Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91aa1cd2-0e86-3b81-b639-13d3332767bc.roa
File:                     91aa1cd2-0e86-3b81-b639-13d3332767bc.roa (raw, json)
Hash identifier:          USDaqOlaIJf82b2r2GdQzaeUkwdSBFm0/lNSuHKak2M=
Subject key identifier:   BA:49:8C:FB:81:BD:1D:13:09:A4:95:7C:06:5C:01:54:AA:BC:0D:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150E3D1435BC1840B1B9980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91aa1cd2-0e86-3b81-b639-13d3332767bc.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.219.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e3:d1:43:5b:c1:84:0b:1b:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=cebadf37-7110-4d53-93b6-651ff46b3263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:38:94:20:c9:1c:f3:0f:41:01:f7:30:f2:
                    71:27:10:08:3b:ff:78:b2:46:45:b5:8f:b6:c2:b2:
                    65:b9:72:7a:82:6f:8d:9c:f1:03:d1:a0:29:8d:94:
                    c4:91:f8:e4:a6:b0:83:00:04:a4:fb:74:c1:33:b4:
                    5d:1e:3a:c4:b9:90:63:9e:97:34:d5:2b:d2:5c:44:
                    c6:b4:60:ee:14:86:69:dd:4d:77:69:58:5f:ca:5d:
                    b5:ad:1c:cd:67:d9:ab:d6:1f:48:99:02:ce:8c:5b:
                    4d:21:e0:b1:c1:0f:43:9f:04:d8:0f:03:a7:d5:69:
                    85:55:0c:82:95:8a:b3:05:52:a3:4f:a7:64:5a:a8:
                    dc:83:bc:ae:57:23:8b:87:92:4a:e4:6b:c0:58:6e:
                    21:9d:04:d9:1a:f9:87:8a:dc:e5:b6:b8:6c:40:58:
                    16:7a:50:3c:7f:be:6d:b1:a5:28:76:ba:ff:9e:96:
                    8a:2f:44:c4:7e:6d:95:17:76:f1:d0:31:66:6d:e8:
                    82:b2:ba:a0:23:fa:7a:31:0d:23:53:d4:0f:d2:97:
                    03:ea:e8:4f:d1:ef:df:c2:35:31:a4:fd:4b:30:f8:
                    37:c2:38:de:b6:2d:35:2a:ff:35:d9:d9:11:20:19:
                    36:c9:19:ce:b5:8d:37:16:6a:13:43:7c:a2:de:36:
                    37:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:8C:FB:81:BD:1D:13:09:A4:95:7C:06:5C:01:54:AA:BC:0D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91aa1cd2-0e86-3b81-b639-13d3332767bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:91:4e:00:ac:e8:68:ea:21:24:d5:9f:da:32:67:1d:84:f7:
         b7:28:5d:70:a4:41:23:f1:e6:fd:2f:12:b7:b9:3b:e5:a4:be:
         38:38:73:f9:b1:52:15:73:a3:7d:79:8f:13:ba:79:9c:e2:8a:
         2a:a3:a7:49:4a:e8:bb:e7:34:cd:eb:98:23:ba:ca:0e:63:6f:
         8d:cf:e0:1f:74:bf:36:e8:58:67:4d:17:eb:b3:fb:39:91:a2:
         9b:f7:f7:a0:c5:5d:59:51:59:68:34:38:f8:ed:8c:17:9b:94:
         ae:6b:67:d9:2d:85:2b:98:67:09:f2:73:c7:6a:2f:ec:57:48:
         7c:b0:a5:98:a0:d8:f5:92:a8:bd:ce:b6:57:bb:39:a8:c0:47:
         28:27:61:cc:80:4e:56:55:e7:71:5c:23:28:a5:86:6c:73:a2:
         11:91:0f:4b:e9:54:a7:f3:8c:1f:16:d6:9e:1e:b4:b7:4f:0d:
         09:1a:e9:3a:ed:4d:52:2b:e3:87:b5:4b:03:b4:d0:2f:57:c8:
         aa:62:93:fa:34:7b:03:6a:e1:19:48:6d:97:f3:5e:51:f1:73:
         e5:70:dc:a0:19:d3:4d:91:f7:5e:2f:16:60:1c:3e:bc:b7:04:
         47:69:3f:04:d1:a8:2c:71:f8:15:27:23:fb:38:40:cb:c3:0c:
         47:53:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:45:32 2025 by rpki-client