Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29310405-b409-345b-bb0c-ffcf3f40f611.roa
File:                     29310405-b409-345b-bb0c-ffcf3f40f611.roa (raw, json)
Hash identifier:          FbITeNgGGMB60nXuWGBfVQnQvqTWGr5XZwIWpsq6crc=
Subject key identifier:   0B:75:E7:00:3B:E2:AA:9E:87:AE:3A:7A:BC:1E:B3:03:62:50:6E:7C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006640DEE1AE8B65F90F900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29310405-b409-345b-bb0c-ffcf3f40f611.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        174.135.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:64:0d:ee:1a:e8:b6:5f:90:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f203b96a-a2ea-40ed-aa01-ba4e441675eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:00:18:e4:95:02:6e:64:82:a3:de:75:31:
                    10:cf:a5:b6:13:44:6a:28:73:12:1f:0d:00:16:46:
                    99:a2:4f:c6:f5:dc:e5:23:43:7e:b6:73:16:54:e1:
                    da:62:5d:25:bd:f7:a0:89:ca:38:36:46:57:d1:1e:
                    48:1d:0e:8f:29:f2:9b:56:00:20:54:5e:cf:02:76:
                    25:14:8a:25:8c:0c:df:f3:09:1f:68:41:f6:92:6c:
                    c1:ce:06:76:13:4a:61:65:3c:38:25:67:c1:1b:fe:
                    27:fc:a5:96:46:44:2d:19:0d:59:e7:13:3f:b3:0c:
                    9c:31:58:77:0a:81:44:f3:be:fa:b9:c9:af:b3:ca:
                    96:24:a2:6a:61:ba:39:df:66:26:55:54:60:72:96:
                    66:d1:f8:36:68:92:2f:45:19:94:ff:16:db:49:33:
                    12:ad:29:84:b7:78:51:34:55:99:69:b6:45:b5:c8:
                    bc:e5:c8:f2:e5:40:b6:e6:53:6c:1b:21:7d:57:9f:
                    35:e3:9c:0e:c1:27:23:03:9c:66:cf:49:4a:db:e3:
                    8e:85:12:5a:93:1d:ba:67:26:80:e7:2e:0c:94:36:
                    82:09:20:8d:a4:3f:c6:69:6d:e5:c5:01:dd:48:08:
                    45:09:0f:f6:69:6f:3e:d2:b3:ba:17:20:5b:5c:15:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:E7:00:3B:E2:AA:9E:87:AE:3A:7A:BC:1E:B3:03:62:50:6E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29310405-b409-345b-bb0c-ffcf3f40f611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.135.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:ef:43:6c:56:b7:1f:ae:a9:6a:73:76:74:12:21:9f:65:
         f2:60:65:f4:08:4e:fd:ee:96:20:a2:99:09:c6:39:14:f7:79:
         cb:ee:fc:8a:0a:9c:e8:e3:41:90:26:95:9a:05:75:38:0e:28:
         d6:8d:db:0a:f9:d9:04:46:b6:a7:a9:4e:01:c6:28:5b:e7:4a:
         b7:42:70:6a:85:8e:04:18:e1:e0:b4:77:35:62:49:9c:71:a1:
         db:de:3f:0b:fc:c6:03:db:ec:67:e7:ee:b8:c3:35:41:b1:a3:
         9e:77:80:29:21:20:c6:5b:05:c7:db:c2:af:04:1c:85:d8:1b:
         95:fe:89:a3:a7:bd:9e:f2:45:89:f9:46:bb:d2:95:1e:bf:b4:
         86:20:df:21:7b:94:e2:a4:c2:b0:ab:25:e1:39:62:da:50:92:
         df:21:a8:05:65:18:ff:90:b1:47:f7:c9:fb:87:57:4f:b2:9f:
         01:0c:55:b8:44:e2:9b:29:42:49:92:2c:71:15:f7:72:91:5d:
         9a:28:f6:1a:9d:5e:a6:92:ac:d7:34:c8:09:3e:0b:db:92:d1:
         63:14:c6:64:e1:7a:e3:21:a4:3b:4a:0f:88:ca:f5:d1:6b:a9:
         e4:f7:b3:b0:79:73:62:8f:7a:80:6d:6e:be:67:bf:1d:dd:fd:
         3d:b4:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:43 2025 by rpki-client