Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/012032c5-cec8-312c-b752-a6bb310540f2.roa
File:                     012032c5-cec8-312c-b752-a6bb310540f2.roa (raw, json)
Hash identifier:          FfPu9jsbCeMDdsjVCpOt3XP2YM5xLpOKmnrAjXUghBg=
Subject key identifier:   26:F6:AF:EB:A5:F0:42:7C:04:9E:51:55:F0:3C:B3:83:14:6F:0D:8F
Certificate issuer:       /CN=c75c2a49-d4ec-49ef-affc-f07717c14231
Certificate serial:       010D0C9F43285848960B57D4C691E3823E94E980
Authority key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/012032c5-cec8-312c-b752-a6bb310540f2.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        170.205.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:57:d4:c6:91:e3:82:3e:94:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75c2a49-d4ec-49ef-affc-f07717c14231
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=67f780f8-3d5c-47f0-8ede-19c635f8d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:c9:56:1f:a3:bc:84:63:e8:a3:12:4f:2d:
                    6e:5c:9c:6d:08:4b:4e:a1:4e:90:03:c5:19:0b:a3:
                    6c:d2:be:8d:d7:e5:83:56:50:49:06:70:bc:87:6c:
                    48:54:3d:cb:43:19:af:3d:0e:d2:60:9f:f9:f7:5f:
                    05:ab:31:57:d4:6d:63:55:bf:d8:1d:8b:96:ff:0b:
                    6b:b1:07:5a:71:78:c5:b6:9a:89:a4:2c:9c:aa:ca:
                    13:94:79:6f:a9:0d:7e:3f:54:ad:24:cf:30:31:34:
                    94:8a:da:a7:8a:b3:26:c9:7a:93:73:ba:29:a9:c3:
                    28:a0:4c:6f:00:4a:f0:26:ae:57:d5:e7:cc:d3:d3:
                    12:91:4e:f2:ee:45:0c:dd:35:dd:79:15:fb:d6:ba:
                    c2:bb:cc:74:29:25:ed:00:0a:4f:42:0e:a1:34:c2:
                    f5:cc:32:fb:7e:71:d0:b3:6a:98:c0:1e:94:32:d7:
                    22:2e:2c:4e:41:7f:af:0e:fa:e1:93:ff:3e:eb:92:
                    9f:0f:e6:98:5a:95:41:e6:9e:c6:3b:a4:23:d7:a0:
                    a0:17:06:8e:f2:4d:61:54:9c:90:50:2a:60:ce:79:
                    a2:35:00:d7:62:c9:f2:3e:88:01:15:b9:fe:fc:fa:
                    cc:d1:e1:12:3d:57:8e:49:b2:5a:2a:a4:64:9e:90:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:AF:EB:A5:F0:42:7C:04:9E:51:55:F0:3C:B3:83:14:6F:0D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/012032c5-cec8-312c-b752-a6bb310540f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl

            X509v3 Authority Key Identifier:
                keyid:1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:ca:a8:96:74:7c:a9:fe:c2:fd:c4:53:6d:2a:55:34:4f:
         16:7d:44:0f:6d:20:0d:ec:6e:77:32:ba:99:cc:74:e2:c7:ba:
         3b:8b:2d:85:cd:81:fa:3c:22:b5:d9:5c:2d:b1:a1:e1:b1:70:
         ea:58:16:21:cd:87:48:31:60:1a:e6:7a:f8:bd:86:85:7b:30:
         a7:9b:42:fe:fa:5c:6a:06:94:f6:39:79:11:b4:b5:5c:47:87:
         37:85:8d:0d:9e:bf:1b:65:5c:43:74:7e:b7:a8:3a:b7:8a:92:
         c8:cb:bd:04:eb:e6:6e:6f:55:55:9b:c2:ac:70:d9:af:45:46:
         b9:c7:a9:1a:ba:8c:bb:e6:80:fd:db:a4:90:05:e6:9a:d2:6a:
         7a:25:b6:57:f8:5c:ad:cb:5a:a6:72:5b:7e:72:93:45:fa:09:
         96:9f:b3:f4:89:69:ed:b7:be:5b:d1:3c:2f:07:f9:3b:73:c3:
         e9:2c:99:b0:82:ae:b3:c0:20:c2:20:e8:a5:bf:59:00:84:03:
         d0:1d:4f:77:99:a7:8e:51:c9:2b:b3:e9:96:b2:dd:99:1f:24:
         40:2d:ec:73:e3:7f:0e:74:f0:42:ec:90:22:d2:75:e9:b4:9c:
         47:bb:8e:51:e5:cb:76:d3:0a:8a:36:a7:ec:7a:42:74:9c:17:
         b8:d9:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:19 2025 by rpki-client