Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e6d37b5-7349-3c26-ab8a-689fff32134a.roa
File:                     7e6d37b5-7349-3c26-ab8a-689fff32134a.roa (raw, json)
Hash identifier:          q0ciMg9dD9+w3+TOfo+3gIdG9DnDRnmpXQBKxcFpts0=
Subject key identifier:   2D:09:CF:A7:52:96:AA:45:C5:2A:D1:EA:6B:D0:5A:E8:DD:DA:83:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584921842789A01BCC52C7373CE4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e6d37b5-7349-3c26-ab8a-689fff32134a.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        199.74.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:27:89:a0:1b:cc:52:c7:37:3c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=b8071ff5-e138-44cb-868e-6ae391bdc8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:65:fc:b5:f9:1b:7f:b9:5f:5f:5f:8a:2c:
                    1c:da:bd:f7:46:e2:c0:c6:0a:e9:86:d5:f1:13:92:
                    ed:4f:4a:21:b1:fe:5d:c8:7f:65:c6:74:b0:66:a2:
                    0b:4b:ce:35:32:d2:59:ee:37:3e:0d:fe:3d:52:46:
                    e5:c4:3b:b3:b8:2b:6e:77:4d:df:3c:5c:05:ac:e8:
                    2f:1b:13:19:5e:95:09:d5:34:9b:0c:ff:55:f8:8c:
                    4c:22:dc:b2:4c:8d:6c:73:e7:56:32:6e:6d:4b:ce:
                    70:3a:99:db:a5:86:2e:f9:52:57:aa:ef:6f:b9:7d:
                    d4:05:74:40:19:fe:22:04:85:07:f5:d8:94:bd:f1:
                    23:6f:cf:de:35:82:43:66:26:ee:de:b5:9f:50:40:
                    85:d0:5b:22:67:41:1e:1e:1a:69:85:ed:6a:70:82:
                    b7:6a:b7:83:b1:ff:fb:44:8d:65:ab:b8:ea:f7:d1:
                    65:5f:42:6f:99:90:10:1e:98:09:de:be:47:e1:60:
                    7b:85:3d:30:02:41:26:16:ea:3c:1c:75:bd:c8:ff:
                    55:76:6a:3d:2b:20:ad:79:36:87:e8:a9:63:7c:1c:
                    57:ea:96:2b:12:5c:e5:59:ee:cb:b0:f8:16:13:51:
                    02:32:87:57:4c:3f:7e:5c:59:83:a8:1a:7d:fd:4c:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:09:CF:A7:52:96:AA:45:C5:2A:D1:EA:6B:D0:5A:E8:DD:DA:83:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e6d37b5-7349-3c26-ab8a-689fff32134a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f9:d8:84:00:94:ca:a2:f2:8c:02:58:ca:64:ab:5f:40:0f:
         10:80:ec:34:7e:cc:51:e3:68:26:03:29:c8:e3:9f:ca:f9:7d:
         60:18:6c:93:24:98:34:8b:45:b7:a3:67:44:bc:3e:c1:3b:49:
         4c:ac:30:c7:bd:b4:45:ce:5b:ca:04:8b:2d:f7:9b:5b:73:36:
         92:73:56:f9:2c:ca:53:b8:90:65:54:99:1e:3d:b0:ab:e6:df:
         7c:ab:1d:ee:00:be:bb:06:7d:01:ec:69:cd:c7:2a:23:d3:61:
         28:52:02:63:a5:be:1d:db:54:14:7b:f6:1c:fa:78:80:4e:22:
         08:ac:19:47:b5:44:a1:21:87:45:b5:75:9a:24:c9:82:12:8f:
         a1:f6:01:f7:a3:a8:51:0e:9c:04:f8:31:84:ee:9d:50:e1:6e:
         f1:68:5c:08:1a:64:d2:df:51:0b:88:4b:df:c7:38:f8:db:c2:
         5e:ed:80:bd:d6:07:20:e2:54:67:7b:d2:de:67:c1:de:d4:6e:
         b0:7f:40:54:06:fa:6c:13:a6:e1:99:52:1b:69:15:c9:40:a6:
         cd:15:ee:44:0d:5c:75:cc:bd:25:2e:17:8c:6f:be:b7:39:11:
         f4:9e:f6:ff:ca:dd:10:a6:a7:b4:3b:8c:93:84:f5:68:9e:57:
         3c:10:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:12 2025 by rpki-client