C:CB:C5:A9:5C:C5:D9:69:AE:8F:EF:A7:76:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C533B60A1260DF249D2078C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa
Signing time:             Tue 04 Feb 2025 11:25:19 +0000
ROA not before:           Tue 04 Feb 2025 11:25:19 +0000
ROA not after:            Mon 05 May 2025 10:25:19 +0000
asID:                     30036
IP address blocks:        173.24.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:b6:0a:12:60:df:24:9d:20:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:25:19 2025 GMT
            Not After : May  5 10:25:19 2025 GMT
        Subject: CN=6d3f78b3-c0dd-4738-a52c-9415aee14700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:31:07:5d:9f:5e:af:68:28:3e:31:b6:c4:
                    6a:9d:4c:ae:7a:8a:c0:5f:ac:d8:b1:19:8c:74:e0:
                    1f:02:a0:7b:8d:bd:07:a2:7d:6a:c2:13:8e:7c:43:
                    18:19:bf:25:78:23:d4:56:6a:23:de:ef:c9:b9:b0:
                    1e:69:86:51:b7:6a:e1:a7:fe:42:36:1b:10:70:7c:
                    e3:23:be:5a:01:13:af:d1:57:ae:64:f7:f7:e1:18:
                    9c:7e:61:e8:4b:47:80:94:b8:b6:6f:3c:f5:84:cd:
                    4f:95:67:da:ed:a8:cb:c3:4a:e3:0f:0b:f1:c0:b8:
                    ec:79:33:de:8b:5d:f7:ed:5c:da:0c:54:02:c6:c2:
                    31:1f:10:88:eb:98:30:53:c6:7b:33:70:21:06:52:
                    d6:f9:e9:38:67:da:bc:b6:fa:c0:fe:93:46:ad:b6:
                    7f:1b:2f:65:3b:74:c1:1a:1f:b4:36:d8:ec:ee:34:
                    53:83:85:cf:77:2a:f0:49:95:8f:7d:7e:c3:fb:0d:
                    47:65:51:e0:6e:0d:cf:25:86:eb:01:82:82:38:04:
                    0d:a3:a8:62:fe:33:3d:01:14:e9:8c:a2:08:83:ae:
                    c6:0b:1c:4c:e5:1b:0e:db:bc:cb:e0:d6:d8:a4:41:
                    38:27:fd:71:0f:0a:f8:88:1b:5e:8b:3e:54:92:ab:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E7:80:43:3B:2C:8C:CB:C5:A9:5C:C5:D9:69:AE:8F:EF:A7:76:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f8:11:43:28:af:43:0b:db:57:64:ea:67:1a:82:8e:30:0b:
         dd:6a:07:9c:d5:dd:36:1e:4f:f4:ab:66:2d:7a:c8:89:a8:ec:
         58:a8:81:98:58:f1:a8:2c:6c:53:fd:c6:81:d5:47:69:28:2e:
         3b:7f:80:6a:87:c5:f8:b4:5a:e9:4b:ba:6f:78:07:d1:81:84:
         18:a5:4c:d2:e1:19:2e:d7:c3:85:da:73:83:41:2d:eb:34:09:
         6d:ef:db:92:04:a5:6e:d1:f7:51:64:b1:76:87:bd:af:ce:1f:
         2e:0b:5a:76:41:1d:51:37:bb:de:3e:23:c7:a9:7a:f3:bf:90:
         26:ae:f5:30:10:84:41:d9:f9:7f:b8:e8:11:ee:88:24:22:00:
         07:cd:fe:60:dd:b6:d7:db:af:d4:15:72:ce:6d:43:67:a3:1f:
         f4:f2:ac:c9:2b:43:c8:b0:cb:50:bc:de:4c:ed:e9:1f:79:58:
         ec:8e:91:99:3f:d3:6a:8d:52:9c:21:a4:b7:c0:62:07:c4:10:
         a7:13:92:96:72:b3:d1:17:8e:93:d1:47:d4:31:f0:75:1a:cc:
         d3:ce:d3:38:89:43:a5:c2:42:61:14:6c:96:b3:2e:de:f7:47:
         ef:c5:7d:1a:e0:d8:09:4a:48:4b:4c:d4:f1:e1:5c:2b:97:39:
         50:45:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:18 2025 by rpki-client