Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa
File:                     b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa (raw, json)
Hash identifier:          JHKj0/Yiwhlzjs5vhAG81bzW90xMO5w5DiddxqYjR8g=
Subject key identifier:   EA:10:A6:14:93:5C:BF:CD:D9:57:79:B3:42:CD:A5:AE:4B:D4:8E:50
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858489F30A809376465A87A051980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa
Signing time:             Tue 21 Jan 2025 20:38:27 +0000
ROA not before:           Tue 21 Jan 2025 20:38:27 +0000
ROA not after:            Mon 21 Apr 2025 19:38:27 +0000
asID:                     7029
IP address blocks:        174.130.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:30:a8:09:37:64:65:a8:7a:05:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 21 20:38:27 2025 GMT
            Not After : Apr 21 19:38:27 2025 GMT
        Subject: CN=474e5847-3f11-4623-bb1b-d7f4b6d09421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:b6:e5:89:95:51:5e:a5:37:ba:2f:7a:b3:
                    1b:d6:a3:11:10:12:ac:78:fa:94:72:19:f3:c9:71:
                    a0:a7:3b:78:5d:1a:8a:a0:b0:5f:90:3c:46:27:8c:
                    9c:ab:77:a1:19:2a:d8:b3:9e:ce:b9:bd:b9:f0:58:
                    29:ed:af:0c:b4:56:1c:4a:34:2c:eb:89:1f:87:73:
                    2b:21:56:71:fe:27:e6:78:18:01:d7:ad:de:8b:01:
                    12:b0:f3:d8:9b:74:91:8d:25:2a:16:ca:33:e7:5e:
                    79:85:fc:15:e2:9b:f3:d2:a9:fc:7e:06:62:b4:15:
                    ac:14:59:fc:b6:7a:d1:e5:b2:fc:25:3c:6c:c9:20:
                    55:a0:70:aa:00:03:d1:74:26:a2:f4:2d:fb:76:0a:
                    81:13:66:0f:88:c1:4f:47:69:61:9a:d4:f6:c1:15:
                    be:74:98:a2:5d:6f:75:33:16:b4:a4:36:41:65:6f:
                    56:c4:3a:bc:bf:e3:44:12:03:9c:85:d7:5a:dd:49:
                    47:74:06:4b:26:4d:52:a6:72:f3:33:ff:d5:10:4a:
                    42:4a:cb:39:4f:66:2e:54:13:c5:ed:98:7a:25:ae:
                    17:ea:ec:3d:16:ab:33:10:e8:72:3d:b2:13:fd:3d:
                    4f:f6:8a:a6:4b:f3:18:ba:63:4c:ff:17:8f:8b:14:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:A6:14:93:5C:BF:CD:D9:57:79:B3:42:CD:A5:AE:4B:D4:8E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:23:72:16:85:19:c2:04:1a:12:9a:6f:41:5c:07:3c:a9:4a:
         06:57:78:69:c3:5b:70:dd:ea:2b:8f:ac:3b:6f:f4:d4:ed:7d:
         27:d8:ea:21:f0:b7:0d:df:06:c1:b9:29:3a:dc:85:a8:ce:eb:
         20:37:35:71:05:fb:cb:7c:79:42:51:49:bd:62:d6:a6:ae:85:
         d8:49:3d:d0:f1:7e:16:6b:85:26:ba:b2:92:7f:23:58:f6:fe:
         90:96:25:0d:87:75:ac:1f:5a:71:78:2a:35:84:c4:ac:69:90:
         82:e6:a0:d5:f3:b4:cd:73:40:d3:10:ac:fe:93:97:3f:12:1d:
         39:2a:a2:03:eb:f1:2d:68:e9:4c:dc:b6:e1:c6:36:bf:6e:1f:
         bb:fe:e0:21:d9:9a:3c:f3:2c:73:8e:3c:fb:0c:94:7a:a5:d6:
         ee:89:bb:04:58:e4:f9:27:7d:ad:f5:20:53:e4:b6:43:cf:62:
         58:75:c1:9f:41:8f:89:da:d8:69:69:24:7e:47:d1:6d:0b:dc:
         e3:a3:2a:56:cc:af:ea:e7:05:1a:09:18:9f:c8:34:69:f5:4c:
         b7:43:e6:14:1a:a0:54:7c:ef:17:b2:6f:36:73:92:9c:cb:64:
         90:fb:6c:e2:b9:8d:8b:3f:b2:bb:a3:4a:86:4e:76:41:0d:03:
         a7:49:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:37 2025 by rpki-client