Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee003065-2f49-3d45-abf4-8d08119d5782.roa
File:                     ee003065-2f49-3d45-abf4-8d08119d5782.roa (raw, json)
Hash identifier:          GpfeL0r7nt+pDgDdQ5CsesQazxJR08+J9B0We0xs6A0=
Subject key identifier:   42:86:F5:C9:E8:ED:E9:26:FC:A8:5A:1E:4D:01:BB:BA:14:9B:EB:F4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5336C57E1B62910CC693C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee003065-2f49-3d45-abf4-8d08119d5782.roa
Signing time:             Tue 04 Feb 2025 11:24:45 +0000
ROA not before:           Tue 04 Feb 2025 11:24:45 +0000
ROA not after:            Mon 05 May 2025 10:24:45 +0000
asID:                     30036
IP address blocks:        173.16.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:6c:57:e1:b6:29:10:cc:69:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:24:45 2025 GMT
            Not After : May  5 10:24:45 2025 GMT
        Subject: CN=7471db79-5963-4278-ba62-d1373d024dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:28:c7:7c:46:ec:b6:57:b7:d6:0f:05:a1:
                    6f:ae:69:55:29:b9:8f:a5:7f:8c:34:b5:88:5f:bd:
                    13:c3:2d:25:31:78:2f:6d:af:4a:05:9d:e3:36:a6:
                    72:dc:42:5e:05:ac:9b:df:61:35:a9:95:48:40:45:
                    92:34:90:25:c2:2b:ec:1e:07:d8:6e:58:af:8a:51:
                    1c:63:22:5c:a7:95:21:97:90:54:c2:e6:ff:cf:4b:
                    83:38:fe:a0:9f:a2:b5:a1:ab:2b:a4:d9:bb:f1:b1:
                    1b:ca:1a:3b:c4:1b:09:07:61:17:19:75:9a:b7:08:
                    f9:0c:31:de:ec:67:55:96:5b:6b:41:39:1f:f8:54:
                    85:b9:d3:2d:f2:e5:04:f3:a0:38:8e:d1:3f:58:7b:
                    34:de:aa:9f:bc:b5:99:bc:98:6b:32:18:7c:d7:2b:
                    b4:68:bc:3c:d2:da:25:d7:6a:b2:90:92:39:3e:6b:
                    11:cf:5f:02:96:64:b7:f8:ba:d6:a8:35:c3:29:98:
                    9e:a4:d3:14:e0:f8:ad:5d:1b:19:e7:88:3a:3b:4d:
                    a4:22:14:d5:33:27:48:12:1a:ba:06:40:fd:f0:c9:
                    76:c9:13:93:77:cd:34:bf:f0:c2:89:85:ab:63:dc:
                    8c:fb:15:45:fa:e7:b0:06:79:03:94:9f:7b:c9:a0:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:86:F5:C9:E8:ED:E9:26:FC:A8:5A:1E:4D:01:BB:BA:14:9B:EB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee003065-2f49-3d45-abf4-8d08119d5782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:94:22:4f:01:1e:0b:4f:85:e5:3e:21:66:87:72:98:c2:44:
         37:fc:10:9a:18:e9:fe:81:91:ae:a9:df:f1:24:dd:54:75:39:
         f4:6a:84:4c:c7:a4:25:ab:97:2d:6a:23:f0:92:28:15:fd:96:
         9b:42:25:eb:78:ec:e8:4d:49:76:97:c9:5a:7f:40:5b:ff:25:
         d2:54:79:e3:40:94:4b:f7:35:b0:8f:a4:d0:f5:64:23:d0:20:
         d7:4e:93:18:e1:ba:87:84:b4:94:09:f6:30:70:16:90:69:33:
         5d:30:97:87:3d:84:4a:13:bd:d0:4c:8c:67:b2:c0:b1:51:8f:
         f2:04:ea:88:08:96:e5:3f:e4:bf:c6:af:af:67:c8:88:5a:99:
         b0:a7:de:1d:60:23:b1:6a:20:ff:5d:42:38:a3:65:5e:b2:be:
         f7:1f:ed:1b:69:e6:37:12:73:1f:47:2e:dc:15:1d:4e:ff:58:
         0b:fe:90:0f:0d:8a:9c:d6:de:c2:dd:98:62:80:f0:75:0d:1a:
         dd:20:e3:c0:93:1b:62:44:7d:23:21:3e:69:b7:ff:f5:5d:87:
         83:3a:9d:30:80:29:f7:d4:4c:6a:58:5b:3f:92:0a:ff:99:4c:
         e6:63:f2:24:d0:c2:b2:cf:bc:43:86:73:9a:4c:10:2a:89:be:
         81:10:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:59 2025 by rpki-client