Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7a289b2-f982-353f-b06b-58ef810e3d33.roa
File:                     c7a289b2-f982-353f-b06b-58ef810e3d33.roa (raw, json)
Hash identifier:          sfnTNw5BDfaYQm6rrRD7lMknwuy8fczbmtpxpHiw2GU=
Subject key identifier:   DB:F7:A3:58:CD:9C:17:38:87:23:AF:EA:F1:15:6D:D9:F3:68:B4:69
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848897B291A9249F09AD6E82A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7a289b2-f982-353f-b06b-58ef810e3d33.roa
Signing time:             Tue 14 Jan 2025 02:00:39 +0000
ROA not before:           Tue 14 Jan 2025 02:00:39 +0000
ROA not after:            Mon 14 Apr 2025 01:00:39 +0000
asID:                     27338
IP address blocks:        74.10.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:89:7b:29:1a:92:49:f0:9a:d6:e8:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 14 02:00:39 2025 GMT
            Not After : Apr 14 01:00:39 2025 GMT
        Subject: CN=5f1ea5f9-3bc3-4203-815b-afb537bff940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:5a:b6:d7:fc:e6:16:f2:8f:84:e1:73:17:
                    0d:38:af:80:66:45:c5:f6:c1:92:2f:81:aa:e9:15:
                    ba:17:e9:1c:31:50:f8:47:fe:9f:73:d3:44:4c:b9:
                    6d:27:44:b7:9b:9a:58:81:a4:17:86:83:9f:36:54:
                    31:22:6d:00:6d:c6:7d:7b:0e:08:8d:0c:fe:b3:35:
                    1b:f3:0b:a0:c0:0f:94:67:a3:96:b9:93:c9:03:cf:
                    d9:1b:d2:2c:8f:cb:d2:41:b9:be:46:1c:7e:8d:7f:
                    34:01:56:bb:6f:00:ca:89:1c:9a:36:c4:ab:83:24:
                    7a:f6:76:a4:03:b8:65:40:d7:d2:08:5b:0e:c3:52:
                    15:4f:f8:2b:7f:0a:eb:43:55:e6:c3:68:25:cb:14:
                    db:28:4a:f9:4b:a9:84:2e:1d:e7:ac:b0:67:0d:89:
                    e1:e6:df:a6:b5:88:4f:32:94:3d:ff:29:3f:57:b0:
                    46:47:21:ea:81:b0:6e:db:9e:22:8c:ef:7c:2f:c8:
                    b3:04:2b:df:f3:48:ea:6b:08:39:f0:6c:64:24:26:
                    b4:b7:52:bb:d9:0a:92:57:f1:55:4d:64:a4:2f:6a:
                    78:4d:0c:5f:66:1a:26:14:f0:95:a8:3a:e4:a9:87:
                    c6:a6:e4:1f:c7:12:27:f9:68:dd:58:5e:06:b3:74:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F7:A3:58:CD:9C:17:38:87:23:AF:EA:F1:15:6D:D9:F3:68:B4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7a289b2-f982-353f-b06b-58ef810e3d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.10.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:16:15:60:56:6e:76:61:e0:52:bf:5c:0c:89:0f:1c:ca:4a:
         3d:a6:92:10:a9:ee:f1:83:d0:29:9b:9b:2b:f9:93:6e:27:1c:
         cb:88:41:ca:6f:91:5d:b3:6c:86:c9:e2:ce:55:53:60:db:31:
         94:86:f6:c2:f9:51:b6:d1:b6:31:e8:02:fd:65:dd:c4:54:cc:
         ba:87:8c:cd:7a:fa:75:bd:bd:34:da:5e:0b:25:c0:90:c0:39:
         55:65:36:b3:8a:93:06:c3:ee:9b:e0:07:f6:1f:a7:50:db:8c:
         18:65:6d:99:79:c9:b5:3a:8c:cc:bd:3b:b5:70:39:b9:6f:57:
         97:be:b8:8a:a0:95:1b:22:9b:cb:bc:bc:81:82:06:be:9a:e0:
         fb:06:d0:5e:34:aa:ef:0a:d5:d3:ce:7a:a5:6d:cb:eb:9b:13:
         be:b3:c5:88:d0:a5:af:c4:36:47:2a:a7:dd:04:1a:64:e2:4d:
         cf:f1:e8:82:b8:41:66:e0:b4:db:95:d2:07:b6:55:d7:16:b9:
         f4:ed:de:fe:b7:e0:d6:d1:5d:84:49:37:29:ea:26:b6:13:0d:
         ed:17:99:8e:b2:c3:0d:bb:43:cd:98:ad:47:45:7b:2a:6f:eb:
         d1:9b:b3:f0:91:8b:9a:c3:13:c1:1f:38:19:ef:15:33:f2:54:
         44:87:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:25 2025 by rpki-client