Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0e37371d-5786-3f4e-9d0d-d27f407b91f6.roa
File:                     0e37371d-5786-3f4e-9d0d-d27f407b91f6.roa (raw, json)
Hash identifier:          6QaMqB8gaE+1NZ9EHPDCSZzjtL2+w6H7+Zr8SaWu+Yk=
Subject key identifier:   90:FB:1B:37:17:AF:71:7C:0D:EE:01:CB:19:39:A9:49:15:E6:50:13
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F432858442469417090134FCE944EF240
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0e37371d-5786-3f4e-9d0d-d27f407b91f6.roa
Signing time:             Fri 08 Dec 2023 02:00:16 +0000
ROA not before:           Fri 08 Dec 2023 02:00:16 +0000
ROA not after:            Thu 07 Mar 2024 02:00:16 +0000
asID:                     20278
IP address blocks:        107.174.134.0/24 maxlen: 24
                          107.174.99.0/24 maxlen: 24
                          107.174.168.0/24 maxlen: 24
                          107.174.135.0/24 maxlen: 24
                          107.174.75.0/24 maxlen: 24
                          107.174.74.0/24 maxlen: 24
                          107.174.98.0/24 maxlen: 24
                          107.174.77.0/24 maxlen: 24
                          107.174.31.0/24 maxlen: 24
                          107.174.23.0/24 maxlen: 24
                          107.174.21.0/24 maxlen: 24
                          107.174.169.0/24 maxlen: 24
                          107.174.16.0/24 maxlen: 24
                          107.174.19.0/24 maxlen: 24
                          107.174.17.0/24 maxlen: 24
                          107.174.29.0/24 maxlen: 24
                          107.174.22.0/24 maxlen: 24
                          107.174.73.0/24 maxlen: 24
                          107.174.72.0/24 maxlen: 24
                          107.174.20.0/24 maxlen: 24
                          107.174.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:69:41:70:90:13:4f:ce:94:4e:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Dec  8 02:00:16 2023 GMT
            Not After : Mar  7 02:00:16 2024 GMT
        Subject: CN=82633024-8560-4eed-bd25-12241b94ab68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:55:84:b1:fa:a0:b6:f8:ee:69:ec:48:d5:
                    79:3e:c7:b3:3c:41:de:77:40:f5:82:f1:86:8c:80:
                    2e:8b:2c:f0:d8:8f:ad:57:02:5d:3c:b8:d6:2d:a8:
                    75:cf:e1:72:fb:de:6e:f4:64:8e:23:8b:4c:07:52:
                    a0:58:76:9a:32:c9:78:2e:37:36:30:64:33:51:b8:
                    5d:9a:3f:c6:17:35:e4:6f:22:6e:c6:9c:42:dc:b1:
                    d2:c9:b5:64:40:52:77:8f:7f:42:01:61:94:6a:91:
                    b3:15:18:15:a7:79:5d:07:3a:7a:5e:68:b5:12:b0:
                    70:fe:ab:fd:8e:4f:e2:95:9c:da:ff:7c:dd:71:1c:
                    bf:c8:01:64:ac:98:c2:c3:bd:60:36:39:cb:12:ce:
                    74:06:f2:b9:55:a9:0a:0c:18:29:df:ea:02:67:48:
                    ee:fb:05:67:86:55:4f:07:30:4a:c1:14:71:23:c4:
                    ed:c5:ce:8a:15:1a:48:c2:38:a6:88:7a:96:26:4e:
                    2d:2c:40:20:42:58:ab:ec:be:b1:47:b4:77:6e:a1:
                    7d:08:e5:41:f8:29:50:30:ad:3b:dd:49:18:e6:cf:
                    f3:3a:7d:7e:4c:d8:82:ed:ac:07:4d:bc:62:fa:c5:
                    e8:af:dd:5f:8d:51:77:ea:f3:15:41:98:a2:0d:94:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FB:1B:37:17:AF:71:7C:0D:EE:01:CB:19:39:A9:49:15:E6:50:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0e37371d-5786-3f4e-9d0d-d27f407b91f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.174.16.0/21
                  107.174.29.0/24
                  107.174.31.0/24
                  107.174.72.0/22
                  107.174.77.0/24
                  107.174.98.0/23
                  107.174.134.0/23
                  107.174.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:76:5f:1d:f6:f7:54:1c:5e:27:4d:dd:26:f4:03:db:c4:
         38:07:0f:e8:9f:fc:83:e1:90:85:b2:43:40:c4:cb:f5:af:e1:
         77:ca:60:98:5f:fd:02:3b:a1:39:1f:84:a9:c3:a9:95:8d:3d:
         8f:3e:78:9c:f7:de:7f:84:44:b0:01:91:bf:d1:fd:e1:f2:e5:
         6c:6a:72:e7:7e:08:9f:78:c3:04:ee:49:e2:a6:cc:09:48:d6:
         0d:92:36:02:40:de:4e:6e:ea:31:51:0c:03:a0:cf:f9:0e:8d:
         0f:b3:b5:07:69:55:4b:9f:71:5a:49:20:af:11:1c:d4:2f:6e:
         cb:dd:64:f3:9d:98:8c:f6:12:bb:ac:d3:88:28:cb:cb:80:24:
         86:c3:c5:63:a4:49:9f:cb:84:63:d0:89:e2:bf:9e:a8:4d:b1:
         d7:a3:c2:db:3a:55:85:08:7e:c8:b7:f8:bb:1a:de:02:3f:34:
         be:d3:04:97:2a:ad:e7:b6:3c:25:9a:34:18:2b:bb:0f:12:41:
         9b:85:2b:0e:97:cb:10:e1:2d:ef:26:cc:6e:9a:83:59:6d:49:
         93:06:72:52:8e:20:4a:6c:2a:d2:20:ac:1e:99:9f:63:87:34:
         6f:95:e6:09:6c:55:df:d1:90:21:cb:9f:a0:04:4e:08:43:2a:
         26:27:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:12 2024 by rpki-client on console-ams.rpki-client.org