Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28e3673e-8e4e-3e90-801e-9d613896501e.roa
File:                     28e3673e-8e4e-3e90-801e-9d613896501e.roa (raw, json)
Hash identifier:          01BKr/RMsn/5c1MkZciNdVqjhdOxCMiiuJUQrwOrmP4=
Subject key identifier:   51:9F:BF:A3:DF:A2:69:36:E3:C5:B3:33:21:3D:40:59:8B:06:4A:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C638055E9D65AFAF7019DA70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28e3673e-8e4e-3e90-801e-9d613896501e.roa
Signing time:             Tue 04 Feb 2025 20:09:49 +0000
ROA not before:           Tue 04 Feb 2025 20:09:49 +0000
ROA not after:            Mon 05 May 2025 19:09:49 +0000
asID:                     6167
IP address blocks:        174.220.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:38:05:5e:9d:65:af:af:70:19:da:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  4 20:09:49 2025 GMT
            Not After : May  5 19:09:49 2025 GMT
        Subject: CN=7a54c1f4-b76c-41aa-b3e0-f14293ffcc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:0f:43:2c:a3:b8:40:18:7e:53:c5:6e:4c:
                    58:96:f0:b9:9b:0e:e9:da:b6:04:8c:4b:fe:ea:ca:
                    d2:68:fb:f0:9e:b6:1b:a4:da:a8:4d:d3:52:8d:13:
                    e7:e7:e5:63:96:cd:72:91:a1:8f:84:12:a2:61:76:
                    de:47:5d:c8:13:cd:16:61:90:f0:19:ee:62:82:57:
                    89:63:e1:70:49:a5:fb:2c:56:a0:40:30:0a:07:5f:
                    14:43:51:01:25:f7:b1:7d:d3:fa:41:a6:a6:68:e2:
                    6c:51:3d:d9:94:5c:5d:90:5a:68:af:ea:b3:f7:77:
                    45:eb:8e:1e:d9:9c:c3:e5:0e:bb:9c:5a:2a:56:f0:
                    0d:3f:83:9d:95:fd:ea:be:6a:5c:a0:ec:bb:56:22:
                    5d:fb:95:04:1d:ed:ec:85:77:8b:26:d4:7e:08:69:
                    34:ce:9f:6f:2e:f1:fc:31:81:71:11:e1:33:a5:06:
                    1f:de:40:9b:47:11:84:27:d6:8b:b8:8e:e7:c9:23:
                    fa:15:74:2f:a3:30:9f:70:9e:93:0a:17:ab:9e:5a:
                    ed:b8:2c:a8:a1:82:eb:c5:17:70:29:d0:0c:08:68:
                    6a:25:1f:ad:61:ab:d5:83:be:da:89:39:3e:55:ed:
                    c1:71:2c:95:41:f1:b3:60:af:4e:fb:6b:2e:11:ea:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:BF:A3:DF:A2:69:36:E3:C5:B3:33:21:3D:40:59:8B:06:4A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28e3673e-8e4e-3e90-801e-9d613896501e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:40:f3:3e:db:81:c8:c9:5c:7c:63:1d:d6:80:d1:b6:84:a3:
         4f:1f:0a:26:38:a0:76:16:75:28:84:c7:29:e6:6a:56:f1:f1:
         5d:84:5e:01:7c:6c:ec:26:54:95:fb:9a:08:03:3c:db:94:3c:
         1c:4e:af:bd:05:9e:35:23:8e:67:d5:cd:b0:0a:de:01:38:af:
         c4:69:b5:3b:29:71:06:0e:cc:a4:fa:ec:3f:a7:3f:62:40:e2:
         aa:62:22:44:5e:0c:cd:a0:8c:67:a0:e9:c1:4d:b8:d4:7a:2b:
         c0:be:ae:7e:b1:49:08:ab:eb:bd:57:f0:a6:f0:41:3d:71:1a:
         b8:7c:00:c3:2d:25:eb:0c:dc:b0:bc:74:fe:20:95:c6:ce:b8:
         0a:cd:be:45:de:b2:e3:cd:ab:f7:14:94:aa:ec:c4:3f:09:2d:
         af:d1:3f:44:d0:c0:17:9c:1a:06:07:b1:f1:df:f4:58:9c:37:
         5b:d9:29:c7:b0:37:f9:cf:0c:f4:86:20:aa:08:42:b9:f3:0f:
         3f:e4:e5:a3:f3:4d:bb:40:ee:33:1b:00:c6:05:42:51:c2:02:
         b3:f9:6f:04:9c:3a:45:7e:4b:93:b0:12:06:69:86:72:de:f1:
         5f:9e:dd:b2:14:7e:a7:3c:29:8f:79:20:86:5b:dc:99:c6:6e:
         08:58:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:19 2025 by rpki-client