Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78e44ecb-ec92-32bb-b0a1-01c1f2aa0e85.roa
File:                     78e44ecb-ec92-32bb-b0a1-01c1f2aa0e85.roa (raw, json)
Hash identifier:          KlIZnIJOsza8WIhXfAwFIDnsk3ZNNHGIEVOZUTrYh08=
Subject key identifier:   DA:7B:C4:2E:D4:F2:37:D4:7C:87:A7:4E:F3:E3:2D:C7:7F:C5:93:4D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D2111C3A90696592938A5C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78e44ecb-ec92-32bb-b0a1-01c1f2aa0e85.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        67.141.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:1c:3a:90:69:65:92:93:8a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=7035b205-9c32-4959-8e86-1161993816f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:d9:73:b7:d4:83:3b:56:26:01:e4:6c:88:
                    f6:75:3e:d3:14:c4:a8:b8:2f:2d:31:62:05:7e:08:
                    ea:b9:9e:5e:24:29:36:f3:20:1c:a0:e9:2a:24:1b:
                    ee:7d:ec:25:4b:d2:ee:d2:a6:24:6b:b0:bb:b7:0f:
                    40:5f:23:9d:1f:dc:9c:a1:60:f1:63:28:49:93:01:
                    2d:6c:07:6b:1b:ee:f0:f6:d5:7c:b4:83:e9:9b:e6:
                    e7:cc:3d:e0:63:09:53:e1:e0:51:c8:2e:45:30:bc:
                    6f:51:45:b2:55:ba:54:08:a9:c7:64:02:f4:80:f0:
                    f6:0c:0e:7b:7e:2e:5e:63:2e:d6:cd:66:30:eb:30:
                    2c:6b:87:57:cd:25:04:7d:80:61:ba:78:d3:e6:26:
                    d6:56:55:02:0c:57:e9:51:e7:c7:40:5d:48:15:c1:
                    03:9b:a3:b8:32:6a:6d:0a:70:5d:90:73:32:f4:49:
                    15:f4:83:f1:a6:d4:5b:03:9f:38:a4:3e:5d:d9:66:
                    d4:42:3d:2e:5f:7d:6b:9f:8a:f1:c5:dd:7b:61:b2:
                    db:74:ef:17:7d:8e:51:8e:c1:a4:ed:fb:cf:2f:b7:
                    eb:6f:81:6d:21:6a:13:9e:5a:f2:cc:11:b1:02:cd:
                    de:c4:6d:64:07:6e:77:2c:c1:c9:22:af:be:5a:0b:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:C4:2E:D4:F2:37:D4:7C:87:A7:4E:F3:E3:2D:C7:7F:C5:93:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78e44ecb-ec92-32bb-b0a1-01c1f2aa0e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.141.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:91:f1:fe:34:f3:ff:b3:c2:8c:91:fb:af:e6:5b:b5:6a:
         99:36:e7:8e:d3:91:51:ec:c6:fe:8d:10:32:13:24:9c:f5:83:
         e3:a3:bf:8c:61:49:0f:db:25:64:eb:86:eb:c6:fa:e1:b8:ec:
         f5:9c:68:6e:8c:3c:1d:8c:8e:3c:3d:03:94:78:5b:a2:fc:fd:
         f4:f9:fb:cd:ed:6d:2c:00:b0:59:98:88:44:d1:c0:9c:e2:56:
         0f:e3:9f:f9:df:07:32:4a:53:30:8b:f9:29:15:db:1b:b8:16:
         f8:3a:ac:0a:6e:5f:59:22:80:99:54:34:99:23:4c:10:c1:cb:
         a8:6c:a2:65:31:4e:cc:7b:20:81:d1:cb:43:1f:18:7d:a5:97:
         99:4d:5c:11:5c:0c:1b:00:63:04:2a:43:25:85:99:45:46:cd:
         51:ab:f3:88:6f:8f:77:89:37:0b:01:fa:cc:01:62:d9:7e:64:
         41:05:4a:c9:5e:c5:2f:0c:9b:80:16:1a:da:d0:7f:19:d9:5e:
         01:af:9b:f8:be:87:19:3e:fb:9f:a6:3b:8d:c6:1f:62:12:d9:
         21:b5:73:6d:c0:78:51:6e:08:08:1b:12:d8:c5:48:9b:d0:9e:
         bb:41:e3:af:49:4a:79:f2:ec:a6:52:68:c4:8c:0d:25:d3:6e:
         c3:3c:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:31 2025 by rpki-client