Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
File:                     8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa (raw, json)
Hash identifier:          DK1whgQ/MgtoxQElDD8zd/0YLvxYBc708JvsbdSTTNk=
Subject key identifier:   D9:BD:0D:8D:3E:87:BE:F2:51:CC:83:7F:77:B9:00:A6:C8:8C:AC:6B
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285848C6E630AE9BCFC5C291DF0F50
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     2914
IP address blocks:        174.35.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:30:ae:9b:cf:c5:c2:91:df:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=c67a1575-c1ca-423c-8584-d7e591ae0432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:c2:44:04:62:e4:8f:09:25:db:d4:11:f3:
                    09:88:41:58:8f:fc:f5:bf:5c:86:b7:2b:bf:3a:bd:
                    fa:58:f9:da:ab:d7:81:2a:40:e8:f4:50:f2:eb:83:
                    0e:4b:cb:53:9b:a2:e2:86:35:8b:87:af:07:14:08:
                    83:0e:ac:8e:28:ed:7d:0c:10:fb:d6:d9:d4:06:02:
                    0f:27:e4:7d:ff:c4:29:b1:d8:cc:4b:02:e2:37:17:
                    b2:a6:f3:ee:b4:f1:ed:e8:d4:be:ed:59:f8:bf:a2:
                    4d:2f:a6:8c:69:85:8e:d7:61:6c:84:27:c7:16:73:
                    7c:b3:0b:a1:aa:ba:08:41:e6:93:d3:af:a3:9a:c8:
                    ba:4b:de:b5:1b:ee:0a:31:40:24:25:4b:6b:b1:4b:
                    9c:ca:f6:ec:34:04:85:23:94:60:1b:e5:c9:e0:f3:
                    08:e6:f5:d0:40:52:ae:d4:41:e8:c7:55:51:10:9d:
                    78:96:c0:10:2a:f4:5d:9e:c4:e8:d3:f8:1b:e7:9c:
                    19:15:91:69:14:02:c8:7c:49:80:4b:65:5a:b0:ad:
                    49:ac:75:51:4b:b6:eb:a5:cf:88:3b:a0:a4:ef:18:
                    77:61:5f:40:27:44:b4:fb:10:5d:89:46:08:e2:1f:
                    44:1e:d6:fc:e2:af:47:3d:ad:54:b0:44:8d:2b:14:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:0D:8D:3E:87:BE:F2:51:CC:83:7F:77:B9:00:A6:C8:8C:AC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:22:30:25:80:41:2c:66:d3:78:96:87:20:b0:f3:c8:ad:2b:
         b7:1f:53:33:29:66:ea:0c:bf:6a:3f:c8:56:82:b5:02:a5:3c:
         d8:0a:9e:40:81:62:91:fc:f3:11:ca:6e:15:dc:c7:f1:32:dc:
         37:0b:95:0f:86:a9:f5:ef:dd:74:88:c5:e2:a8:ea:9b:dc:ac:
         66:9b:ef:bc:58:f8:d3:62:73:7d:08:7d:3c:aa:a6:c0:ff:0d:
         da:9a:ea:2c:c0:c1:d1:56:53:c1:47:4d:b9:7a:58:8b:10:41:
         ec:c4:1c:19:37:ed:b4:8a:ec:56:38:ab:a9:ed:db:40:e7:ce:
         04:70:b2:49:ee:3f:ce:69:fe:0f:f8:47:b9:c1:f3:3a:54:bb:
         3a:db:5e:70:a8:e7:5e:24:6b:73:40:e2:bf:4d:b3:16:ea:48:
         a3:e1:8c:ed:33:8c:ed:16:1a:b9:ad:55:cd:8b:4c:18:9e:03:
         11:b4:d1:be:8a:20:0f:15:90:c1:17:cd:f1:41:0b:a0:7d:11:
         7d:41:fa:26:48:01:2b:d5:2d:ae:b4:18:bd:a2:c6:47:f7:c5:
         b8:ab:57:34:66:1c:dd:fe:12:42:8f:0c:08:7d:3e:b3:17:0a:
         7e:84:35:60:a2:f9:0d:f0:e9:ec:15:05:59:05:88:d9:25:f8:
         75:e4:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:50 2025 by rpki-client