Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa
File:                     3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa (raw, json)
Hash identifier:          tuuZnH2lLCo7GihA88KMHCZwAPDG1hGYakLpH59S6sU=
Subject key identifier:   5A:20:0E:BD:3C:2C:52:45:A0:DE:AE:38:8D:BF:81:42:AB:0C:4E:C3
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584817051153A16A5DB8CD530600
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa
Signing time:             Wed 04 Dec 2024 02:00:39 +0000
ROA not before:           Wed 04 Dec 2024 02:00:39 +0000
ROA not after:            Tue 04 Mar 2025 02:00:39 +0000
asID:                     3356
IP address blocks:        20.154.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:17:05:11:53:a1:6a:5d:b8:cd:53:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec  4 02:00:39 2024 GMT
            Not After : Mar  4 02:00:39 2025 GMT
        Subject: CN=40e28ced-8637-480d-b8d6-d01c88879fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:aa:96:8b:41:a7:d2:29:b2:b0:84:27:61:
                    c5:ba:12:74:8e:a8:27:ea:e8:06:8e:28:17:f1:56:
                    04:a0:2a:64:39:66:13:e5:f4:cb:ee:05:c8:28:2d:
                    d7:30:d6:e7:53:a5:03:a4:a6:57:42:89:6f:68:ea:
                    77:7b:33:63:22:ae:ab:60:b4:43:31:f1:8a:6e:0d:
                    f0:d0:30:2d:a9:dc:e9:4b:0b:53:16:b1:f3:b5:7d:
                    fb:00:8b:fe:44:cc:dc:9a:a2:a5:76:65:f5:f3:b6:
                    2c:2f:fe:2e:15:1b:7b:87:80:34:ad:51:b5:de:35:
                    b1:8d:3f:b2:c4:61:75:96:57:55:ac:19:a5:b4:2b:
                    e5:79:be:d5:5e:e3:7b:09:6c:5b:4e:ba:ee:dc:cb:
                    fa:ed:d8:bb:ac:60:43:f2:c0:f8:7d:0a:ca:67:54:
                    7d:77:70:9c:38:ec:52:ae:a9:a0:cf:5b:98:59:26:
                    11:99:60:37:fc:10:d5:b8:87:52:c1:06:f2:c7:a6:
                    c7:94:82:8f:d8:f0:ea:56:96:91:35:9b:2e:bf:ba:
                    43:8c:bc:ba:92:96:ec:4d:b3:0e:9a:ae:04:a3:e8:
                    f0:ce:e2:98:d0:ca:92:61:08:a4:63:94:a8:4d:09:
                    d3:8b:04:05:5f:19:88:5f:56:e6:59:fc:9e:8e:7c:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:0E:BD:3C:2C:52:45:A0:DE:AE:38:8D:BF:81:42:AB:0C:4E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.154.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:79:eb:ae:77:b9:fd:5b:08:eb:3a:a6:02:15:51:90:bf:87:
         c0:cb:ed:15:e3:d7:ca:a3:d6:53:29:7c:8c:0c:cc:8b:3e:33:
         a6:b0:28:91:59:51:d4:94:20:70:3b:d9:52:d1:b7:0e:60:e5:
         8c:05:94:b1:d0:77:87:6e:b7:38:fd:1c:f8:37:10:60:ad:d6:
         bd:c7:ec:77:87:a6:d0:20:ea:5f:a6:d4:9f:43:b5:6f:6f:eb:
         ad:41:06:c4:55:7e:89:ac:d3:71:cf:2a:af:08:af:1a:9a:de:
         b1:bb:de:ad:d4:8f:9f:e5:cb:87:1d:52:00:e4:d0:eb:47:ee:
         b4:96:1b:c2:ff:c8:d4:46:6c:4f:cd:80:24:c1:9d:c2:c2:f4:
         ce:b7:b5:56:ab:63:78:5c:74:7c:b3:07:ed:5c:97:b5:96:7f:
         d0:a4:7e:ba:a5:dd:56:0a:8a:9d:03:25:99:86:60:c5:d0:a3:
         aa:63:34:2f:27:89:c7:66:aa:9f:cf:8b:0d:df:70:f4:1d:ea:
         de:16:4b:9c:41:47:14:8f:d6:00:68:e2:c0:9b:72:ed:e9:37:
         75:60:5c:66:67:a3:a2:1e:57:cf:ca:c5:2c:90:fe:3f:00:a4:
         b8:ca:dc:b7:e8:8f:9d:f5:c6:c6:5e:e7:5a:28:b4:db:45:8a:
         e5:6f:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:55 2025 by rpki-client