Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7204827e-d55a-33f1-852e-0793c59b5ff6.roa
File:                     7204827e-d55a-33f1-852e-0793c59b5ff6.roa (raw, json)
Hash identifier:          yuKEZSIB2ChEk/SRGqbI/1hdhCWQgJ4xgX6cwVHpR70=
Subject key identifier:   59:71:79:39:13:D7:47:DB:25:E8:A4:3E:83:C0:35:44:63:1E:96:D3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848028982388D8AB2618DF6B4E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7204827e-d55a-33f1-852e-0793c59b5ff6.roa
Signing time:             Tue 26 Nov 2024 17:55:34 +0000
ROA not before:           Tue 26 Nov 2024 17:55:34 +0000
ROA not after:            Mon 24 Feb 2025 17:55:34 +0000
asID:                     834
IP address blocks:        184.174.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:89:82:38:8d:8a:b2:61:8d:f6:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 26 17:55:34 2024 GMT
            Not After : Feb 24 17:55:34 2025 GMT
        Subject: CN=705ee385-c02d-4451-b05c-aa4abd5b6f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:29:a1:86:80:29:95:70:4b:fa:ed:03:cf:
                    78:b8:cd:6d:a3:a9:b6:86:91:9f:28:ac:4d:5f:4e:
                    b0:74:c6:1d:07:fa:d6:26:29:41:d7:c2:cf:04:2e:
                    9b:b7:de:60:ea:f7:80:09:d8:7f:34:e4:12:93:e4:
                    4e:3c:d3:76:ff:ff:c6:46:0d:08:3f:a9:3e:11:8e:
                    71:6b:f9:ba:ec:8a:76:f9:a9:70:aa:e8:dc:12:42:
                    d9:37:07:37:63:11:a7:55:bd:ab:28:8e:78:9b:da:
                    c8:21:80:30:bc:8e:77:36:a8:ea:ee:7b:7e:48:8a:
                    aa:b7:b7:89:b8:65:72:49:60:29:94:bd:d5:d0:8d:
                    4e:19:52:63:15:ea:3c:5b:44:50:d5:2f:5a:06:30:
                    55:a2:5d:7e:97:bf:47:30:35:e9:f3:60:d8:b1:9b:
                    95:be:08:77:78:ed:3e:52:37:69:c5:1e:5f:5a:06:
                    30:c1:c2:75:31:7e:f8:3d:a4:bf:94:ac:59:9d:9d:
                    11:d6:e7:e4:31:dc:f6:8d:0e:9f:62:14:94:d2:b6:
                    8d:36:6b:86:c5:77:8a:c0:b2:ff:0d:26:43:16:55:
                    c4:a9:8e:88:30:cb:f7:2b:98:22:29:fd:5e:9c:4d:
                    53:55:48:fd:7f:a0:c5:24:56:94:90:41:6d:35:62:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:79:39:13:D7:47:DB:25:E8:A4:3E:83:C0:35:44:63:1E:96:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7204827e-d55a-33f1-852e-0793c59b5ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:55:3a:b3:f8:71:ad:bb:47:4e:34:cb:77:f3:2a:70:84:
         97:18:95:24:eb:56:6e:c2:5d:4c:2d:48:b6:f8:b0:f0:e7:06:
         6a:f1:f1:6b:65:93:bc:c2:70:3c:b6:ad:04:0e:f9:ac:f1:51:
         87:91:5c:d4:2e:b4:c0:29:7e:e1:43:be:44:c2:a6:26:31:2b:
         48:e1:88:fc:59:4f:ae:db:b4:9b:e4:f8:89:2e:7e:80:2a:7a:
         cb:05:dc:5a:6a:12:3f:2c:40:8c:b5:1f:a3:24:82:71:da:ea:
         99:bc:28:0b:c0:45:d2:3b:e1:a5:52:3a:22:40:3a:bd:79:eb:
         aa:9f:57:5a:27:c5:6e:fe:06:ca:11:64:eb:6e:1b:99:39:44:
         9e:f9:24:8c:19:f6:aa:9a:a2:71:d9:57:5f:29:fb:7e:57:d7:
         8e:46:5e:72:5d:bf:06:54:65:5b:d7:3a:c0:fe:62:f9:d1:7b:
         76:d4:2c:8e:40:47:a5:74:a7:2f:73:80:20:5b:a0:77:a6:80:
         48:99:e7:6a:d8:ae:eb:7c:ff:e2:8f:97:49:c1:e2:56:b5:a2:
         80:84:5f:cf:52:8f:22:e2:fc:95:b2:c3:55:10:97:db:ae:4d:
         28:7c:f6:d7:4a:82:28:40:7e:45:3c:c1:1a:34:34:b5:63:c1:
         c0:11:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:55 2025 by rpki-client