Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/eed1949f-8f40-38cc-afbf-14ffba199e06.roa
File:                     eed1949f-8f40-38cc-afbf-14ffba199e06.roa (raw, json)
Hash identifier:          tEJ1vuQfs26I5VQRPYUQXb/BR18hMN5h+8Jjt6zurXg=
Subject key identifier:   97:BF:82:69:19:CA:61:8B:2B:B7:69:6C:D3:42:47:4E:AB:BB:99:C4
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F432858489A3B4EFD053B5709E86DD000
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/eed1949f-8f40-38cc-afbf-14ffba199e06.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     55154
IP address blocks:        74.119.217.0/24 maxlen: 24
                          74.122.196.0/24 maxlen: 24
                          173.243.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4e:fd:05:3b:57:09:e8:6d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=b64be090-ab20-4f1f-b19e-6fc9c108ca97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:70:a9:17:6b:1f:36:21:1d:49:03:92:65:
                    cd:56:4d:01:0d:63:35:5c:41:bc:cf:3c:7b:91:18:
                    3d:57:dd:23:b9:a6:fa:6f:83:51:d7:3e:21:f0:a5:
                    1c:f3:d9:2d:a5:fb:6d:8d:e8:2e:4d:55:03:b6:86:
                    26:c5:b2:82:b6:4d:08:7a:3f:05:2e:e1:d8:89:c8:
                    f3:69:f1:d5:d3:6f:52:6f:95:0c:af:42:92:3c:01:
                    34:12:da:ad:90:b6:f5:70:ff:c5:6f:0c:57:71:4b:
                    c4:17:b9:2f:98:a8:bc:54:bb:a1:61:b1:ba:c7:e8:
                    96:ab:fb:64:0f:bb:12:1d:cb:c0:90:72:08:2b:7f:
                    24:a1:c7:64:53:32:c1:ff:57:15:58:7a:d0:c7:47:
                    ae:21:57:f5:d7:36:e3:6d:e0:e3:21:7c:05:db:84:
                    91:11:a5:f2:84:e6:46:9c:06:90:82:da:9f:5a:39:
                    d5:51:80:39:c6:cb:8a:c4:16:e9:35:c8:d9:d0:88:
                    79:0a:2f:90:62:2e:f7:75:2a:50:96:24:76:7d:a8:
                    1f:2d:df:6c:56:0c:ca:b2:04:47:43:e9:f6:a9:33:
                    44:21:e3:5c:7f:72:0a:7e:6f:af:67:34:b8:40:fd:
                    d3:fd:f7:d3:70:cd:40:11:a7:14:47:50:26:58:7a:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BF:82:69:19:CA:61:8B:2B:B7:69:6C:D3:42:47:4E:AB:BB:99:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/eed1949f-8f40-38cc-afbf-14ffba199e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.217.0/24
                  74.122.196.0/24
                  173.243.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:2a:42:aa:99:3f:0d:d2:e9:5a:d8:70:fd:51:9b:63:64:
         50:5d:d1:d8:7b:7f:2f:9d:ea:41:9a:6c:bb:4e:8a:fa:4b:a6:
         db:6f:60:86:62:8b:44:52:e7:e7:19:60:30:51:b6:eb:9a:2e:
         1c:bd:95:6c:88:b1:1a:c2:e6:4d:be:62:60:1d:03:39:90:1b:
         50:98:3a:e2:69:af:72:5c:4f:1b:c8:f8:69:59:c8:a2:e2:8b:
         f2:b7:fa:02:cd:ed:a1:d9:90:31:fb:26:a8:2f:78:84:dd:b3:
         82:2e:34:79:e8:59:5d:e0:e6:cb:95:a1:b6:5f:cf:d5:46:fe:
         2c:17:2c:90:ce:4e:82:40:5f:c6:6a:17:f5:f8:7b:9a:55:93:
         5b:29:39:42:16:40:4e:18:80:9a:a6:58:5f:e5:06:6d:19:cf:
         d1:67:09:1f:14:c1:e1:29:56:6d:3e:67:d4:5d:86:82:a6:2b:
         b4:cd:15:4f:9a:9b:6b:15:57:2a:2c:67:47:41:66:d9:78:d6:
         fc:ba:a1:07:60:f2:20:79:40:16:94:2d:61:2b:73:13:ca:7a:
         70:66:7e:41:37:1e:09:e1:06:af:dd:d8:ce:25:dc:15:04:50:
         50:ad:77:a6:8a:28:da:20:6b:b3:8d:bb:3d:7c:15:31:e9:87:
         ac:d5:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:50 2025 by rpki-client