Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa
File:                     89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa (raw, json)
Hash identifier:          3t1z6WY04zxwaFEaVTBg/kC6QHC8YGjkrm0/PzzLOjY=
Subject key identifier:   1A:06:34:E6:FB:53:8C:B6:1D:F9:73:B6:1D:64:10:94:A5:89:C4:45
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858491AA6B6DF74C3873401960480
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     4181
IP address blocks:        24.224.64.0/18 maxlen: 24
                          68.71.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b6:df:74:c3:87:34:01:96:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=020a97d2-0e1d-4898-828a-2a49cab25897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:2c:d2:5b:69:4b:83:00:ac:d5:c7:26:29:
                    9c:71:7a:b9:91:50:1c:4a:b0:03:85:df:0b:3c:40:
                    2a:26:15:bb:43:57:65:a8:ec:f6:94:41:7c:d0:63:
                    8b:5c:a9:53:d5:09:24:ac:9b:1c:91:83:27:2c:a9:
                    61:be:ff:1e:c7:01:44:0a:7f:e2:33:99:dc:da:7a:
                    92:43:d1:86:57:4b:40:57:d4:cb:2f:0e:e1:e2:4c:
                    d7:5e:e0:fd:f0:dc:48:9a:bb:58:eb:df:30:8d:2f:
                    9f:3d:4a:f5:f3:61:c1:2a:31:c3:17:a3:55:ed:7e:
                    6f:b5:60:5f:c1:6c:60:45:41:12:8e:6e:f6:1e:11:
                    fa:8e:6e:a0:db:a4:40:10:b7:8e:a0:fc:70:a4:1e:
                    ed:69:52:25:3e:c4:c8:5b:99:ec:9f:71:16:70:27:
                    eb:55:2f:b3:4a:22:50:16:17:67:0a:ff:96:79:47:
                    5d:02:d4:1c:35:bf:93:6f:dc:21:3d:7e:6c:a5:c7:
                    3b:6b:a7:c8:74:87:c8:c2:6f:41:1d:b5:c5:db:b5:
                    3a:f6:59:0f:58:5c:b1:f5:5e:40:34:5e:b7:12:2e:
                    90:b4:b0:87:e3:a6:c7:c6:87:15:a9:91:93:aa:a4:
                    13:7a:a6:f0:fd:af:d7:1c:a4:79:d3:6b:de:cb:91:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:06:34:E6:FB:53:8C:B6:1D:F9:73:B6:1D:64:10:94:A5:89:C4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.64.0/18
                  68.71.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:70:d8:02:b7:ff:65:4c:15:a3:a8:8c:fc:fe:13:c7:76:9d:
         d4:16:93:a9:e6:aa:6e:50:23:10:16:5f:3c:98:6e:9e:22:9d:
         db:77:55:2b:19:c7:25:38:7a:3d:19:c3:d7:44:fd:43:3b:e8:
         30:aa:c5:c5:09:3b:85:c9:a6:ec:25:cb:a9:23:3e:7a:ba:8b:
         a3:fd:12:e1:cb:cb:9d:f7:a3:18:f9:21:4f:dc:3d:fc:97:fb:
         80:6a:c6:3a:c6:a2:d0:9a:92:fe:fa:ff:16:7a:a4:40:27:f4:
         6f:48:ec:4f:b0:53:58:0d:83:cd:83:a5:3b:81:aa:8a:05:9b:
         17:79:ad:ac:2e:0e:fd:80:fa:08:20:f9:11:39:62:7f:f4:e6:
         51:f6:54:98:9f:79:a1:27:af:99:83:6c:f4:11:1e:1a:fd:27:
         4e:a0:da:58:00:10:2a:32:cb:18:0a:cf:26:71:fb:50:f5:a9:
         bf:ca:44:c9:ff:75:1d:32:1a:8e:9b:a4:78:ed:56:46:42:1d:
         7c:2f:b1:a7:f0:3e:e1:ca:e3:2c:66:3b:16:91:4a:ba:14:5e:
         41:b5:4e:87:bb:bd:f3:be:bb:39:df:e0:ab:6d:12:e3:f7:60:
         f9:35:dc:b5:77:98:39:0d:f5:5a:ff:92:26:54:8a:e7:91:44:
         42:ec:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:12 2025 by rpki-client