Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa
File:                     16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa (raw, json)
Hash identifier:          RtOmgkpYga9C9dH77G6zGLXhIkWhFfxU1zU0XbtM3F8=
Subject key identifier:   D7:75:2F:FD:86:9A:E8:B0:D9:FB:E9:C9:E8:BF:E7:67:E3:95:B3:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150DF759A1D0E1CB1472280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.216.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:df:75:9a:1d:0e:1c:b1:47:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=cec3b795-3dbe-4a80-8bcf-8ac92772f8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:f5:ee:0a:2c:d8:dc:07:ce:f7:76:b2:07:
                    ca:74:e1:ef:e4:a3:1d:86:8d:bb:0a:b8:bb:71:03:
                    e4:5b:2c:a6:cc:18:d6:b4:f2:19:d1:ce:49:9e:99:
                    b6:c1:74:bf:a8:25:99:5d:9e:c6:c6:6e:e8:9d:8e:
                    2d:f0:45:63:98:1e:ff:c9:08:a3:be:1b:b0:ba:56:
                    fb:26:b7:c2:6a:54:0b:0f:e8:e4:48:b8:eb:e4:1f:
                    a5:4b:cf:8d:f3:06:ed:e9:ab:0a:16:09:9e:f7:0f:
                    99:f8:5d:23:ff:34:fd:7e:63:04:1e:f2:4c:02:ae:
                    80:48:68:ed:1b:45:01:94:72:fc:da:66:02:82:9c:
                    40:95:1d:1f:6a:4f:95:d8:41:59:9d:e8:bd:3f:bf:
                    41:42:8c:d1:d5:16:48:77:9b:fc:c5:03:1f:05:8f:
                    56:05:53:3b:39:0c:3a:23:0c:1b:9d:68:a4:0f:c4:
                    fe:de:da:60:13:4e:c2:a1:6e:8b:8d:90:d8:51:1d:
                    9b:ad:20:4b:8a:b5:1f:39:bb:fc:d9:ff:46:c6:f5:
                    63:ea:06:03:f4:a8:52:24:be:b9:4c:41:0b:99:75:
                    da:c4:7d:69:27:8b:5a:f8:d1:a5:32:c6:bc:d7:60:
                    d1:9e:49:65:4d:73:29:ba:c7:aa:64:49:22:70:b3:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:2F:FD:86:9A:E8:B0:D9:FB:E9:C9:E8:BF:E7:67:E3:95:B3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16a61fd4-0cf1-3c21-b6af-9930d2d29d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:dd:a1:16:61:01:d5:51:f7:f8:6d:0a:c3:d6:72:8b:dc:47:
         20:cd:a0:de:e0:b4:b0:86:db:fe:4c:18:d9:e0:ea:29:36:2b:
         3c:a1:9b:b2:82:89:db:77:7a:3b:f9:a3:f4:ae:08:a9:cf:fb:
         ad:47:83:85:9f:bd:d9:d8:18:f2:77:40:89:a5:a5:48:fd:16:
         ad:b1:8d:10:c3:39:5a:70:82:43:a0:73:f5:a6:10:61:ea:cd:
         a7:6d:0e:26:a6:6f:6d:0a:c1:a6:12:d5:60:73:e9:d4:4e:ff:
         d4:bd:98:f7:3c:16:2e:49:02:cc:c1:e6:01:92:b0:30:75:bf:
         10:9d:d8:7f:f7:c5:7e:66:66:5d:79:94:10:c7:20:24:c9:7a:
         a2:77:4d:06:1a:28:cc:8c:26:e3:80:c9:13:0b:3b:c5:d9:df:
         48:79:76:b4:52:98:0c:5f:59:83:72:44:49:de:76:7d:ff:1a:
         01:a2:16:e5:69:4a:0b:56:ce:5a:d1:51:17:e3:f4:26:44:21:
         cb:78:81:04:97:55:89:e3:77:41:ef:2b:a7:57:52:f4:87:42:
         15:c6:e5:17:66:67:87:5f:96:95:57:ef:95:9b:b8:77:c1:d5:
         f5:e8:af:8e:17:2c:ca:55:2d:38:db:2d:16:4a:12:9c:87:00:
         e5:40:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:02 2025 by rpki-client