Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa
File:                     963b59a4-74ab-32cb-b100-39652a6d9ebd.roa (raw, json)
Hash identifier:          ajNg+eiy8lwRTFmk37nCsfkapjEeORZDbHk72SgFtA4=
Subject key identifier:   5F:7E:9F:44:C7:03:65:3A:6B:9B:60:B3:3F:7A:39:A4:4D:35:25:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF6177F7FB5909DCE7E0F880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        174.42.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:77:f7:fb:59:09:dc:e7:e0:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=80062a3c-76ba-42bb-a175-b724123a8832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:10:6d:c9:9f:3e:b4:59:56:71:f4:40:67:
                    73:a0:f2:90:7d:32:79:b0:b3:e6:02:79:a8:9b:4f:
                    af:24:72:7d:76:75:54:56:18:70:67:22:0f:b8:91:
                    74:13:c5:26:01:c3:6b:3c:1e:6b:5c:be:92:98:25:
                    fd:43:16:92:21:02:85:bc:aa:c4:26:ee:c4:dd:d5:
                    8e:72:1a:ce:7f:62:56:13:ff:eb:5d:93:32:df:76:
                    c0:83:75:44:8d:3e:88:d2:e1:4e:1b:e6:0d:d3:fd:
                    cd:f3:98:d0:97:ea:68:cd:47:4a:fb:bf:d1:fe:5a:
                    1d:c7:05:d2:6e:8b:07:30:f1:35:b4:cb:8b:d6:35:
                    28:99:35:28:4d:79:38:65:70:ad:bc:f3:0e:79:19:
                    1b:68:b0:52:fe:8a:97:90:03:49:1c:35:56:91:ce:
                    65:cf:fe:71:27:91:0b:56:f1:7a:c3:78:9b:ad:74:
                    dd:ae:63:d0:85:f8:27:3a:33:c0:79:d8:b6:7d:f4:
                    a1:c7:c7:b6:c8:b5:75:a5:db:e3:7b:7e:03:40:a2:
                    40:58:87:70:2d:0a:de:65:99:53:5b:22:43:c3:cc:
                    2f:3b:0c:21:34:72:ab:8c:77:69:f8:04:99:85:c0:
                    bf:53:69:00:0d:74:b8:82:2e:8c:12:4b:8f:4e:13:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:9F:44:C7:03:65:3A:6B:9B:60:B3:3F:7A:39:A4:4D:35:25:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/963b59a4-74ab-32cb-b100-39652a6d9ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:a6:04:4b:3a:e1:3f:bd:9d:b7:99:65:9c:7b:fd:3c:ea:
         ee:80:e1:61:fa:f1:10:77:d1:e7:2b:c7:20:ce:59:e6:1d:92:
         d2:be:09:84:dd:f2:c0:36:94:cd:9d:40:c0:51:6f:48:a0:cc:
         1d:eb:ad:87:65:45:27:2b:c1:77:02:59:9b:7d:c8:3f:e1:c6:
         26:00:55:4f:5b:90:25:42:5c:e4:f0:9c:4a:84:c3:2a:7b:ef:
         85:ca:d0:4c:41:38:22:83:29:0e:a7:99:d0:f2:14:e4:fd:c4:
         48:36:ba:5a:32:89:73:fd:53:2d:8f:bb:e3:08:12:a7:0e:22:
         8e:d1:76:8e:80:d5:79:af:8e:24:48:51:78:84:8d:e4:cc:d7:
         40:05:e4:08:86:68:5d:88:00:06:9c:55:58:88:b2:cb:5d:cd:
         db:51:e3:a2:68:a3:73:55:49:4b:62:9d:53:bb:ce:47:fd:52:
         91:d9:02:04:02:6d:ff:3c:f9:5f:ff:1e:e7:64:2d:97:41:2d:
         1f:99:d0:ee:5a:d5:4e:a4:c7:15:a4:7d:6f:49:ab:1c:9c:d5:
         03:97:39:57:33:12:fa:d0:b4:af:7e:e7:23:ac:5d:26:7f:d2:
         3c:96:8d:01:b2:c9:54:43:51:62:33:55:e0:6a:7a:c9:95:63:
         fc:67:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:48 2025 by rpki-client