Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/61728861-6ac9-3771-9842-d618d9a7a6fa.roa
File:                     61728861-6ac9-3771-9842-d618d9a7a6fa.roa (raw, json)
Hash identifier:          G8doHfnC2o3nczBJngs57uqpJRUR2/sEizTYuR1/oL4=
Subject key identifier:   42:4E:B3:1A:7F:E9:D3:6C:74:83:4A:8B:D0:DA:8E:38:8F:A6:22:4D
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285848B35B6A40766D2C8295822907
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/61728861-6ac9-3771-9842-d618d9a7a6fa.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     835
IP address blocks:        207.174.105.0/24 maxlen: 24
                          2602:fd50:2::/48 maxlen: 48
                          2602:fd50:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6a:40:76:6d:2c:82:95:82:29:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=c7f9a8dc-cfc3-4a80-a461-e92143383e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:54:0e:fd:27:4a:25:3d:55:e3:6a:2b:0a:
                    50:a4:64:69:1f:ea:17:0d:7d:f4:58:c9:f3:06:5d:
                    85:61:c2:83:1d:e3:92:d6:31:d6:1a:45:f2:f3:ba:
                    24:4a:aa:c2:f3:94:04:89:45:07:af:cf:0c:5d:2f:
                    8f:65:fd:cc:ce:c0:75:59:3a:dc:1c:1e:79:04:44:
                    fb:a7:45:ee:f1:34:03:2b:eb:82:ec:3a:39:69:eb:
                    82:f7:8f:ac:c7:12:b7:64:29:ea:43:5b:1c:21:93:
                    15:29:bb:1e:d1:f5:3e:c8:6d:aa:07:67:e4:c7:8a:
                    3f:78:44:26:cb:f2:74:c9:cf:43:fc:98:ac:03:b4:
                    4b:88:d4:74:3a:43:3d:60:1c:dc:38:ab:c9:56:45:
                    f2:bc:1d:74:19:59:18:95:a1:9e:18:07:2f:f3:5c:
                    7c:03:9c:90:59:d0:85:76:27:c0:85:ed:b0:70:c4:
                    b0:c4:cd:e9:38:1d:0c:a4:5d:90:d4:ee:7c:83:83:
                    aa:78:7a:93:9d:95:45:47:2c:3a:c7:f1:f5:44:83:
                    b6:fc:e9:72:5a:cb:a6:33:c9:1a:5c:ae:86:46:e0:
                    f8:97:66:9f:63:cf:d3:48:0a:22:7e:cc:f5:87:53:
                    19:13:e6:31:0e:f1:ea:57:7a:d0:10:86:27:fe:6a:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4E:B3:1A:7F:E9:D3:6C:74:83:4A:8B:D0:DA:8E:38:8F:A6:22:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/61728861-6ac9-3771-9842-d618d9a7a6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.105.0/24
                IPv6:
                  2602:fd50:2::/48
                  2602:fd50:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:87:a1:55:ad:a6:98:38:a4:ad:0d:6e:ba:43:02:fe:8d:cc:
         8f:b3:24:5e:eb:38:44:ab:31:61:7b:61:30:87:13:2e:04:d8:
         20:35:d5:74:9f:9d:0f:a6:6e:e7:0e:3f:6e:ff:56:76:73:b6:
         95:be:cc:11:0d:d7:15:29:8c:c6:a3:c0:e3:d0:49:65:db:80:
         e2:7b:d0:49:b3:19:37:d0:57:25:43:e6:b3:c7:3c:9b:16:5b:
         9d:f3:14:78:ea:76:f9:96:d5:3a:f8:b3:33:6b:da:df:25:fb:
         a7:13:34:42:24:5a:9d:e4:c7:00:c8:ab:1a:33:71:8e:64:7d:
         9e:e6:0c:47:86:0b:dd:6f:5d:6b:30:28:e6:a7:e3:22:4b:be:
         88:64:fa:3b:de:0b:a8:a0:7b:af:91:5b:14:ff:cf:15:6f:64:
         3b:3b:99:24:22:e5:d7:ce:23:d8:14:da:8a:3a:c9:29:89:e6:
         e4:f6:04:e0:34:20:20:e8:d4:9f:5f:d5:e1:cf:1f:9e:50:c1:
         7d:0c:e1:9d:aa:53:58:12:b6:ae:a2:e4:79:3f:35:2c:80:83:
         57:2c:76:7c:fc:22:21:06:b0:91:01:77:5c:cf:ff:53:f4:80:
         9d:d4:ca:d8:a3:50:53:ed:e4:80:fd:e8:b6:9f:b7:b6:2d:d5:
         6e:cf:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:20 2025 by rpki-client