Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e6a9115c-d778-34d3-aee7-3d350b032dcd.roa
File:                     e6a9115c-d778-34d3-aee7-3d350b032dcd.roa (raw, json)
Hash identifier:          ACKCiCwPSjp5IpTh3KY+Sb9qFzHhImtTXZIQPSIQbuY=
Subject key identifier:   19:61:03:22:7B:27:ED:61:63:F5:47:76:35:E4:F7:B2:F2:05:ED:64
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F43285844246945C63E9F4F11149F9B60
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e6a9115c-d778-34d3-aee7-3d350b032dcd.roa
Signing time:             Fri 08 Dec 2023 02:00:16 +0000
ROA not before:           Fri 08 Dec 2023 02:00:16 +0000
ROA not after:            Thu 07 Mar 2024 02:00:16 +0000
asID:                     55286
IP address blocks:        172.245.164.0/24 maxlen: 24
                          172.245.188.0/24 maxlen: 24
                          172.245.0.0/22 maxlen: 24
                          172.245.192.0/24 maxlen: 24
                          172.245.166.0/24 maxlen: 24
                          172.245.48.0/23 maxlen: 24
                          172.245.160.0/24 maxlen: 24
                          172.245.200.0/21 maxlen: 24
                          172.245.198.0/24 maxlen: 24
                          172.245.175.0/24 maxlen: 24
                          172.245.165.0/24 maxlen: 24
                          172.245.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:69:45:c6:3e:9f:4f:11:14:9f:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Dec  8 02:00:16 2023 GMT
            Not After : Mar  7 02:00:16 2024 GMT
        Subject: CN=0d328010-cdc2-4a5f-a0a9-d541acd048a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:70:a3:ed:ee:a1:35:b0:fb:66:df:90:28:
                    23:9f:ae:c4:69:e5:44:89:0e:75:ed:94:be:6c:f5:
                    b8:28:c5:bf:bb:f2:4a:e9:a0:a2:5b:21:c4:b9:21:
                    f1:ea:3e:90:90:f8:2d:5f:07:7d:a0:84:87:b7:d8:
                    e8:b8:bd:88:8d:cb:e3:6f:b0:95:41:ce:96:03:36:
                    7d:02:60:65:13:e8:9b:30:7f:7b:bf:8a:3e:c5:34:
                    d8:bd:1a:54:ec:21:2d:59:ed:25:bc:3d:be:f7:01:
                    13:d8:e9:1a:8d:c5:27:61:72:e5:b9:01:1b:5a:d0:
                    d4:df:da:d4:b4:99:77:85:39:d8:b6:e8:f3:24:54:
                    95:ff:31:03:23:d2:1c:6f:af:5d:3c:3f:e8:72:75:
                    d2:d3:1e:43:b0:0c:79:9b:dc:18:e4:a4:68:61:51:
                    e8:4b:3f:b1:50:63:11:6e:90:8b:45:62:30:ce:d8:
                    e7:3c:ba:6a:ee:43:ff:7a:b4:d8:21:a0:b4:69:f4:
                    68:1a:62:d2:ed:9f:58:e0:d5:c7:2b:f2:84:2f:5f:
                    3c:cd:82:61:41:23:65:50:88:4f:c8:73:42:7c:2f:
                    39:ca:4c:85:ee:f2:44:d0:1f:7c:0b:b5:7b:4e:bd:
                    f2:c3:3d:42:48:be:9f:01:37:ca:42:bd:2f:dc:4e:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:61:03:22:7B:27:ED:61:63:F5:47:76:35:E4:F7:B2:F2:05:ED:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e6a9115c-d778-34d3-aee7-3d350b032dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.0.0/22
                  172.245.48.0/23
                  172.245.160.0/24
                  172.245.164.0-172.245.166.255
                  172.245.172.0/24
                  172.245.175.0/24
                  172.245.188.0/24
                  172.245.192.0/24
                  172.245.198.0/24
                  172.245.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ef:55:24:a3:0c:5f:bc:86:a3:aa:aa:66:fa:ee:53:3c:fe:
         ec:fe:8f:e5:df:33:0f:d5:77:7a:50:2a:9c:df:b8:91:1e:80:
         5d:4d:33:c5:18:67:dd:69:2b:66:47:c8:1f:c0:98:28:46:60:
         83:9f:9e:cd:ad:6b:07:60:de:70:fa:0f:82:3c:7e:92:69:18:
         9b:84:10:55:c6:9e:74:a7:5d:22:8c:34:e3:30:2b:47:4a:a0:
         45:2c:16:95:6a:8e:2e:93:ca:2a:08:96:3e:33:4f:97:ef:1a:
         e5:7e:90:be:9d:e3:cd:4f:bb:df:11:79:bd:ea:73:89:f4:97:
         4e:6f:bc:ec:14:33:aa:76:ed:05:1c:32:3c:4a:56:9f:ed:a0:
         7a:71:4e:1b:54:e0:3b:f1:15:a9:5b:cf:02:fe:bd:cf:4f:80:
         7e:71:0c:c8:f0:e5:aa:c8:23:5c:84:9f:98:b4:d6:8e:45:96:
         7e:80:87:ab:06:98:42:69:f8:3a:8e:8f:c3:70:4c:6a:37:13:
         47:89:ef:51:ae:66:4a:d0:b1:97:82:7c:27:7b:c3:51:d4:0e:
         5c:0b:54:ba:b8:87:4d:e7:74:be:7d:3a:06:6a:37:6c:a7:1c:
         ea:4c:dd:0b:b2:6f:3f:17:16:bd:23:71:f3:62:f0:4b:24:2d:
         d5:3e:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:16 2025 by rpki-client