Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5da90be-b58e-3ee4-b83a-7ed2772a2613.roa
File:                     e5da90be-b58e-3ee4-b83a-7ed2772a2613.roa (raw, json)
Hash identifier:          B5SLQOmWTuyRAzgN9ai8CNiv91YSGi5Asv9BlVXfE5s=
Subject key identifier:   CF:BE:5C:94:CD:22:93:3D:8F:A2:6C:6F:81:D4:83:E2:D0:CF:21:2B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C533C480A34086011EF94C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5da90be-b58e-3ee4-b83a-7ed2772a2613.roa
Signing time:             Tue 04 Feb 2025 11:25:26 +0000
ROA not before:           Tue 04 Feb 2025 11:25:26 +0000
ROA not after:            Mon 05 May 2025 10:25:26 +0000
asID:                     30036
IP address blocks:        173.25.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:c4:80:a3:40:86:01:1e:f9:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:25:26 2025 GMT
            Not After : May  5 10:25:26 2025 GMT
        Subject: CN=b002ff2b-691a-43d9-b3b0-56116876c18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:4f:1a:41:96:9b:b1:6f:f9:8e:2a:87:e5:
                    33:b8:90:11:ec:fd:79:97:b4:49:67:29:62:3d:c0:
                    90:a5:d8:af:1f:e3:60:f1:59:de:84:62:ae:a5:4e:
                    b2:17:5e:7e:ff:38:79:f8:fd:cf:c5:e7:47:d1:ed:
                    d5:3b:56:ca:7d:18:18:73:4c:d8:ca:2b:6d:97:45:
                    70:77:80:1d:85:37:14:7f:c4:b7:3c:13:1a:cc:fe:
                    7c:66:16:26:18:b2:87:7c:cb:af:a4:92:21:99:02:
                    d2:29:87:d9:63:b3:77:44:46:0e:dd:b6:38:0d:1e:
                    af:f1:75:38:c5:da:09:b2:e1:10:ff:a8:e5:bb:dc:
                    be:7c:a7:57:04:0a:37:19:04:9a:7a:75:13:2f:a7:
                    89:ec:7e:9b:49:26:3a:2d:9c:20:63:5f:75:ac:74:
                    3a:32:10:b9:53:f9:5d:b3:b3:fa:03:34:78:22:56:
                    c7:f4:f0:1e:34:ec:3d:58:be:0d:ad:0e:91:f6:dc:
                    21:d6:74:cb:41:d6:1f:3e:24:cd:20:6c:2d:db:1a:
                    60:96:c9:2b:9e:18:ec:c1:e1:5b:9e:f8:b3:b7:82:
                    39:09:41:23:ee:41:dd:a2:d3:5d:d8:bf:ae:d0:a3:
                    3b:c9:f0:0c:31:c2:46:49:59:79:bd:4f:25:1b:5d:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:5C:94:CD:22:93:3D:8F:A2:6C:6F:81:D4:83:E2:D0:CF:21:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5da90be-b58e-3ee4-b83a-7ed2772a2613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:19:5d:c2:a2:cb:e3:5f:a5:9f:a7:19:cb:b9:86:22:33:e6:
         f9:9c:9c:08:36:aa:25:29:0b:29:d7:e2:2d:9b:ef:c5:82:86:
         8a:7e:81:44:d3:2d:b9:eb:80:db:5d:26:4c:51:86:08:09:01:
         7e:99:25:9e:07:d9:2a:41:7f:c5:92:5e:e6:f8:2f:43:11:45:
         20:be:83:ad:a4:6b:ed:7f:14:e7:a6:78:e7:2b:1b:62:8a:5a:
         f4:82:15:d6:b0:68:85:c2:20:14:88:7f:79:01:26:be:43:84:
         89:7f:2e:13:6f:fc:9c:c5:4d:56:b6:cf:9d:8e:78:9c:5b:e7:
         75:23:a9:93:97:27:1b:9a:10:07:6c:c5:bb:98:ca:9a:4b:a8:
         41:98:68:9a:c9:7f:09:69:69:95:7b:5d:21:9c:f3:10:60:3a:
         5f:7b:aa:5b:b7:c7:0a:81:00:79:73:0a:ea:49:d9:dd:0e:b1:
         77:a4:db:35:8f:b2:f7:4e:cd:85:30:d9:96:0f:08:18:9e:44:
         f2:b4:68:0f:98:f1:e4:2b:a8:e9:5c:14:9f:87:2f:fd:10:c0:
         d8:3d:ee:82:9d:fb:3c:3f:ac:e1:80:85:3e:49:30:c1:fc:63:
         ca:6a:66:e5:61:20:24:0b:7f:cf:4d:c8:5e:9a:61:98:ac:f5:
         b8:fc:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:31 2025 by rpki-client