Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
File:                     6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa (raw, json)
Hash identifier:          jLCqHh3UG5CBmvOHQb3+dQllaWs60NzxraUiDhbqkoI=
Subject key identifier:   7D:F8:DE:FF:2C:1E:82:2C:C2:FE:CD:59:F4:69:EC:EF:F1:4C:1C:0E
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F43285848854B53EAA874CF118E680300
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     174
IP address blocks:        137.155.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:53:ea:a8:74:cf:11:8e:68:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=5a60e0da-a476-42a1-8a88-b4f2ce02f44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:9c:95:95:49:fd:4c:07:0c:33:0c:c3:d6:
                    e0:92:44:c5:2a:a3:fe:a0:dc:e9:f1:c1:c7:c8:c8:
                    3f:be:e6:0d:8c:f1:13:6e:81:53:c1:43:57:5c:39:
                    41:ed:68:4e:2d:e8:29:3b:4f:c1:48:07:e5:cb:ea:
                    44:3b:67:17:38:2c:4b:ae:2a:48:d7:40:25:62:40:
                    9c:b4:91:4c:7d:be:5d:83:0d:ec:97:27:39:a3:26:
                    61:6e:cc:78:2b:e0:fd:a5:13:11:a6:57:30:46:fb:
                    b2:a0:33:14:95:68:87:5c:4b:f2:1b:35:62:07:f9:
                    4a:a4:f9:80:3e:14:27:27:94:9d:b0:4f:1c:fc:71:
                    57:bf:97:b0:20:a5:c9:ac:74:ef:24:21:23:2f:55:
                    1e:c9:fb:6a:e9:53:51:ea:8e:d5:95:d4:d3:a0:c5:
                    86:8c:5a:a5:d9:5f:fd:fa:ca:f2:fb:8d:ce:94:04:
                    01:f1:5e:75:12:3c:5f:7d:af:bc:af:86:68:17:0c:
                    00:c0:0b:05:b8:52:fc:59:ad:33:98:69:59:09:30:
                    65:36:c1:ea:0d:0c:2e:91:d5:c0:aa:a1:c1:96:ca:
                    56:d4:28:09:25:63:0a:8b:f9:4a:e8:2a:2e:e4:8a:
                    43:4d:d5:93:f6:0c:e5:70:59:e8:a6:e1:90:01:6c:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:DE:FF:2C:1E:82:2C:C2:FE:CD:59:F4:69:EC:EF:F1:4C:1C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:98:0e:34:43:47:1d:b7:d5:fb:b5:da:cf:07:e3:7e:a6:
         cf:f1:c0:0b:a3:0b:42:94:ed:5e:5a:0b:9f:0b:c4:87:7e:7f:
         8d:c0:4b:34:16:90:55:be:b8:2b:02:52:88:c7:f0:a9:97:01:
         b8:e6:0d:0d:ee:e7:97:36:2b:62:a1:a0:a7:a7:a9:70:f9:c5:
         fd:34:66:ca:56:19:be:83:b2:b6:ca:62:9a:34:0b:bf:e0:45:
         0e:ec:e8:a8:63:1a:1e:09:9e:f6:b9:be:a8:c2:a0:58:18:a8:
         9a:5a:46:1d:db:07:6e:66:bf:42:2a:40:b6:6f:df:09:1d:62:
         93:b2:b5:2b:3b:2d:a4:69:cd:15:4f:2e:a8:e8:3d:f6:81:c9:
         f2:73:f7:1c:51:ab:c0:a1:1e:ef:6a:73:91:a6:84:4c:79:3f:
         5d:3f:e6:2b:53:96:3e:ae:f8:d3:44:6a:bf:3a:6d:31:5c:0f:
         a4:52:4f:4e:2f:d2:ff:3a:b4:02:45:b2:28:67:c9:cc:21:d3:
         2e:4b:fb:54:ef:f2:d1:84:68:04:8d:2f:02:5b:fe:f2:02:b6:
         92:44:fd:78:3d:7f:83:d3:4a:ba:0b:02:29:3d:7b:ac:a7:63:
         ad:47:cf:e8:b1:36:37:82:8d:6f:61:66:48:e8:f8:c6:d1:a3:
         12:dc:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:10:29 2025 by rpki-client