Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa
File:                     2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa (raw, json)
Hash identifier:          j/mL9OZjQa3SFFFzQLKnhSYREl/TJyFn/zNH1zZ8/Q0=
Subject key identifier:   0B:DE:A6:94:92:2B:32:7A:26:3F:9D:EF:EA:5C:F0:8D:87:7A:50:76
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584919418F3424E8230FF2D52200
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     22135
IP address blocks:        173.242.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:8f:34:24:e8:23:0f:f2:d5:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=9373740f-6e82-4b54-878e-95f136a2524f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:21:35:89:54:a8:6e:60:79:83:d7:8e:27:
                    75:60:cf:ec:1d:a8:cd:63:ed:6d:a7:ed:a0:91:7b:
                    f9:13:3f:5e:3d:45:8f:74:66:c9:6b:3a:e7:70:71:
                    e2:18:54:c2:c2:62:ba:73:53:33:49:15:a9:ac:ec:
                    86:46:9b:a0:5a:f8:83:33:93:6d:48:34:5b:08:99:
                    3f:3d:53:70:e2:75:f4:59:04:8a:0d:cc:40:8f:fb:
                    3c:81:5b:11:21:67:0b:95:08:6a:8a:94:34:b1:9c:
                    e4:db:5b:99:28:25:1b:84:7b:99:56:db:ce:c3:e0:
                    53:02:00:c4:fc:27:b1:14:17:57:a4:1c:23:b6:fa:
                    10:8f:c3:1b:d4:28:62:84:bc:9e:b3:90:2a:2b:ea:
                    fe:e6:32:28:a2:1b:27:44:16:52:c5:04:5f:77:92:
                    25:4c:62:c7:39:d4:04:50:e2:43:f0:86:33:d8:1c:
                    5b:85:7e:e3:a2:32:66:3e:73:1b:be:8b:8d:66:7a:
                    0a:a2:ff:7d:1d:8c:db:ed:fb:48:52:3f:e8:2d:79:
                    c0:56:32:23:03:25:80:5f:ab:5b:f0:e8:19:e3:e1:
                    eb:75:60:58:40:f7:34:4f:30:1f:02:2e:89:94:21:
                    3a:ae:93:37:c6:9a:05:d2:23:00:36:bc:8e:75:2f:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DE:A6:94:92:2B:32:7A:26:3F:9D:EF:EA:5C:F0:8D:87:7A:50:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:dd:b0:af:0b:82:13:cc:f1:3b:13:76:4c:ac:b6:d1:22:
         dd:16:c5:c7:ab:c6:44:14:22:ea:6d:4d:48:26:df:7c:98:42:
         f9:9d:9b:22:11:3e:d2:7e:da:c5:5c:43:d9:da:f0:d2:a9:87:
         99:75:d0:90:59:a6:d0:5e:cd:45:3d:73:00:94:cb:4c:cb:c2:
         0a:bf:49:18:02:42:fa:a3:0a:12:1a:e9:c3:ca:2f:67:20:7a:
         69:4f:b6:8c:6a:d6:2f:23:07:d6:87:8f:ab:0a:36:48:fa:43:
         8b:30:37:90:59:46:02:34:1f:bf:de:cd:56:ee:6d:fc:97:74:
         20:d1:d4:a6:44:e9:9a:08:f0:33:6d:82:55:d2:de:1c:ac:64:
         41:6a:0c:0e:82:91:ab:b6:25:ad:e8:dd:47:28:1a:c2:8a:c2:
         d8:21:b2:a1:9e:93:bb:8d:86:11:44:79:60:ff:8f:51:18:45:
         75:6a:e4:d4:86:7f:1f:a7:1b:c3:7e:6a:aa:a6:7d:39:71:23:
         2a:a7:d0:f7:24:e8:e5:e5:8d:96:08:cd:d4:a5:d8:6f:2f:56:
         bf:cf:97:f3:f7:f5:af:48:58:95:64:83:21:27:fe:bd:9b:25:
         71:16:55:cf:60:f0:27:c8:c3:e5:ed:ab:e5:36:ac:43:38:c0:
         0d:bf:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:17 2025 by rpki-client