Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/784ed6f0-a460-3ab3-bc74-dbf442880523.roa
File:                     784ed6f0-a460-3ab3-bc74-dbf442880523.roa (raw, json)
Hash identifier:          jFt13g9Zd0EE3kDf1TN0GrliMUPCbAhiSkKaRik43Bg=
Subject key identifier:   D4:6A:44:90:0E:90:8B:EA:E3:48:91:64:E0:46:45:9C:CB:34:51:8F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584883E5C88FF9C1E52DDD8A5580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/784ed6f0-a460-3ab3-bc74-dbf442880523.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     3360
IP address blocks:        170.30.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:c8:8f:f9:c1:e5:2d:dd:8a:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=d16e0d1b-32fb-4937-a6b2-4531fffa420f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:92:f4:c7:5e:a6:2a:90:71:90:78:a9:58:
                    81:60:ac:f5:4e:1a:51:03:20:ce:32:a7:e6:a6:60:
                    a9:1f:fe:b7:ed:73:bd:8a:ab:d6:89:7a:15:b2:40:
                    33:b4:af:6e:d8:0c:76:76:c3:2e:13:d0:4b:e9:58:
                    ef:ac:07:7a:e0:eb:a6:01:35:7f:2a:c2:b1:88:eb:
                    2a:f4:2c:54:cd:ef:26:92:2e:7f:d5:cd:32:75:7a:
                    f6:a2:bb:63:99:cb:1b:f2:36:9a:bc:db:83:ce:55:
                    4a:26:43:aa:0b:74:3c:14:20:80:7f:17:b7:af:68:
                    d9:62:cc:ed:a2:77:36:d3:93:75:16:5d:7d:0f:9a:
                    31:e7:6e:d0:fd:bf:37:ff:91:81:e2:d9:f0:9b:fe:
                    47:10:12:0c:0d:7d:10:ed:00:19:b5:2a:c7:60:de:
                    75:13:4b:94:14:12:a3:08:e2:dc:58:a3:14:c8:32:
                    21:33:9e:73:6f:c3:50:e3:ae:07:cc:bc:59:37:b6:
                    53:8f:6e:bf:75:d2:d0:96:ac:31:21:0e:33:4f:7c:
                    91:1d:05:b2:3b:85:da:60:49:37:80:9c:c6:66:2e:
                    f1:17:aa:66:49:0e:2f:e9:ef:a9:81:fc:42:29:0d:
                    84:f5:49:f7:d7:b7:24:08:5a:a3:03:21:3c:76:11:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:44:90:0E:90:8B:EA:E3:48:91:64:E0:46:45:9C:CB:34:51:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/784ed6f0-a460-3ab3-bc74-dbf442880523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:7b:27:92:bb:a9:9b:ef:10:80:71:0d:e2:2c:9e:a3:7c:
         59:9d:98:6a:08:15:4a:55:67:e2:37:28:be:51:87:1e:aa:c9:
         e2:14:51:b6:36:f0:0d:6e:0c:a6:c2:02:0e:b6:dc:07:32:df:
         a7:ae:e2:ab:05:81:49:4c:79:60:21:c9:89:c5:1f:8b:70:32:
         19:63:17:72:72:64:1e:0c:4b:76:d9:6f:4d:db:08:98:6b:bf:
         25:83:7d:61:be:56:d8:16:45:97:7e:43:59:28:a0:cc:e2:97:
         be:b8:0c:ad:13:ec:e7:a3:2b:0c:c1:5e:ce:95:a6:8f:2f:83:
         ad:18:5e:24:35:03:22:09:2a:ca:91:27:c6:b7:79:e3:3b:16:
         41:03:b8:11:17:77:18:4b:7c:ba:fe:34:47:d2:99:04:4d:44:
         6a:76:f9:b2:99:ba:86:07:08:a4:31:a8:a6:45:3d:59:23:01:
         97:d2:9c:db:0a:b7:df:d7:27:b9:4c:35:ba:d3:cb:74:ce:ed:
         51:a7:44:b4:aa:7a:9a:8f:fa:32:0b:13:34:01:56:a1:f3:70:
         28:34:51:53:cf:c0:6c:c7:20:3c:be:a0:34:32:6c:03:84:1a:
         7c:d3:05:8c:0f:68:f2:a8:4f:16:3a:c0:8d:a0:1b:84:fd:77:
         cd:eb:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:19 2025 by rpki-client