Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa
File:                     5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa (raw, json)
Hash identifier:          hNtli7coR3R/pqLcQdmQoHfTLY7fcxypDYHqUdVP3g4=
Subject key identifier:   1C:20:D2:59:22:5F:E7:67:32:BD:05:72:F5:D6:5E:7C:E9:14:15:7C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921342E0FA197C3E43DAEE100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa
Signing time:             Sun 09 Mar 2025 10:20:38 +0000
ROA not before:           Sun 09 Mar 2025 10:20:38 +0000
ROA not after:            Sat 07 Jun 2025 10:20:38 +0000
asID:                     577
IP address blocks:        70.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:2e:0f:a1:97:c3:e4:3d:ae:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:38 2025 GMT
            Not After : Jun  7 10:20:38 2025 GMT
        Subject: CN=8f9a232b-247f-4265-8adb-c99cee262e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:df:53:e7:e5:8b:a1:95:53:93:94:22:e9:
                    49:a7:b5:25:7a:29:8e:77:a8:b2:57:55:39:3e:76:
                    bd:9d:f0:75:d6:d8:2c:58:36:34:be:73:fd:59:ca:
                    b4:76:c0:54:e3:6f:e5:c9:58:4d:d3:19:e7:3e:f6:
                    56:7a:14:fd:17:dd:e9:2d:83:2f:f1:28:6d:fe:0a:
                    14:07:8e:72:46:3b:c3:30:a1:aa:be:83:29:1f:d0:
                    73:ec:7f:43:f8:e1:63:58:b1:11:22:3c:0c:ee:77:
                    ee:99:81:f6:97:fc:c4:1b:35:22:58:e7:a2:c8:11:
                    1f:7e:59:05:8f:56:de:36:50:76:71:5c:8b:c1:ca:
                    e5:ce:04:1f:77:68:f7:c2:00:a1:7f:75:be:c1:a4:
                    ad:a4:76:28:d3:d1:63:37:d7:cc:44:c5:df:32:b2:
                    1b:3b:d9:17:fe:4f:ec:76:31:f9:b7:66:a2:b5:37:
                    0c:95:30:4e:88:dc:2a:b5:ad:e5:c2:65:7f:00:40:
                    1f:8b:bd:74:36:7d:b5:c1:30:ae:8d:79:4c:fb:7f:
                    09:d8:aa:bc:e2:20:3f:15:c9:b8:f5:c7:46:bf:39:
                    92:8c:dd:b9:07:97:f9:51:7f:93:50:49:ff:f0:cb:
                    5e:79:ac:35:f0:5d:f6:49:60:87:23:00:92:35:e1:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:D2:59:22:5F:E7:67:32:BD:05:72:F5:D6:5E:7C:E9:14:15:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a7:4a:55:97:06:c3:be:d1:8f:41:24:ab:0a:2f:86:80:63:
         73:c5:17:c1:4d:7b:0e:be:cd:31:e6:22:dc:72:c2:cc:56:a8:
         b3:37:20:eb:97:52:6e:7c:cd:05:75:50:7b:ff:3e:81:07:ad:
         6d:e1:40:f3:41:73:0a:5c:66:7c:db:76:68:16:bd:ea:df:d4:
         a9:e6:3a:04:ba:21:40:6c:ca:e7:4e:9a:74:72:8c:e3:04:9c:
         0c:b7:0c:ff:e8:56:8b:a2:90:a1:0c:cd:4c:9c:60:2b:53:01:
         fc:b7:e5:03:a8:ed:dd:17:82:0c:fb:77:6b:77:95:d9:e0:79:
         9f:d5:91:2c:9c:36:4a:80:1c:f1:48:db:c4:a2:1b:25:40:5f:
         21:69:f2:3c:7f:cf:0e:55:cb:84:20:48:bd:3f:d0:75:a8:6d:
         64:ff:4b:3e:9c:09:7d:11:9e:b3:a6:2f:b6:65:69:7f:89:d2:
         da:53:05:13:f3:8f:77:bd:6a:95:59:e4:35:e8:15:25:85:32:
         37:74:34:ed:3a:fb:e2:1f:4f:21:e7:8e:e6:4c:3c:8a:20:45:
         2c:b0:41:6f:ba:93:df:90:89:1a:54:f6:d7:f4:1f:4c:5e:fd:
         54:3d:38:70:3c:63:ee:7e:c1:4b:91:f8:f6:60:34:e9:94:e1:
         38:78:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:37 2025 by rpki-client