Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa
File:                     9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa (raw, json)
Hash identifier:          Ab/7vu04aUxRv0Tkmi2Fmkl9TQYNsGr8nusq/O/Upsw=
Subject key identifier:   59:F0:DE:B5:D4:16:CE:CE:80:F5:A1:01:D1:34:70:0E:C0:39:ED:D7
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584949FE85A137772516AE6E9A40
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     13760
IP address blocks:        170.249.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:85:a1:37:77:25:16:ae:6e:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=dc79a4aa-cc77-43cf-bf9d-c8ac68c10410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:17:4b:2d:5d:89:53:81:41:4d:0a:72:7c:
                    00:fa:5d:2c:fb:47:8c:af:9a:e9:c3:5c:8b:24:e8:
                    a0:9a:10:8d:9d:b6:b3:1e:3c:65:74:07:a6:5d:d6:
                    63:ef:5c:2a:3b:b2:58:8e:13:d6:8d:90:be:17:e0:
                    04:9f:cd:53:3d:4b:0b:28:7f:61:16:ef:cc:ad:b7:
                    13:7b:0c:b6:2a:5e:18:94:72:35:8d:da:52:b6:b9:
                    c4:12:b1:f9:34:3b:64:6f:67:aa:04:05:03:86:de:
                    b9:e4:c3:1a:1e:5c:f3:50:9b:14:31:71:3b:c1:94:
                    31:14:74:7b:a8:93:42:f3:c0:ca:dc:e1:94:3f:5e:
                    9f:aa:c1:08:e8:81:b2:5d:c2:b1:eb:8b:47:ca:30:
                    f0:41:93:66:ec:b0:ff:31:bc:42:bf:38:b2:e8:be:
                    89:9c:b5:f6:c5:e4:69:5b:c8:04:f5:32:a4:ef:cf:
                    dd:77:05:da:8e:4b:b7:fe:6c:d2:cf:54:5c:c0:8c:
                    ae:5c:a0:f6:35:29:a4:1e:9c:2a:91:d5:40:2a:a4:
                    9c:e3:0c:03:5c:27:0c:9e:e9:fc:e3:6f:1d:a3:38:
                    82:b1:64:ac:79:3e:32:7e:9a:63:28:00:0e:ed:14:
                    b2:28:0f:8c:5b:ab:1c:c9:30:1d:2d:62:96:2e:27:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:DE:B5:D4:16:CE:CE:80:F5:A1:01:D1:34:70:0E:C0:39:ED:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/9ab52a43-eb6a-3843-a9b3-7c2fb95ddc4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:05:e2:27:91:59:f0:f4:c1:a8:26:b3:62:12:50:eb:50:b1:
         b4:52:f4:1f:37:29:bb:e2:3d:d5:cd:48:f8:da:73:f4:1b:5c:
         5d:52:6e:88:3c:79:f7:02:f6:76:33:aa:d7:72:14:4f:d2:4e:
         8a:30:12:f7:af:fc:9b:a5:60:a6:19:12:a0:dd:22:28:03:14:
         9c:55:a6:04:63:70:59:02:b7:8b:8e:9f:96:f4:2f:29:c1:a4:
         e3:4e:c9:4f:09:f6:c2:df:6b:06:18:9a:32:f9:46:22:46:11:
         82:12:46:08:cc:b0:bf:94:eb:b9:3b:23:56:32:3d:7d:ca:34:
         87:1f:d2:62:60:b5:25:35:18:28:26:c1:25:0a:5a:b0:72:22:
         ba:5a:1c:dd:68:fe:ed:3b:d2:ed:4b:e9:10:65:9f:e4:1a:a9:
         fa:89:22:5a:50:f0:ba:fb:1e:72:95:c2:20:1e:ae:99:8d:c9:
         97:3f:d0:ec:88:af:e7:5c:53:f8:a7:6e:7f:05:0b:50:a9:f9:
         60:75:b7:9e:0f:0a:b6:66:4e:ae:dc:c9:58:f7:45:35:d0:e2:
         c9:bc:e9:06:1e:15:60:d9:78:fc:ee:c1:82:d7:cb:72:d4:c3:
         78:98:29:ae:d2:dc:5d:d7:e9:5d:b9:dc:ab:86:4f:a5:ef:db:
         cf:db:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:27 2025 by rpki-client