Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa
File:                     7796b63e-a3f6-32f5-8eef-d866f8e76131.roa (raw, json)
Hash identifier:          o/IGrGM9xJ7InGJzGtr1mQqVgFVtHg/rSfoXG6wXdLw=
Subject key identifier:   0D:4E:B4:59:BF:A3:5D:DC:F1:FE:C6:9B:9D:F9:C8:D5:0B:18:97:96
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848D62C2DC1BB6769C23EA48540
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa
Signing time:             Mon 10 Feb 2025 13:18:53 +0000
ROA not before:           Mon 10 Feb 2025 13:18:53 +0000
ROA not after:            Sun 11 May 2025 12:18:53 +0000
asID:                     212238
IP address blocks:        173.239.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:2c:2d:c1:bb:67:69:c2:3e:a4:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb 10 13:18:53 2025 GMT
            Not After : May 11 12:18:53 2025 GMT
        Subject: CN=c4ae7d29-a1fd-44cf-aa0d-32d900ab942b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:0e:52:25:8d:73:dd:79:6e:33:ea:4f:77:
                    86:57:f7:8a:36:30:04:26:63:1b:7e:a3:04:b2:17:
                    85:32:1a:e0:44:b1:c7:b9:2d:45:f3:4f:28:45:33:
                    88:9a:60:b0:89:87:ab:37:11:d4:2b:70:3a:a9:85:
                    78:6e:f9:45:61:67:85:77:b4:fa:6e:16:31:d1:ad:
                    77:ac:76:aa:02:8c:13:1a:cf:91:df:79:9f:55:b9:
                    04:5d:ed:1f:5a:b6:40:b7:d0:49:37:10:a4:3e:50:
                    26:4f:54:4e:f0:52:21:f2:44:db:c1:c1:0b:51:b1:
                    22:e1:d9:63:2b:17:00:7f:0d:a4:50:92:1a:33:c1:
                    0c:8f:b1:ae:28:f4:37:45:9c:87:2b:f6:56:61:8a:
                    73:c1:71:c3:d9:9a:3f:8a:fe:43:01:68:e3:c6:0c:
                    ad:dc:49:f8:57:67:86:c7:7f:7b:f5:bb:26:15:ad:
                    3f:5f:2f:99:f9:1f:fb:52:bb:94:7a:50:30:a2:df:
                    c0:60:27:a2:98:a7:a7:9d:6d:bc:b2:8a:4d:ee:37:
                    64:cf:e6:3b:3e:a2:9a:21:7d:b6:2c:c6:21:12:f7:
                    86:34:89:19:59:48:df:ed:9d:c8:f5:91:2b:7b:34:
                    67:b8:2e:6b:74:e3:e9:bc:28:de:f5:b8:c8:f4:7c:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4E:B4:59:BF:A3:5D:DC:F1:FE:C6:9B:9D:F9:C8:D5:0B:18:97:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:76:0c:03:86:22:9c:50:a6:df:9c:ca:ce:be:37:1e:11:4f:
         75:48:0a:52:1c:6c:87:97:d5:9b:23:c4:49:ef:dd:b3:cf:5f:
         5f:69:d8:4d:fe:cb:06:9e:0c:fe:93:fb:96:b0:a4:bd:46:b5:
         48:07:94:4d:36:d8:c8:12:70:7c:6f:29:17:69:11:06:fb:b0:
         4e:42:85:58:38:1e:f0:43:17:d3:96:c1:14:14:89:38:d2:81:
         2c:be:8c:97:d4:fe:94:95:3c:a2:29:0c:9b:de:42:22:b2:98:
         41:dd:fd:a6:5b:e7:89:26:b3:94:26:fd:69:b5:c5:e7:c5:d7:
         c2:b6:3a:ab:af:9f:13:ba:e8:bd:7d:03:a3:8d:aa:ae:3a:7f:
         eb:03:c8:5a:50:4f:85:63:72:ce:a8:a1:8c:e3:2e:08:de:9d:
         e7:f5:eb:25:30:c7:bc:bb:0a:22:0e:48:ba:67:ed:58:be:ff:
         2a:c9:6f:6b:3c:c1:6d:b2:10:72:09:7e:a2:42:04:3e:dc:01:
         06:5f:87:3d:ef:4d:ae:4b:4c:fb:a2:8b:45:cf:4f:f5:61:f7:
         5f:54:5c:57:5f:8e:d8:a8:f7:e2:5a:ce:a8:48:3b:76:5f:7c:
         ae:b9:39:bf:ad:1d:8f:43:21:a5:0e:07:a8:d4:1f:35:5b:0a:
         6e:98:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:33 2025 by rpki-client