Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa
File:                     385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa (raw, json)
Hash identifier:          dS2JNePT+yTuXjP2KJsA6JXc0XBoHOAe0pvtk+LUmqk=
Subject key identifier:   AD:4A:3E:1F:85:A5:CA:F2:C4:5A:56:1E:7A:3A:3E:65:D0:18:CD:63
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A217729A248CE523368FC6C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa
Signing time:             Wed 22 Jan 2025 21:35:05 +0000
ROA not before:           Wed 22 Jan 2025 21:35:05 +0000
ROA not after:            Tue 22 Apr 2025 20:35:05 +0000
asID:                     15164
IP address blocks:        74.51.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:17:72:9a:24:8c:e5:23:36:8f:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 22 21:35:05 2025 GMT
            Not After : Apr 22 20:35:05 2025 GMT
        Subject: CN=0f7ef94e-4b91-480d-b475-1e7b5c1130ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:d9:ca:ba:6c:e9:fc:f3:b3:c6:4c:2e:4c:
                    22:79:b4:e3:1a:6c:f0:88:3e:8a:5c:32:77:a9:41:
                    72:02:02:82:08:80:06:48:24:a0:fd:fb:82:46:6d:
                    60:f2:80:66:36:fb:88:11:96:0e:f4:35:62:10:a5:
                    80:8a:cb:94:19:bb:7f:31:e1:22:2b:11:30:a0:9f:
                    b4:8b:3f:65:41:55:19:b2:a0:ac:7b:d9:0e:8d:fd:
                    8e:34:7f:fe:7c:0f:cc:ce:56:af:ee:5a:e4:93:c0:
                    26:57:3f:34:bc:53:74:82:e9:5a:98:d6:a1:a1:6a:
                    1c:92:da:e5:65:72:ac:47:92:80:43:7e:28:02:4e:
                    0c:bd:08:d7:eb:bd:11:d4:03:a4:1c:fd:26:7d:e2:
                    d6:e3:48:67:0c:93:5c:f4:06:53:49:43:e0:23:bb:
                    67:69:f3:4c:9d:99:55:7d:87:22:6f:7c:90:0b:e8:
                    bd:dd:5c:63:dc:06:86:bd:af:77:dd:b5:d9:06:a1:
                    cc:71:db:24:dc:da:e0:48:ce:02:f8:dc:92:01:20:
                    2f:22:6c:bc:d0:30:84:38:3d:a7:e3:c5:70:e2:91:
                    0b:00:80:ba:33:0e:69:ef:32:87:c6:bc:35:85:e4:
                    d0:66:9b:54:da:3a:46:dc:26:57:dd:45:20:b8:62:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4A:3E:1F:85:A5:CA:F2:C4:5A:56:1E:7A:3A:3E:65:D0:18:CD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:11:31:2b:c5:32:34:54:a6:4f:fe:75:dd:bf:9a:5f:d3:f4:
         09:0c:dc:72:e7:de:32:60:7b:80:ef:74:98:42:77:85:51:f9:
         c7:eb:77:22:b2:07:fd:83:2c:12:9c:cd:64:39:bc:07:0d:08:
         63:5c:05:a1:aa:bc:4d:ee:8e:e8:73:71:e4:21:ec:4a:2e:64:
         75:b3:d0:33:1d:ec:b4:bd:9a:d8:e0:73:0d:31:ea:4d:dc:68:
         dc:b2:cd:33:0a:32:20:fc:33:07:97:09:f0:27:d3:a8:2d:e4:
         59:ba:1e:5d:f7:c3:ec:05:57:2a:89:44:ce:5d:ab:f3:0a:0a:
         63:85:74:c4:e1:d8:9a:5a:82:00:a1:32:5b:38:ae:8c:25:7a:
         9f:e6:c9:ee:5e:6c:f9:09:a7:07:09:c3:50:84:49:79:6e:c7:
         ba:bc:72:7a:30:f7:2e:95:0c:87:89:2d:f2:9e:74:2d:39:e3:
         65:3b:fb:b8:dc:b5:c3:ea:d2:05:e3:f6:91:d2:7f:c5:89:54:
         3b:36:db:58:7d:3d:b1:3b:7e:d1:09:a2:db:51:0a:2b:a1:48:
         80:0d:23:b7:b8:66:02:f3:b2:a7:75:79:5f:b0:50:c7:8e:40:
         31:58:2e:a2:5e:71:7b:60:77:dd:4e:e5:3e:ab:d2:67:8d:f4:
         4d:68:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:22 2025 by rpki-client