Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ff778b8-685c-353e-8e33-4930b6f8aea6.roa
File:                     7ff778b8-685c-353e-8e33-4930b6f8aea6.roa (raw, json)
Hash identifier:          7CPs/Xm3cRevgDJNs5HIBT7mfj9Me1JqFZJtOP1eQf0=
Subject key identifier:   59:06:20:B5:11:78:45:D4:96:E8:CC:37:86:9B:14:61:49:CC:DE:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150EC558F229F7725781840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ff778b8-685c-353e-8e33-4930b6f8aea6.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.213.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ec:55:8f:22:9f:77:25:78:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=de07f57b-9175-4a7a-879b-feb45698dafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:a2:db:25:73:63:c4:2b:27:56:30:e3:ca:
                    16:ba:2c:ff:80:a3:c4:15:fe:17:78:e5:e7:c6:08:
                    ef:74:e1:1b:bc:11:eb:9c:d2:b2:1a:8b:1e:3c:e0:
                    6e:17:3a:b8:fe:0c:e4:70:3a:b3:0c:53:73:33:16:
                    9d:49:46:41:a7:29:82:e2:29:da:5b:a7:08:b6:fa:
                    d1:8b:68:4a:51:5f:e0:2b:b2:c1:47:1b:e4:9f:61:
                    ce:41:13:c2:1e:33:d5:2d:c9:81:f0:52:4b:7b:c2:
                    e8:f0:dc:db:cc:df:d5:27:37:95:30:fe:51:84:2c:
                    4d:21:3b:8c:14:ea:62:26:34:4e:25:e4:e8:62:98:
                    84:c9:32:34:36:22:e4:7c:8b:cd:65:86:42:70:a1:
                    45:99:c7:08:c3:b7:e6:12:23:b5:79:a7:a8:8b:68:
                    79:d5:4b:b3:c0:7a:f2:e6:bc:e3:fa:10:e4:c8:2d:
                    31:da:d8:57:92:3f:b9:ee:5b:b3:0d:d5:74:d9:83:
                    91:da:6c:bc:4f:a0:50:3e:6c:79:7c:56:b1:8d:99:
                    d8:28:41:b4:2b:2e:43:f1:6e:4e:6e:82:99:02:a6:
                    eb:a4:1b:13:93:86:d2:f3:7b:07:87:6b:22:49:11:
                    00:44:f4:6e:7e:29:2d:f0:fd:19:5a:6c:09:f7:1b:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:06:20:B5:11:78:45:D4:96:E8:CC:37:86:9B:14:61:49:CC:DE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ff778b8-685c-353e-8e33-4930b6f8aea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:27:7d:4e:da:19:9b:43:06:72:80:0c:08:69:d0:db:77:
         28:85:69:08:e5:de:4e:72:23:91:ce:f0:f2:77:2a:c0:0c:03:
         d1:f6:1d:84:03:68:68:4c:fc:c9:86:8d:ec:ed:1d:05:ad:cb:
         98:97:b2:b2:08:2b:60:9b:6a:ad:59:87:81:68:f0:29:86:ba:
         59:65:9e:00:1c:57:81:30:76:f9:7e:a2:c8:61:f7:89:13:33:
         30:77:70:3a:4c:b9:e2:6b:42:1d:76:f7:b4:74:e9:9e:b1:a4:
         8a:97:12:d2:2c:28:53:97:49:84:fd:16:56:3c:03:b8:57:53:
         8f:85:16:68:62:38:61:df:ce:49:ba:2a:7d:f5:5a:1d:64:8f:
         97:4e:49:ed:15:6d:b7:07:c8:b2:42:38:9c:3c:25:51:b0:e6:
         8e:b4:85:16:5d:c4:79:30:6a:30:65:e8:8d:ac:a6:48:85:2b:
         1a:42:ba:68:c1:fa:35:82:27:16:10:42:d4:a7:33:ee:c5:3e:
         eb:d6:c7:d8:de:58:22:f9:cc:7b:d3:5f:12:1b:8d:e6:e6:03:
         fd:6d:03:83:0e:54:9c:24:90:d6:bc:54:7c:2f:d3:98:e7:e5:
         73:72:39:d7:76:b4:05:8b:67:2f:e5:6d:09:91:0f:f0:cf:2d:
         39:64:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:44:44 2025 by rpki-client