Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa
File:                     85df388a-c8da-3e19-af2a-f326a918b3bb.roa (raw, json)
Hash identifier:          Eoo9CAtjVtI6nUhLOxMYqKFx8zBDglZpuOVpXs9KY2w=
Subject key identifier:   13:5F:C8:9B:7F:89:20:A4:0F:BB:D0:10:D2:5C:73:1E:A6:C5:C4:2E
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F43285848938D23A5E83BCDB1A711BAC4
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa
Signing time:             Fri 17 Jan 2025 16:35:06 +0000
ROA not before:           Fri 17 Jan 2025 16:35:06 +0000
ROA not after:            Thu 17 Apr 2025 15:35:06 +0000
asID:                     6079
IP address blocks:        208.74.168.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:8d:23:a5:e8:3b:cd:b1:a7:11:ba:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Jan 17 16:35:06 2025 GMT
            Not After : Apr 17 15:35:06 2025 GMT
        Subject: CN=610078ed-fd0a-4ca0-ab2d-c46d6a884d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:ec:f8:ad:e6:17:c1:cb:78:bb:47:ee:fc:
                    c0:ca:f4:8c:c0:92:01:22:1d:f3:38:ca:62:bd:c3:
                    55:ca:db:df:95:3b:6c:d7:61:78:11:32:f9:27:72:
                    88:22:27:84:a3:df:fa:f5:d5:a8:cd:08:78:79:2d:
                    05:a3:b5:50:51:4f:3f:b4:15:0c:04:bd:79:06:b8:
                    1e:e2:eb:6f:11:8b:29:38:a4:f1:d0:51:81:3d:ff:
                    63:13:34:28:bd:61:5c:48:2a:00:6c:8e:0c:ec:b7:
                    1e:00:86:fc:cf:3c:90:da:fa:cc:d6:18:00:21:a4:
                    5a:55:8c:c1:cb:1e:d4:32:e6:17:e0:4e:11:00:cf:
                    0c:fd:ff:72:69:fb:cc:91:2e:ab:c8:35:36:41:9d:
                    df:a4:88:8b:f7:eb:1f:5c:22:95:5c:63:a6:9a:6b:
                    8f:c6:60:99:9a:d2:54:eb:f8:2c:cb:84:e8:32:bc:
                    85:3e:31:8b:2a:2c:44:1d:37:e1:60:05:e3:3d:41:
                    ef:0b:1f:8a:2a:57:24:f1:ff:ed:0d:e8:5d:d2:71:
                    db:2e:54:5e:5b:b0:24:88:55:19:12:9e:d6:ba:99:
                    24:f5:e4:74:1a:66:0d:26:9e:00:cd:4d:16:37:5d:
                    01:29:54:d2:99:18:7c:e0:37:08:10:01:70:24:d8:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:C8:9B:7F:89:20:A4:0F:BB:D0:10:D2:5C:73:1E:A6:C5:C4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:53:8f:d4:11:23:df:4a:71:8a:b8:77:30:20:89:60:03:
         5a:c1:a5:ba:a7:bb:e6:9d:18:45:de:f9:30:dd:48:19:75:37:
         f5:45:bf:56:8b:76:70:94:6a:a3:83:43:76:7f:e8:e6:55:75:
         e9:c2:1f:70:05:07:b9:e5:d8:3e:10:7f:d0:87:e7:12:b4:6f:
         e7:3b:1e:c1:eb:ce:5d:af:79:a5:67:47:df:f7:0a:df:30:31:
         ac:36:1d:72:41:6a:88:de:e8:5b:c0:69:a9:be:44:1e:82:01:
         7b:54:13:d8:63:ee:d0:29:be:ef:59:36:9e:1b:97:c2:75:ec:
         4d:8f:31:a3:ce:a6:1f:7e:d2:6d:b1:68:8c:5b:da:2f:0c:b5:
         07:9a:9c:cf:93:8f:c9:93:20:63:bc:82:bf:1f:57:03:1d:ee:
         b3:5d:be:07:92:cb:22:f7:20:52:25:67:ad:0e:d7:06:b2:7b:
         4c:1a:60:59:3b:97:13:81:96:e5:f4:6b:70:99:52:0e:eb:14:
         a0:96:93:c5:49:7e:11:95:dd:80:1c:d6:bf:cd:e5:9b:c1:e5:
         fb:ea:f9:e3:29:b5:63:b4:f4:80:a1:e8:62:88:4d:e6:e3:36:
         9e:77:d7:b0:6f:d1:8e:4e:22:00:3a:f1:e3:92:85:80:d2:d8:
         f9:c7:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:41 2025 by rpki-client