Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
File:                     eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa (raw, json)
Hash identifier:          nhI2X0l2cp/UsW6I9HuTtlNrXEeBUeJwExnGTND30z4=
Subject key identifier:   0A:73:E6:9C:84:17:FA:FB:9E:E3:9D:67:46:02:F5:7B:80:71:84:81
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848E16BD259F0696853A79D3380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     834
IP address blocks:        173.214.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d2:59:f0:69:68:53:a7:9d:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=bf99dd30-d68c-40a9-aefc-38287a87d60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:7e:24:86:44:ae:2b:19:40:5c:47:90:74:
                    1b:03:62:c4:dc:c7:37:11:0b:5f:84:d9:6a:c4:1f:
                    10:97:6e:f9:cd:54:01:ab:af:b6:3f:a6:59:52:01:
                    1a:95:c9:5a:8d:60:05:89:78:5a:dc:f8:43:fd:af:
                    56:ca:6f:cf:d6:6c:f9:45:9e:45:a0:c9:37:93:12:
                    44:ab:74:4b:9c:d8:ba:5f:17:c6:39:e9:04:92:86:
                    90:a0:d9:9f:de:9d:6e:8f:ba:66:98:34:76:71:e2:
                    2f:e8:96:fa:25:ba:3d:c2:55:d0:3b:c8:21:1d:e7:
                    f0:1b:e5:31:21:c6:b8:5c:85:13:b2:b0:d6:55:fe:
                    67:b2:a5:80:4f:d1:6d:65:e5:4d:43:84:57:e8:13:
                    4a:bb:2c:de:ba:5e:f3:53:29:4a:4b:a6:ad:6e:64:
                    6e:04:c2:60:84:50:e3:00:d6:9c:39:b4:2e:5c:6b:
                    3e:53:6f:a5:4e:6a:7f:c8:f9:73:f6:10:af:1b:3e:
                    ed:59:0b:94:23:09:9c:58:36:62:05:4e:3f:fe:1b:
                    5b:89:94:20:a9:9c:e0:22:1e:28:8c:70:b6:32:90:
                    e3:c4:1f:51:00:3e:e3:44:2d:4a:c8:6a:3c:c7:35:
                    c1:96:d3:bf:2e:da:15:98:50:e0:27:58:9a:43:df:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:E6:9C:84:17:FA:FB:9E:E3:9D:67:46:02:F5:7B:80:71:84:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:96:13:dc:ea:68:ad:eb:cb:72:b3:cc:ff:2b:57:61:24:df:
         01:47:0a:49:41:11:0a:76:44:12:a7:b3:52:70:85:18:9e:87:
         d3:13:76:5f:33:bd:91:fd:da:60:b4:80:a2:24:bd:e2:82:3c:
         c8:e8:be:69:ad:ba:80:0f:e0:e3:bc:3e:1c:ef:0b:04:dc:42:
         db:b9:d4:14:5d:fd:e8:e9:1c:72:a5:99:02:c2:3b:7b:7b:28:
         13:48:fa:fa:ee:4b:84:94:7d:83:31:58:7e:d4:0e:f1:20:cd:
         8d:97:a6:fa:ed:91:92:1d:fa:38:e0:cb:7d:8f:23:84:d0:0f:
         a9:74:57:d4:0e:3e:69:54:5e:4a:57:de:a7:e7:5e:ad:1f:ae:
         0b:2d:c0:a7:3c:f1:32:9a:3c:b6:20:b4:10:93:4e:a9:06:05:
         0d:48:ab:da:c9:50:80:e5:33:26:05:bb:77:9e:4e:9b:85:b1:
         e1:b9:92:3b:4e:65:27:49:bf:25:9e:76:2a:32:6d:29:e7:1b:
         7d:9c:e5:37:15:c6:68:1a:32:00:f7:84:20:1f:6e:cf:68:e1:
         9e:75:2a:2d:97:a2:63:22:b7:57:1a:cd:be:b1:18:a3:98:81:
         c7:17:ce:fe:df:43:29:1a:64:a0:19:98:6a:5a:7e:1b:84:e9:
         83:b1:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:19 2025 by rpki-client