Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa
File:                     0192393b-339b-3f38-9f75-d4f7994dce0e.roa (raw, json)
Hash identifier:          qo4X8ZaD288DosqEJMJnTyiPxIyk1Cm/cQmu20g2C04=
Subject key identifier:   D6:A3:B8:27:55:45:B9:0C:D9:06:2C:32:8D:A5:0A:49:D1:B2:EB:B3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858489F1EDADD82D301B45948B400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa
Signing time:             Tue 21 Jan 2025 20:02:35 +0000
ROA not before:           Tue 21 Jan 2025 20:02:35 +0000
ROA not after:            Mon 21 Apr 2025 19:02:35 +0000
asID:                     7029
IP address blocks:        173.189.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:1e:da:dd:82:d3:01:b4:59:48:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 21 20:02:35 2025 GMT
            Not After : Apr 21 19:02:35 2025 GMT
        Subject: CN=ebaee93a-4d7d-4d6c-b4f4-33edaa53d60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:f3:f5:44:e0:ff:d7:51:3e:73:67:56:a5:
                    93:34:f9:25:15:98:0a:2c:98:93:30:cf:6f:fe:97:
                    27:42:98:cc:2c:3f:4c:49:e7:20:83:ba:5f:73:47:
                    1e:08:a8:c9:f1:ce:86:19:06:09:df:54:44:53:bb:
                    9f:8f:ad:cd:3c:8b:34:88:48:1d:6f:b9:43:9f:69:
                    a5:5c:59:c5:33:6c:21:6b:9a:c4:98:52:fa:16:05:
                    86:d5:db:98:7d:ae:73:19:78:8b:b7:b3:2f:da:0b:
                    de:04:8d:8a:cd:ce:83:0c:72:24:18:0e:10:8e:7c:
                    d6:44:de:e5:b2:77:c7:79:14:bd:56:7c:82:6c:78:
                    db:96:55:65:14:73:6e:86:e1:1c:12:84:bd:f0:6c:
                    46:2b:12:36:8d:6a:3f:5d:cc:73:ac:61:51:e7:7d:
                    dd:93:01:08:62:e5:5a:19:b8:c4:07:4b:e1:7e:0c:
                    7b:1c:ff:29:33:e5:e7:37:d4:69:ba:29:0d:80:24:
                    68:4a:59:20:20:c4:82:8f:b6:f7:da:96:44:be:c0:
                    e9:1d:d7:51:ee:7a:83:e5:99:b0:f3:13:30:de:ad:
                    34:17:e0:4a:d1:90:83:90:81:6d:ad:f7:70:18:06:
                    1a:35:29:55:e8:fc:20:3f:96:e1:5f:d7:ee:bb:18:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:B8:27:55:45:B9:0C:D9:06:2C:32:8D:A5:0A:49:D1:B2:EB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:93:e1:21:ac:f4:68:4b:43:fc:6a:a6:6d:5d:ef:9d:77:
         d2:45:81:e4:06:da:3b:bf:a1:41:5a:a9:aa:3e:e6:e2:ae:ec:
         47:14:41:93:b9:59:df:80:bc:12:3f:0f:bf:5d:15:ce:ef:44:
         60:68:47:8a:79:b4:62:8a:35:42:cf:ad:c3:a3:b2:e2:da:f3:
         6e:54:67:0f:93:2e:a9:e4:5c:2a:78:d0:a1:ad:0f:81:15:92:
         8d:8f:f4:d8:80:e2:40:54:e7:77:35:a4:8e:9b:e9:46:18:8b:
         b3:54:1c:ce:8a:86:60:51:07:e2:06:d5:96:a6:72:c2:ab:d5:
         68:d0:e8:8f:40:1d:2b:e5:9e:4b:c3:f9:22:9f:3a:66:bc:37:
         04:2b:3e:67:49:56:aa:20:c2:d6:59:50:09:31:23:d5:6d:e7:
         56:59:e2:15:00:56:a1:03:23:f7:86:1e:8e:39:1f:9e:b3:e7:
         bb:88:3a:48:23:c3:31:6d:fd:a8:9c:63:cc:67:7e:9d:83:ab:
         71:01:89:3f:3c:2d:db:25:67:64:cd:b5:99:56:72:48:36:7e:
         c8:51:74:f1:58:5c:f4:57:12:4a:ad:40:68:75:56:f2:96:9e:
         da:9b:5a:be:29:a8:cf:39:2c:6e:cd:7e:aa:11:1b:d0:dc:ea:
         95:e5:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:08 2025 by rpki-client