Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bd4c6a3f-b079-3696-a8fb-9b90db44566c.roa
File:                     bd4c6a3f-b079-3696-a8fb-9b90db44566c.roa (raw, json)
Hash identifier:          9oQExxiix4/sQUyxAUol1TOkXWgWLWlbWVUkE/+JjT8=
Subject key identifier:   50:44:02:9E:F7:65:D5:63:E7:33:F7:DF:88:64:BC:5E:F5:83:18:30
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15E89B23AE5DC78FF3980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bd4c6a3f-b079-3696-a8fb-9b90db44566c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     399807
IP address blocks:        173.197.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:5e:89:b2:3a:e5:dc:78:ff:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6f0f1b0a-b3e6-48d3-99e0-e46e4bae48da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:6e:b1:ab:08:bf:3d:98:9e:52:b7:94:5e:
                    5a:b6:42:1e:24:ba:e3:cb:1f:70:4e:e9:04:87:33:
                    c0:32:eb:55:72:9f:bc:a0:c1:99:a8:da:5f:c9:79:
                    2a:c3:5f:51:58:e2:ae:be:00:78:e3:ff:35:85:ca:
                    1c:b5:28:d2:22:94:bc:31:61:48:2a:72:96:69:3f:
                    b9:56:3d:f7:ca:cc:df:af:d3:5d:8f:5a:cd:cc:a7:
                    65:e5:65:ed:4c:d4:24:f1:a2:32:8b:65:f5:e9:8a:
                    0a:5e:e9:b4:c8:4f:2d:35:41:ec:e0:a3:7d:8e:75:
                    65:21:a8:5d:e2:0f:62:6a:f5:e4:e6:3a:9d:fa:c5:
                    d8:de:c3:d7:24:8b:86:38:e7:e0:44:be:94:92:0c:
                    d0:c1:d7:c0:f0:58:ef:b6:3c:68:2d:63:67:07:35:
                    f6:90:16:f2:65:2e:84:3b:e3:ad:b7:a2:4b:ba:9d:
                    1a:e2:d4:c7:9d:a4:69:40:ce:b7:54:5e:34:f8:6c:
                    6e:34:13:d5:1a:19:f3:56:a3:5d:0f:bb:05:96:f5:
                    b1:43:23:4c:5a:d2:ad:49:1a:71:68:34:4a:4c:39:
                    46:91:d6:bb:0d:52:8d:54:11:9d:52:e4:3b:60:e4:
                    da:4b:5f:4c:5b:51:fb:62:99:ee:84:95:7c:19:43:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:44:02:9E:F7:65:D5:63:E7:33:F7:DF:88:64:BC:5E:F5:83:18:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bd4c6a3f-b079-3696-a8fb-9b90db44566c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.197.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c6:1f:22:16:f9:7a:e3:f9:e4:f5:4f:00:00:ad:f9:c6:2f:
         46:b9:ae:a6:cd:23:6c:90:75:7e:1e:88:3e:3c:01:61:8a:0e:
         a6:ad:08:55:59:67:00:e4:17:49:9d:b9:5e:dc:1b:77:e2:ae:
         94:38:e3:31:f2:6f:af:d4:1a:21:11:bf:96:9e:58:1c:4c:31:
         7b:72:a7:30:f3:16:83:d6:15:9f:6d:32:2d:c1:8c:ed:83:35:
         3b:99:b4:3d:63:bc:df:e5:2a:42:7b:57:44:d2:0a:ed:b1:97:
         c5:0e:fc:42:0c:5e:54:17:70:1f:1a:d7:e9:83:14:c0:56:b7:
         0d:05:9a:21:38:78:8e:b7:62:22:d0:c6:7f:d7:28:f5:8a:e2:
         19:af:58:0c:1b:5f:0e:35:9a:97:d6:05:b4:e0:7c:f1:79:76:
         9a:61:68:39:4e:b1:a0:b8:3c:0b:56:c5:cf:1e:9a:ba:76:36:
         bd:91:c5:65:41:eb:7b:a1:41:aa:2e:1b:cf:ec:11:4f:c9:42:
         88:b3:17:46:25:80:53:b5:c2:a2:d3:19:e8:1f:f5:f2:39:2b:
         e3:22:56:f9:e5:48:ac:f5:e4:f3:04:b6:ef:51:1d:46:84:35:
         0d:3e:e8:ac:0a:d2:55:13:77:c2:c2:e0:e4:da:9c:cd:d7:2f:
         d0:58:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:57 2025 by rpki-client