Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa
File:                     0609aee8-be76-3063-9d65-d282b41f7e4b.roa (raw, json)
Hash identifier:          x+AbdYAqSUxgSW+aSPvPoWkXsLpO8Ub5FxCWoz7qBxI=
Subject key identifier:   37:3A:54:11:5D:E8:DD:29:57:D4:C1:5A:80:A7:00:66:13:C0:36:47
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A206302BD2D34D8AA1E689C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa
Signing time:             Wed 22 Jan 2025 21:00:18 +0000
ROA not before:           Wed 22 Jan 2025 21:00:18 +0000
ROA not after:            Tue 22 Apr 2025 20:00:18 +0000
asID:                     15164
IP address blocks:        74.51.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:06:30:2b:d2:d3:4d:8a:a1:e6:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 22 21:00:18 2025 GMT
            Not After : Apr 22 20:00:18 2025 GMT
        Subject: CN=2517aa4c-8ae2-4962-b907-7252a100e7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:08:1e:0b:91:26:e4:9a:a1:d2:d9:76:b3:82:
                    55:0f:b2:4b:cd:d2:89:42:22:61:58:2c:73:0d:88:
                    53:64:0c:41:4b:46:9d:02:f7:e3:31:77:4b:74:2f:
                    1a:b0:3d:d5:52:b6:29:35:09:af:af:26:78:03:1f:
                    d8:e1:bc:2e:3d:3c:41:89:56:71:0f:50:5c:55:92:
                    b7:37:d3:61:f9:83:44:b7:eb:a1:df:ac:78:de:f5:
                    43:e5:7a:29:b2:23:6a:21:44:cd:7a:fe:d1:6f:03:
                    3e:5f:a6:95:3b:d8:75:2e:b3:02:eb:1e:bf:9e:f4:
                    92:86:10:59:cc:b0:21:9e:73:f4:90:28:e7:6b:b4:
                    93:ab:fa:87:58:67:5a:72:40:0e:c8:43:81:cd:90:
                    33:42:59:f6:87:9f:4b:12:bf:41:c3:c8:a9:f8:18:
                    cd:9d:14:34:f3:5f:27:6f:5b:65:df:f3:d0:ac:9f:
                    0e:de:dd:0e:9b:8a:06:35:3c:11:32:27:6c:d9:24:
                    1b:6c:9c:a0:23:56:64:cf:48:22:67:0b:7c:1d:cb:
                    4c:a0:89:61:37:c7:72:0f:fa:9c:ae:4a:62:35:c5:
                    a3:f7:ce:dc:39:8d:97:02:c6:8f:69:53:b9:10:ef:
                    e9:43:1f:7b:92:8c:17:80:63:6f:99:2d:a0:f5:e0:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:54:11:5D:E8:DD:29:57:D4:C1:5A:80:A7:00:66:13:C0:36:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:03:18:f4:de:26:a0:83:45:21:be:02:a5:ed:93:ff:eb:
         04:3e:c7:e3:ff:fd:93:f7:04:8e:7e:b7:5c:73:4d:71:f2:16:
         06:b3:83:e5:c9:2e:22:fb:f6:82:de:f1:a7:0a:ba:bb:8b:06:
         a9:41:53:52:68:4f:a7:60:e9:07:8a:49:c5:df:ba:90:55:60:
         cb:24:35:00:e9:61:ed:e1:86:ce:18:dc:3a:ce:69:ed:5d:ae:
         5f:cc:00:e3:8c:23:f1:f9:b6:29:88:96:98:e9:ff:5a:6e:24:
         74:bb:f0:17:a5:dc:79:2d:ec:56:ce:62:0d:79:df:2a:dc:3e:
         3b:79:97:4b:91:e6:39:15:fc:71:87:03:ef:39:ec:7c:40:79:
         82:bf:ac:4d:15:f7:49:c2:9b:6a:46:a1:d9:29:0a:37:98:09:
         50:40:52:83:77:e8:d5:6e:24:39:8b:ca:db:a9:eb:ad:34:0a:
         0b:3e:ea:40:a5:3a:fc:b3:e5:00:35:13:8d:de:d1:22:d0:9c:
         e0:ed:5f:80:a4:59:53:3c:ac:03:c6:3e:f1:42:d1:2f:56:4e:
         3d:24:b8:f3:51:f9:bd:51:ea:3b:5b:88:a5:30:ad:ec:88:73:
         77:21:68:92:df:21:e5:8c:9c:3b:da:f2:eb:4e:b8:0d:5d:a4:
         43:30:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:12 2025 by rpki-client