Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/c568d9c2-52e8-309d-bbc2-2429d6c88969.roa
File:                     c568d9c2-52e8-309d-bbc2-2429d6c88969.roa (raw, json)
Hash identifier:          JfABteTFxACSqLQWEwTE/afvdS85pJ3Fk2maYHQXRQo=
Subject key identifier:   AC:78:50:7E:2E:B8:F5:C4:9A:B3:F5:91:06:04:8A:23:C4:3B:0A:93
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F43285848E59BCC7F103540A76DE2E740
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/c568d9c2-52e8-309d-bbc2-2429d6c88969.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     19528
IP address blocks:        74.209.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:cc:7f:10:35:40:a7:6d:e2:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=f1abd6fc-20f8-40b0-8eec-1d485640799c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:aa:0f:20:5e:6c:30:8b:cb:98:ac:58:61:
                    38:49:ec:b2:54:0b:8e:ba:97:46:55:a0:3a:ff:dd:
                    5b:3a:8f:2c:cc:d5:17:3e:b7:41:86:2a:cf:30:fd:
                    d7:04:a7:0f:11:9c:7d:cf:74:37:81:f8:31:a8:9f:
                    b8:44:ff:08:8c:a4:44:de:30:96:0a:5b:22:43:f2:
                    c3:6b:28:e4:05:09:3e:92:57:f8:dc:c5:0b:d5:43:
                    2a:62:92:28:5e:f8:d6:60:c9:2b:40:3b:bc:ec:f3:
                    45:c3:08:15:b8:fd:71:90:c8:35:1d:58:e9:28:83:
                    6b:70:8d:7a:f7:c8:20:e0:34:c5:26:af:75:78:fe:
                    09:52:83:e6:47:e4:eb:96:a3:da:87:d7:3e:ce:34:
                    e2:d6:cd:c9:61:df:a4:a1:a2:3f:b5:e9:b4:ae:e9:
                    53:5a:d5:41:2b:f2:dd:b1:5c:15:76:97:43:57:a9:
                    f6:52:d3:dd:11:b8:70:bf:ab:e0:38:17:10:63:30:
                    c2:b8:21:aa:84:fc:67:6a:a0:ec:28:07:c7:d5:8f:
                    92:49:ed:8c:fd:d7:f8:7f:d5:c8:e6:e0:fe:78:c7:
                    e2:34:3a:22:66:df:39:cd:4a:c3:d3:64:31:66:cc:
                    7a:33:04:62:02:8c:cf:b5:16:de:7e:4c:ce:c8:6a:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:50:7E:2E:B8:F5:C4:9A:B3:F5:91:06:04:8A:23:C4:3B:0A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/c568d9c2-52e8-309d-bbc2-2429d6c88969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:aa:26:13:80:e6:bc:79:b7:cf:00:ca:7f:a5:f4:af:d6:
         da:78:ef:2b:bc:8c:02:da:ae:80:eb:7c:06:14:4e:9d:45:05:
         9c:e6:bd:0a:e8:71:b5:ad:0d:0a:d9:8e:e6:93:a6:68:15:3a:
         bb:f4:04:38:04:c5:80:9b:50:8e:f4:ec:89:43:1a:a9:55:65:
         e5:0b:ae:05:f8:81:f1:0f:5d:71:a6:04:63:91:50:69:2d:db:
         84:e3:81:db:0e:01:e8:87:84:3c:d8:8f:69:f2:3b:12:ae:b9:
         d0:20:66:3d:bc:b0:fe:67:77:ec:aa:04:81:bf:f0:15:b3:0d:
         d7:f5:76:30:98:db:95:f9:74:82:1a:e2:84:1a:d8:4d:6d:a8:
         53:04:9d:0a:0a:ce:a4:8f:14:6a:b9:70:97:d1:80:17:0a:03:
         91:2b:83:48:77:f8:4f:01:23:18:01:ed:7f:de:1d:15:08:4c:
         70:8a:6e:4c:cf:82:7a:a5:2c:d5:bb:76:a6:7a:7f:12:6e:86:
         b2:17:ba:46:5e:f4:8d:2a:18:fc:37:c5:b6:88:85:39:d0:e6:
         6a:10:18:4f:5b:0f:2b:4b:68:9b:61:8a:49:fa:9f:09:a1:19:
         18:39:b2:8e:68:b4:e3:fa:fd:18:78:7f:32:b1:86:2d:d9:4e:
         30:61:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:29 2025 by rpki-client