Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a352f15-8cb0-3981-8f46-d51180edb324.roa
File:                     1a352f15-8cb0-3981-8f46-d51180edb324.roa (raw, json)
Hash identifier:          x/2zH8RYg098VV5pkl/1w311G1c9kXmcnwZlDMYzL8g=
Subject key identifier:   02:4B:1C:BC:ED:C4:B7:90:8F:4F:F6:3C:8A:4D:86:8D:6D:AF:84:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB16D7C5228ED9C0ABF3EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a352f15-8cb0-3981-8f46-d51180edb324.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        174.160.6.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:6d:7c:52:28:ed:9c:0a:bf:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f0193cc7-1bb4-4e6f-bb9e-92db4f5f891f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:ea:a9:c7:ba:46:98:a3:61:83:09:c9:39:
                    52:f5:65:40:7c:ea:13:b1:4a:54:45:83:ce:d3:d5:
                    ed:cf:50:bf:b9:4b:85:39:5a:5f:dc:b9:a1:da:50:
                    1e:31:05:0a:27:9d:63:77:9b:6c:66:1c:0a:b5:8b:
                    27:74:fc:59:99:ec:39:8b:be:2d:cd:eb:a6:29:a1:
                    8a:9a:21:f4:6d:51:e8:26:67:69:ab:ec:f0:f6:70:
                    7f:b3:00:ab:8d:6c:ba:92:e0:27:a7:4e:8c:72:d4:
                    8c:05:d4:f1:1c:3c:12:4d:fb:f7:51:8c:d2:81:ba:
                    f8:ce:52:3f:77:12:2d:9a:ce:0c:57:aa:48:d8:36:
                    c9:f8:4c:ce:fb:a7:fb:3e:69:5b:10:ca:11:51:b4:
                    3f:11:f5:42:be:37:18:d0:d3:eb:f1:47:a9:df:a7:
                    3a:46:a6:83:a1:8d:62:c3:34:60:d1:33:f4:8c:5a:
                    f7:af:d9:80:28:8c:9c:32:4b:2c:7d:ca:0e:00:36:
                    10:f2:25:e0:ed:2f:9d:ec:5b:ff:a4:41:15:76:b2:
                    19:45:07:3f:08:4e:84:cb:38:e5:e7:1a:6a:9b:34:
                    2d:ef:0a:16:6c:cc:00:70:a0:80:5a:bf:d9:04:63:
                    89:d8:ea:10:56:06:0e:49:9b:29:43:94:77:b7:fe:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4B:1C:BC:ED:C4:B7:90:8F:4F:F6:3C:8A:4D:86:8D:6D:AF:84:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a352f15-8cb0-3981-8f46-d51180edb324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:a6:1d:9a:c6:04:26:2b:ef:0b:4c:33:97:41:31:cf:63:
         3f:57:f1:fd:0f:98:25:5a:09:a8:71:90:10:92:b1:c8:a5:d8:
         94:c0:70:56:9f:e5:14:7d:75:53:bf:03:a6:d9:44:f0:fa:27:
         5f:57:de:8b:67:1d:a1:a3:49:c2:7f:ba:01:c5:24:9f:2a:71:
         b0:f9:9a:e5:7e:8f:f6:d1:3e:fa:ca:8e:1c:91:db:6f:79:c9:
         65:65:96:1b:dd:b4:40:4a:df:a9:cd:aa:a0:03:8b:ad:65:d8:
         57:cd:b0:f8:36:28:99:42:40:30:dd:c6:e0:86:98:ce:1e:b4:
         00:53:e7:09:f1:7f:2b:b7:61:f5:f3:67:13:bb:2e:99:ba:81:
         20:d3:69:78:7d:24:7a:5b:05:7c:0c:be:2e:17:0e:f1:8a:8d:
         21:46:39:06:e7:3c:c1:3f:b3:68:a0:3b:44:fc:41:85:04:45:
         22:c2:84:0c:a8:1f:19:e3:18:bc:c9:62:41:f0:79:43:55:96:
         30:ad:fe:de:00:9f:cc:5c:8e:4c:1b:4c:9f:eb:61:3a:6d:7f:
         c8:e8:2a:80:62:02:58:16:ea:42:b0:ad:63:d4:d7:db:5b:8e:
         95:0b:ad:2d:5b:dd:a9:da:5d:d1:a5:90:cc:69:e2:d1:05:0e:
         b3:26:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:04 2025 by rpki-client