Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
File:                     c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa (raw, json)
Hash identifier:          tAWGCN59z2ItyXz6zhTmj9f+6SBJBeM8pOJCvsKqnkM=
Subject key identifier:   01:B1:E2:CA:E0:3D:8D:37:01:83:3B:68:5A:5D:9B:99:68:F6:D7:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150ED19CCB75DDF29C8BD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.224.152.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ed:19:cc:b7:5d:df:29:c8:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=176ce40e-cd8a-4e29-a657-9923617f087a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:03:fd:16:ef:22:93:f0:92:69:9b:fc:45:
                    2a:65:4e:57:0e:f1:30:46:03:70:e2:6e:31:14:ee:
                    71:9d:ec:d2:d6:df:62:d8:4a:65:5c:0d:98:18:dc:
                    c2:02:ad:1b:69:98:d8:8a:e0:2f:29:4e:69:65:ba:
                    d5:d0:bc:e1:63:eb:95:7a:da:f1:c2:8e:ab:44:91:
                    af:15:18:10:f2:f7:b6:44:ea:85:99:e9:bf:b4:9a:
                    a3:53:e5:32:d9:12:ef:3d:6f:4a:6d:04:51:9c:38:
                    81:27:f1:86:3b:35:10:88:b1:d5:32:8f:58:d1:37:
                    9e:05:d4:43:79:5f:e7:a7:09:ec:c6:4e:72:79:01:
                    a2:02:a4:7a:88:3c:20:e4:16:eb:ff:1c:04:af:7c:
                    e0:0e:62:6c:5c:13:3d:4e:c8:72:df:52:d4:56:b8:
                    82:eb:05:15:c7:33:39:28:d8:a0:e5:27:a8:f5:83:
                    f6:32:10:a4:3e:07:31:0c:b1:b3:61:50:fd:67:3c:
                    40:48:e2:18:ff:2b:7d:b7:cf:d6:b7:d6:3e:5b:14:
                    b5:2d:61:3c:d5:09:67:b5:87:cf:49:7a:60:82:76:
                    47:38:46:5d:43:9a:b9:1b:f0:4a:9a:f6:e2:e0:1a:
                    5a:ea:9f:a1:d8:e3:e5:2e:54:30:2e:6e:8b:7a:6c:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:E2:CA:E0:3D:8D:37:01:83:3B:68:5A:5D:9B:99:68:F6:D7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:6d:e0:4e:d7:96:02:51:24:3d:4c:4c:77:32:ac:73:1d:81:
         1c:33:7b:29:ba:b5:0e:ec:f2:8b:79:4c:f8:ee:ed:a8:11:cc:
         ff:ae:92:fa:0b:35:51:17:f4:78:71:8c:b4:89:5b:a6:18:03:
         b1:9d:b2:7d:51:77:d5:58:f2:29:88:54:7c:89:0c:e4:d1:d9:
         70:3c:13:29:1d:75:80:b5:11:a2:d2:86:90:3e:8a:73:8a:99:
         3f:3d:b2:3f:5a:d5:e2:42:33:1e:2f:40:a0:87:dd:bf:73:7c:
         fd:ea:b9:96:f9:a2:10:79:ff:38:b5:8e:4f:6d:e1:0a:b5:3e:
         77:d2:d5:b3:7f:72:07:03:17:14:50:1e:4d:70:0e:ae:6c:28:
         2b:38:db:09:24:e8:df:c5:08:25:d1:70:07:f9:bd:44:12:84:
         dd:b7:97:a2:93:bd:3e:3e:20:45:7c:45:a9:f0:c7:f3:63:2e:
         df:24:d9:55:0f:8e:7b:f0:e1:f9:44:dd:20:87:7c:fb:19:16:
         84:96:d3:c5:ff:52:52:da:23:f5:a5:1e:4e:0e:5b:f3:a3:c8:
         51:60:3f:e7:d0:43:a9:22:14:d9:4a:81:92:5a:75:c4:93:24:
         0c:ba:5f:99:e3:e2:05:a7:15:f7:da:fe:ba:0b:10:c0:10:69:
         19:60:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:56 2025 by rpki-client