Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11346961-2de6-378c-8b12-1e462e2aa949.roa
File:                     11346961-2de6-378c-8b12-1e462e2aa949.roa (raw, json)
Hash identifier:          eqeJVPlfwD+jDFwA51cYR+UQPtfPBb5gqXAbad1MT0I=
Subject key identifier:   F8:27:EA:DB:23:BD:F0:2C:5A:3B:4A:A1:1D:E9:E1:52:3E:B7:E2:9E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584893C58DD881BE4B37D2220CE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11346961-2de6-378c-8b12-1e462e2aa949.roa
Signing time:             Fri 17 Jan 2025 18:28:46 +0000
ROA not before:           Fri 17 Jan 2025 18:28:46 +0000
ROA not after:            Thu 17 Apr 2025 17:28:46 +0000
asID:                     7029
IP address blocks:        173.189.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:c5:8d:d8:81:be:4b:37:d2:22:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 17 18:28:46 2025 GMT
            Not After : Apr 17 17:28:46 2025 GMT
        Subject: CN=16dfaed7-c6d1-4d24-a1de-9dac3541cf24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:70:37:7d:3e:0f:98:34:2a:a6:c3:dd:90:
                    8d:30:47:91:c8:22:03:71:ce:44:b5:47:13:b6:c7:
                    6a:bf:47:0f:00:e6:bc:54:f8:52:f1:5d:32:e0:a8:
                    4a:3f:21:35:9e:af:80:a6:4c:d8:c5:98:14:8e:64:
                    62:63:2d:d9:34:2c:c2:2f:24:1d:5d:ca:c2:1a:a0:
                    b1:55:2a:0f:3d:eb:1f:e2:13:4d:26:da:6c:0b:36:
                    79:96:1e:68:cf:8c:25:8c:56:64:1e:32:1e:55:7d:
                    3c:3a:26:95:56:a7:af:54:59:fc:fa:7f:73:69:2f:
                    56:fb:24:3c:1a:37:55:c3:9b:78:65:df:de:39:9d:
                    b6:7f:78:76:a4:d5:67:11:03:1b:29:a7:e4:08:cc:
                    41:b4:b6:d4:8a:35:5e:b7:3b:e3:bd:f6:98:94:70:
                    75:cf:66:28:f9:91:de:d0:1d:a5:3d:5f:fc:49:ad:
                    2b:6d:c3:1e:51:00:a8:8a:be:08:95:2f:d7:3b:89:
                    5f:2c:6a:01:62:91:da:6f:27:14:1f:17:81:72:80:
                    ff:a1:a9:f7:a7:8d:91:4b:fc:f6:61:4a:1d:e0:ac:
                    f3:c4:4f:93:50:23:dc:63:cf:49:aa:c4:02:99:e7:
                    b7:c4:6c:d5:e8:3c:03:da:80:f7:c3:80:4b:19:d7:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:27:EA:DB:23:BD:F0:2C:5A:3B:4A:A1:1D:E9:E1:52:3E:B7:E2:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11346961-2de6-378c-8b12-1e462e2aa949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:26:71:13:56:88:8d:c6:95:19:ae:76:ac:50:6e:96:34:f8:
         6f:6a:72:33:20:7a:f5:be:c0:73:f6:d7:e7:28:8d:f6:67:3e:
         a1:03:ff:24:e1:89:89:0d:e1:fe:60:9f:2f:82:c4:6c:11:e2:
         0d:f7:42:10:d4:25:d5:08:48:40:d6:42:c8:15:a6:03:a5:b1:
         9c:5d:af:ab:c4:57:72:61:46:75:72:73:c0:56:8b:a6:90:3e:
         72:c4:f9:5b:80:c6:a0:5b:bc:17:78:c0:5f:16:9f:ca:c5:80:
         5e:ad:3a:fe:8c:c6:9c:bf:2c:66:46:d4:27:28:a9:43:52:93:
         84:1c:8a:a2:32:e3:39:7a:5a:92:4d:97:fc:cb:0e:05:e5:67:
         52:e7:75:9c:45:f1:7b:33:00:24:37:ca:aa:13:99:fd:9c:fb:
         b4:c0:e4:a2:c7:f6:15:51:a5:a9:c3:a0:7e:1a:41:1d:2e:11:
         c7:2a:11:53:92:65:36:49:81:c0:25:e4:78:66:6c:09:52:f1:
         79:a4:11:f5:34:48:29:79:00:2f:59:61:67:fa:87:70:27:f6:
         92:73:b4:d3:af:dc:83:bb:b5:48:a0:11:00:0d:8e:16:32:e8:
         51:05:12:9a:e3:49:3b:e6:87:da:4b:04:72:9c:3f:09:28:c8:
         a3:67:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:44 2025 by rpki-client