Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa
File:                     d3d979b2-eb71-3f42-924a-35effff21c73.roa (raw, json)
Hash identifier:          GqWvWBCliPmGRvfFqQZY1wihHKlw//Odtri8QBd/tLI=
Subject key identifier:   DE:0F:6C:BB:9C:08:3E:27:C0:63:87:06:C5:9A:D7:79:04:BE:A8:2F
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A04912EB3B76BF0C95060880
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa
Signing time:             Wed 22 Jan 2025 06:03:27 +0000
ROA not before:           Wed 22 Jan 2025 06:03:27 +0000
ROA not after:            Tue 22 Apr 2025 05:03:27 +0000
asID:                     19165
IP address blocks:        136.29.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:49:12:eb:3b:76:bf:0c:95:06:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 22 06:03:27 2025 GMT
            Not After : Apr 22 05:03:27 2025 GMT
        Subject: CN=af4fb2a4-32a0-436a-b606-7718dc77a6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6e:ac:fb:23:fa:d4:4e:20:66:19:d6:33:c4:
                    78:8a:29:9a:5d:03:68:b5:74:f3:43:d0:4a:ec:4d:
                    8a:da:97:8d:96:c8:df:6b:65:80:1c:cd:2e:08:c1:
                    a5:64:ac:27:c5:cf:86:11:ac:b3:68:50:b5:77:79:
                    d5:c8:b6:c2:4b:2e:6f:4f:60:29:14:1d:0d:60:61:
                    11:88:a6:10:5e:02:b4:8b:af:1d:84:24:13:f2:64:
                    ca:a4:a4:8a:f9:ea:ca:92:b8:ca:e1:91:d1:85:68:
                    61:ba:4e:3d:26:ca:c1:11:44:3e:dc:32:9a:b6:0e:
                    92:a6:c5:3a:d2:13:9f:ff:ba:fa:31:e3:97:b3:d9:
                    9d:2a:42:81:c6:aa:de:a4:b3:f8:e2:51:4e:1b:76:
                    f5:d1:69:ef:d2:24:0c:ab:6a:da:46:09:65:79:17:
                    d2:e4:49:ec:be:be:6a:84:ca:0b:c8:4e:ad:93:aa:
                    46:a9:00:2b:10:79:e3:8c:8b:52:30:47:3e:5d:23:
                    98:c7:ea:c8:3d:1e:88:80:44:97:d9:f5:83:d9:90:
                    3e:57:ce:fb:71:00:ce:69:9e:ac:d1:ac:73:94:9c:
                    cb:6d:4c:26:2f:ba:87:d6:24:2e:33:66:7f:d7:7f:
                    c4:a3:c9:76:6e:70:05:ec:04:4f:7f:58:5e:18:a5:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:6C:BB:9C:08:3E:27:C0:63:87:06:C5:9A:D7:79:04:BE:A8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.29.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:75:d2:a8:b3:a5:e8:61:96:6e:3a:36:91:26:9a:3b:8d:bd:
         0b:70:3e:11:f2:33:77:28:6d:ee:2a:3e:91:fa:3d:94:8e:8f:
         07:38:9d:77:b1:98:de:63:70:1e:63:cb:68:d5:3e:ac:8a:fb:
         0f:f4:07:df:6b:76:f4:2e:bb:18:fb:14:34:b5:17:45:c4:93:
         a5:7c:c8:98:8e:71:9e:f1:5a:10:39:2a:58:43:1c:ad:fa:a1:
         8a:12:de:52:df:0b:7c:a2:3f:fe:7c:fd:82:a6:93:7d:65:ad:
         1f:b3:e5:0d:97:b8:3b:11:86:c9:74:0b:53:21:44:47:92:25:
         c4:8f:ba:f5:69:27:de:49:e1:a8:35:df:1b:c9:af:cf:59:50:
         87:a9:c2:21:40:85:2b:7d:16:60:46:8e:40:d6:89:53:c3:74:
         52:b7:ac:5c:05:62:da:be:83:33:e8:61:26:52:93:33:31:41:
         26:89:fb:5e:b0:c1:ee:2b:46:fc:33:3a:b7:64:a1:62:05:77:
         f3:7f:6c:04:c7:3c:e7:bd:8f:7e:29:5f:20:9c:0b:94:d5:13:
         d4:e8:9a:06:c2:a6:5a:9e:c7:15:2c:b1:65:1b:c8:23:db:85:
         1b:bf:f8:36:ad:0b:64:8e:53:2a:1f:89:9e:3f:fc:2f:1e:4c:
         9e:bf:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:09:55 2025 by rpki-client