Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/828fa142-b424-3fee-ab4e-b7ff13d20a1d.roa
File:                     828fa142-b424-3fee-ab4e-b7ff13d20a1d.roa (raw, json)
Hash identifier:          Ol6QMRlrM6R6GnXahuhGmG26lNz76H5HEakup/P6rdc=
Subject key identifier:   2A:F1:32:E9:32:1F:8B:57:69:E8:2E:38:A6:34:62:6D:ED:80:6A:26
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285846C9AF395F623DC83DB08F7A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/828fa142-b424-3fee-ab4e-b7ff13d20a1d.roa
Signing time:             Tue 06 Aug 2024 16:23:33 +0000
ROA not before:           Tue 06 Aug 2024 16:23:33 +0000
ROA not after:            Mon 04 Nov 2024 17:23:33 +0000
asID:                     27338
IP address blocks:        74.11.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c9:af:39:5f:62:3d:c8:3d:b0:8f:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  6 16:23:33 2024 GMT
            Not After : Nov  4 17:23:33 2024 GMT
        Subject: CN=547da56a-1a98-4ece-8bab-108f13dc277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:ed:41:36:f1:90:44:4e:ed:00:6f:2d:eb:
                    d1:dd:2d:85:09:2b:3e:1c:26:19:ee:88:58:fd:2b:
                    58:12:f3:83:e4:34:31:38:7e:93:d3:64:60:3d:a3:
                    ab:d3:30:b2:3d:cf:3f:46:06:e8:ba:06:18:dc:3a:
                    fb:b4:5b:7e:59:d2:b5:c9:e6:d2:b5:70:56:4d:49:
                    fe:d7:11:c7:3d:e3:73:9a:10:a8:94:40:fb:03:fc:
                    80:0f:41:a1:1e:af:bc:a5:c3:ad:fd:ee:3d:1a:24:
                    ca:f9:7b:77:fe:a3:c1:e5:cf:7b:b1:fa:4f:ba:83:
                    03:62:03:11:7e:dc:e0:cb:12:42:d7:e5:e8:cb:ad:
                    3b:c5:ae:61:29:e4:a1:e6:1e:47:b4:8f:7b:bc:ba:
                    d2:34:86:fc:16:e3:31:1c:2d:58:55:93:fe:92:fd:
                    da:6a:1f:e5:da:66:d2:f2:c9:46:cf:33:b0:e8:3f:
                    c6:23:b2:8f:d1:93:92:ee:35:12:0c:2f:dd:01:d4:
                    cf:75:db:0a:da:21:48:10:13:58:5e:d7:a1:db:5d:
                    db:bd:85:a5:5f:16:d3:bd:02:0d:e9:80:e3:e1:b8:
                    e0:e2:6d:87:ec:28:f9:78:a6:b6:a7:69:45:c8:d6:
                    c6:2c:dc:ef:ee:8b:58:c0:64:3a:d2:10:30:cd:2c:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:32:E9:32:1F:8B:57:69:E8:2E:38:A6:34:62:6D:ED:80:6A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/828fa142-b424-3fee-ab4e-b7ff13d20a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.11.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:62:01:5a:15:e9:59:ad:22:88:78:f6:e3:38:83:7b:66:84:
         41:1b:f6:c6:cc:e1:88:76:a1:8e:fc:37:69:d9:4c:d5:06:81:
         07:10:68:c9:ba:29:f4:10:f1:7a:22:03:c0:2d:db:34:85:b1:
         dd:4f:53:00:44:27:eb:8b:21:61:5b:97:d9:d9:d3:bd:51:fd:
         9a:92:a9:b8:be:53:64:54:c6:f0:7e:0e:c5:b0:d5:06:b4:81:
         78:0e:0f:9b:bd:88:9e:b8:b9:a8:be:58:18:0b:fb:55:d8:5f:
         c4:08:4c:2d:51:b9:22:c3:c9:0f:04:65:63:3f:c0:94:18:0a:
         e9:95:eb:c5:8d:ea:ac:7e:21:e6:8c:41:f6:d4:74:75:17:be:
         73:9c:05:56:d4:df:71:7a:37:ed:70:41:34:21:2d:d1:24:98:
         8c:dd:5a:10:d7:b5:7f:1a:76:e7:35:ba:13:8c:df:f1:89:4f:
         c1:58:52:4d:7a:bb:c9:3a:a0:00:df:14:49:35:51:a1:94:dd:
         7a:f8:39:46:e0:b4:7b:0e:a8:28:2c:3f:11:67:57:2c:fa:38:
         05:34:aa:35:e9:a5:0b:6f:2b:a9:ad:a1:8e:cd:6d:5f:89:8f:
         60:21:70:00:05:1d:b5:8e:85:e8:0f:e4:ac:87:cc:46:60:56:
         b4:e2:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:25 2025 by rpki-client