Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa
File:                     efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa (raw, json)
Hash identifier:          cAigaG/mSRHNdcQL8Smn3L6dUpBOhe5eacLLB7XtzkQ=
Subject key identifier:   61:CB:42:05:2E:87:63:79:7D:DC:0C:CD:1B:D5:DA:B3:57:38:BE:80
Certificate issuer:       /CN=7054e196-fda1-4988-82d5-4d2f5013150d
Certificate serial:       010D0C9F432858490E16C10C059F149258F23100
Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     14648
IP address blocks:        170.39.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c1:0c:05:9f:14:92:58:f2:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=dbd0588b-3374-471a-b2c9-f5211e09c6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:e2:da:c8:d4:1c:9d:04:7e:5d:37:76:02:
                    1a:c7:fe:67:31:b7:eb:c0:b9:f6:6a:5e:8b:69:b9:
                    e0:45:10:33:7a:e3:81:f2:71:9e:71:7b:72:6a:f2:
                    66:d7:4c:29:cf:06:81:44:1c:33:3c:8c:84:07:46:
                    d0:25:d4:d5:bd:66:f7:40:c1:d6:30:17:4e:eb:ef:
                    1c:e7:64:18:12:51:88:a8:13:f0:28:69:f7:30:72:
                    11:98:3a:10:b1:33:bb:cc:95:15:d4:9a:c6:37:50:
                    5a:73:3f:04:91:24:0a:65:a3:bb:c5:68:d3:ee:8a:
                    5e:f2:0e:57:d5:8e:51:af:9d:59:2a:e4:86:d9:86:
                    9d:a2:34:ac:15:82:d2:66:a2:34:23:2f:5c:67:a1:
                    cc:12:32:9e:a3:42:7a:a3:d2:e9:2e:8f:05:42:56:
                    bb:0d:f0:f7:a0:f3:03:07:b4:36:13:b9:49:de:44:
                    0c:e8:93:19:9c:bc:88:d9:ea:69:a7:d9:de:68:d7:
                    90:06:67:fa:95:cd:cf:f7:b3:8d:02:10:ea:3a:5f:
                    df:6d:28:1c:9e:ac:a4:4a:7f:d5:b4:79:f5:ad:22:
                    e4:54:b9:e1:b6:5a:c2:0c:3b:4e:de:7c:6c:17:03:
                    ae:3a:a2:f5:21:9d:2a:e4:09:45:ed:cc:62:2c:c9:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:42:05:2E:87:63:79:7D:DC:0C:CD:1B:D5:DA:B3:57:38:BE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/efb22e9b-1db1-3239-b2d3-65e0df4abd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl

            X509v3 Authority Key Identifier:
                keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:aa:a0:2f:5d:31:ba:ba:93:15:98:66:52:f7:33:9e:0b:
         70:79:ec:f8:bd:26:0b:c8:f3:58:d8:00:67:f7:2a:80:fb:33:
         e4:31:e6:1f:8d:5f:54:16:bd:17:e9:26:66:c4:63:05:fa:f8:
         3e:7a:e3:25:54:88:c4:f2:2e:55:4f:8f:67:8d:cf:77:d8:95:
         ac:d6:60:e5:0c:da:e8:13:02:fe:07:2e:25:e3:21:07:6b:ef:
         b1:f1:fb:5e:e9:fa:be:06:08:61:e1:7f:e7:7d:69:8e:d4:c3:
         f2:22:7e:44:46:2a:73:3b:6c:38:3c:57:87:cd:eb:cb:90:2b:
         87:f2:a9:46:2c:cf:aa:31:3f:01:76:a3:85:87:7a:8e:9b:29:
         22:68:1a:cf:52:f2:8f:67:53:49:e0:55:08:bb:7d:1e:8a:10:
         54:d5:21:fa:1e:49:97:f6:38:d9:eb:08:4d:a1:26:51:4c:39:
         18:ed:49:d7:58:ac:d4:5f:a5:3a:82:60:5e:3a:38:48:c5:9f:
         b3:18:ff:5f:bc:17:42:23:a4:8c:f2:3c:35:1a:10:ab:78:f6:
         85:ad:5b:67:33:9e:17:78:0c:fa:d0:98:91:80:7d:52:36:85:
         67:20:00:0a:ca:ee:1a:c6:48:3c:37:92:67:13:b6:c4:34:b7:
         c5:18:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:06 2025 by rpki-client