Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa
File:                     391bbefa-9aea-322f-807a-b5b118d3b226.roa (raw, json)
Hash identifier:          gnnSFGNoXM/eLOV4a+iX1h0k9/W+dPhOFbQSq+70mvo=
Subject key identifier:   04:02:E2:BD:14:88:F8:32:BD:5D:12:0B:24:8F:71:E5:30:79:A0:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C28E28DF9304782926C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        74.106.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:28:e2:8d:f9:30:47:82:92:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=ab09ff0c-6b42-41a1-b12e-d34c9aa2508a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:6d:d9:eb:92:ab:30:03:56:53:08:7b:b6:
                    32:c9:31:02:70:be:a3:19:d9:1c:31:0b:c7:0a:b6:
                    81:88:a0:78:1b:d8:16:b4:74:20:df:ac:c5:e4:b6:
                    3d:42:a4:42:cd:21:41:95:d0:d2:88:52:fb:b6:47:
                    83:aa:40:cf:db:23:51:b4:c3:de:bc:b4:f2:b7:e8:
                    ed:04:14:78:b3:d2:9b:0c:32:e1:a6:0d:17:9e:3f:
                    af:0f:aa:66:65:0a:d6:99:48:30:2a:41:e9:6b:04:
                    17:0c:48:13:45:8c:56:ff:a0:5a:75:b3:5c:79:1d:
                    83:4f:6f:a4:f1:7b:62:72:47:27:43:05:a5:4b:ff:
                    31:ba:86:6a:d6:34:17:18:49:bc:11:66:68:cc:42:
                    fc:55:8c:d7:4a:ee:30:df:74:a9:6b:7f:29:77:bc:
                    66:af:3f:5b:6b:76:1f:5f:88:e8:5e:64:ee:0b:43:
                    fb:e7:c9:b8:41:d4:2c:15:66:0d:ea:2c:16:a1:06:
                    15:91:d1:62:3a:fd:41:92:7d:68:e3:84:31:a4:e2:
                    bb:16:38:a8:6c:f1:5b:c1:95:1f:cc:0e:d4:a0:cc:
                    63:cd:bc:fe:46:ae:30:c4:7e:ab:e4:4c:80:1a:06:
                    6b:b3:92:e3:09:60:bf:75:d8:7b:2c:27:b7:10:96:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:E2:BD:14:88:F8:32:BD:5D:12:0B:24:8F:71:E5:30:79:A0:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/391bbefa-9aea-322f-807a-b5b118d3b226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.106.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:65:f2:36:51:d7:d3:cf:b3:fa:ed:65:02:8e:50:94:1b:
         68:0c:c2:16:cc:96:cd:35:d9:6e:85:ff:c9:20:60:60:ad:6b:
         43:77:3e:73:86:48:c9:6c:ca:c9:25:6d:a4:66:0f:b3:ed:eb:
         80:89:4f:9d:ad:27:1d:84:89:17:ee:0d:cd:50:5e:ee:cd:17:
         33:8a:d3:71:36:f9:ab:56:27:d6:68:69:6b:ea:75:6c:a0:da:
         d0:88:76:43:80:f8:4a:eb:07:23:77:5a:4f:3c:e4:24:e2:9d:
         04:77:57:a4:cd:85:cd:aa:f1:9d:00:fb:da:aa:b6:df:3a:42:
         01:d1:c2:b2:37:82:e5:ed:cb:5c:e9:b7:d5:9f:6d:22:32:83:
         54:95:a0:d8:0f:18:74:30:39:0f:a2:a3:7a:e3:13:4c:98:85:
         95:8f:63:20:38:8e:21:79:c4:16:7b:6c:fa:57:09:e0:63:17:
         6a:14:2e:7f:15:d2:e3:4b:70:7a:ce:29:de:3a:7f:33:f1:40:
         8b:37:d5:33:2d:d4:68:ca:a3:e5:69:3b:77:cb:36:f8:6f:37:
         1a:b3:e8:2b:75:36:ea:a7:df:82:85:09:e1:26:c9:a2:1c:0a:
         9d:e6:09:ac:19:d1:14:e8:61:dd:9c:d7:bd:4e:8f:44:74:21:
         d5:ea:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:18:26 2025 by rpki-client