Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0735f313-fa5c-3ce3-9897-c7e17f1ecd42.roa
File:                     0735f313-fa5c-3ce3-9897-c7e17f1ecd42.roa (raw, json)
Hash identifier:          QGqao1o7o0alP9A9SOs9bIusJRcdxRHwyJtprjyY2zc=
Subject key identifier:   84:88:30:35:41:1D:F2:2D:3D:07:34:AE:6B:3E:31:BF:1D:0C:82:6E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848EE8A2C3E87AF9C137E780F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0735f313-fa5c-3ce3-9897-c7e17f1ecd42.roa
Signing time:             Wed 19 Feb 2025 06:47:41 +0000
ROA not before:           Wed 19 Feb 2025 06:47:41 +0000
ROA not after:            Tue 20 May 2025 05:47:41 +0000
asID:                     7029
IP address blocks:        139.55.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ee:8a:2c:3e:87:af:9c:13:7e:78:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 19 06:47:41 2025 GMT
            Not After : May 20 05:47:41 2025 GMT
        Subject: CN=c95acd97-ce4c-4b22-b448-38dbd6654efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:3a:70:43:f1:7a:60:32:6a:70:06:85:2f:
                    73:fe:a1:fd:ca:6c:f4:36:36:8e:a2:4c:0d:11:f0:
                    3f:12:9d:d2:75:0b:b9:c5:9d:41:58:9d:da:f7:ae:
                    c0:34:62:52:3d:d4:57:b5:41:ee:57:44:c0:57:ff:
                    5f:a5:bd:54:59:c6:e8:9d:35:a8:be:0b:b3:a0:30:
                    a3:49:7f:db:4e:e6:d8:78:50:49:49:be:59:0e:b7:
                    ff:30:10:ed:73:6a:c2:7e:e0:c6:19:37:13:38:ba:
                    3c:c1:66:d1:90:3b:99:01:08:43:02:76:ce:61:43:
                    d2:5c:7f:2a:33:95:e6:ff:bc:69:48:6a:08:3d:dc:
                    c0:d9:73:63:d4:16:71:31:d5:d9:5f:90:b4:57:74:
                    02:2e:5b:aa:fc:6d:a3:5e:82:60:52:29:48:21:cf:
                    6a:8a:9a:36:43:cb:3c:be:7f:ad:87:ee:10:b0:a5:
                    2d:5b:64:96:2b:ad:8d:24:c2:83:60:2b:c5:2d:fa:
                    ac:5d:8e:0c:8d:d3:9d:8f:09:49:5e:61:72:d5:d4:
                    dc:af:b9:43:02:65:b6:e0:72:3b:38:47:51:04:1d:
                    14:b8:e5:b8:d9:d0:40:f1:f6:3d:c5:ff:97:56:18:
                    be:1e:39:48:69:d1:19:6a:c3:cd:14:63:78:84:bc:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:30:35:41:1D:F2:2D:3D:07:34:AE:6B:3E:31:BF:1D:0C:82:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0735f313-fa5c-3ce3-9897-c7e17f1ecd42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.55.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:c6:85:75:c5:b8:f1:e4:22:39:e4:87:71:35:64:68:c3:
         70:ba:45:1d:78:0a:cf:1f:96:fa:d5:a7:d9:7d:58:5b:5e:12:
         ec:49:36:ff:88:bd:90:12:f3:42:d6:a8:65:28:93:cc:b9:f2:
         39:26:ae:c0:d6:09:89:d5:21:8c:91:19:0e:60:79:8a:c5:94:
         2a:2e:9e:ec:de:53:35:d7:a0:6d:01:3c:92:c1:ed:a3:75:40:
         34:5d:d3:a5:45:c7:7d:d2:2e:e6:fe:b6:3b:e0:94:66:18:71:
         31:2c:e5:88:94:16:5a:da:58:81:c1:d4:22:3a:83:e9:72:a4:
         7e:03:c0:86:a8:18:9f:b8:24:74:13:4d:a4:0d:2e:45:a0:a5:
         e0:7a:7e:d5:71:fa:c5:48:08:d2:fd:79:2a:84:03:2b:2c:f0:
         ed:9e:b4:86:17:99:df:4a:c0:a4:74:b3:0b:f7:b8:a2:f2:47:
         bb:d3:23:59:2f:55:80:08:97:31:3f:3d:8b:35:14:27:4d:92:
         6a:fe:ef:28:25:1c:93:e0:e2:f5:26:16:89:59:94:ec:02:7e:
         21:24:60:ee:75:c3:9b:80:53:ea:11:e6:2e:09:74:e4:ca:cc:
         f4:ee:c5:d2:8a:11:f3:a4:4a:63:7e:78:6a:c6:c7:46:65:94:
         ea:b2:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:23 2025 by rpki-client