Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa
File:                     4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa (raw, json)
Hash identifier:          0dE2CE8r2al5C2+yPS7YgFnix2/q3/O/2tzS5eJ7Fos=
Subject key identifier:   5E:79:21:8E:C4:B2:73:93:46:D1:EF:18:F3:59:93:21:D5:82:86:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA34E3890C7B0024EEFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     22394
IP address blocks:        199.74.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a3:4e:38:90:c7:b0:02:4e:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=eaabe58d-e5b6-4191-a3ef-2076f316b0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:57:d4:97:e7:48:9e:19:77:9a:99:1b:e5:
                    99:45:f8:1f:bf:59:49:42:c8:1c:69:58:d9:e8:02:
                    27:45:b1:b4:4e:81:70:8a:05:2b:7d:02:5e:25:b7:
                    39:d3:f0:96:95:ed:c5:24:d1:a4:af:fc:5e:d5:99:
                    e4:2e:07:01:e3:56:ef:35:05:df:e5:a6:eb:0b:7f:
                    01:cb:6e:c6:0c:95:d6:e3:12:57:80:53:59:d7:ab:
                    1a:7c:30:e7:af:9d:0a:8c:10:40:49:6f:11:34:8b:
                    11:1c:f4:23:d4:6f:ca:bf:e9:bb:ac:32:d6:d4:4d:
                    23:0a:12:31:87:64:29:7b:26:d1:4f:b0:7e:bf:4b:
                    21:75:a2:14:3f:30:55:05:28:4e:27:2f:20:a2:f3:
                    ef:e1:ed:67:d3:97:c0:9c:53:cb:c4:8b:05:92:01:
                    44:e9:c1:ad:3b:00:f4:90:bb:a3:a7:b3:c1:96:1e:
                    80:0f:70:66:2e:d8:97:ff:e8:e0:d5:b0:bc:81:8c:
                    7e:96:e9:a9:e9:b1:b1:39:12:8e:e9:56:9f:32:8c:
                    21:3d:18:76:ff:2f:22:f3:10:cb:93:34:22:60:14:
                    fd:22:e9:fd:72:6a:ff:f4:39:f0:02:4e:ee:76:50:
                    9c:24:18:4f:e0:f7:ea:b1:a0:c7:0e:37:94:d5:ab:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:21:8E:C4:B2:73:93:46:D1:EF:18:F3:59:93:21:D5:82:86:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4452fc35-de15-38fd-ad9f-0ab0e4e16b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:43:a0:67:46:8a:14:81:70:6b:f1:c5:fc:11:f6:12:d6:
         24:10:18:e2:9b:e8:73:94:4b:93:8b:2f:2d:12:80:22:76:c2:
         1d:38:9c:02:69:bb:ef:52:eb:2b:ef:3a:12:74:cd:5b:42:18:
         9e:7f:70:90:9c:60:29:d5:24:ef:a0:f9:7a:66:05:47:36:65:
         58:32:8f:d7:d4:39:13:20:08:80:fc:e2:cd:28:31:fc:ac:29:
         3a:37:5c:eb:1d:06:51:cf:40:2e:aa:77:44:0d:92:34:2b:91:
         7a:a3:ef:86:a6:ee:3e:8f:6c:c7:d9:07:bd:5f:2a:1e:2d:e4:
         bd:5e:84:6f:a3:54:43:01:2a:84:c7:21:66:68:e6:99:d2:cd:
         8b:09:b5:d0:29:4e:d5:7f:0c:99:33:5f:54:3b:1b:18:07:47:
         1f:21:03:c1:eb:ab:4c:04:fc:a8:bd:9e:cb:77:57:12:17:f1:
         ee:4d:10:bc:ae:36:c2:6f:83:ca:06:da:c6:44:df:a4:ff:22:
         7b:82:b9:81:eb:93:b4:91:7c:69:03:94:74:30:4d:5b:05:ca:
         fc:c2:d5:fd:9f:cb:fd:d6:21:42:10:1f:fc:9f:4e:3b:1d:6b:
         0a:c9:6e:8f:d5:76:37:c4:2a:52:f5:55:a3:70:44:3c:f7:79:
         ca:ce:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:04 2025 by rpki-client