Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
File:                     abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa (raw, json)
Hash identifier:          WfUuPyFCPKgTAUAz8AJgPckG1Zz4yo1W1OqwoY9mioA=
Subject key identifier:   13:AD:CE:21:92:46:A4:D4:C9:BD:C6:29:D9:AA:14:8E:3F:CC:92:57
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858481C9A97AA2B7AA90412589D28
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     396982
IP address blocks:        74.221.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:97:aa:2b:7a:a9:04:12:58:9d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=f4184712-11b2-4653-8af7-75f21393d28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:d4:62:78:d9:64:1e:77:f9:e0:76:8d:e0:
                    fd:8b:80:be:92:8d:bc:07:40:48:4d:25:87:63:9d:
                    f5:31:75:37:4b:03:b7:a9:48:e4:8f:a8:d0:23:b3:
                    ff:df:38:83:d6:95:eb:07:e0:75:7f:cb:33:93:58:
                    c1:2a:7b:e9:2e:8a:a5:93:42:b6:6a:fc:2e:f6:30:
                    f9:ff:65:b1:a8:28:eb:c7:61:51:9f:92:d7:c9:e3:
                    88:3e:9b:2a:a6:9a:66:38:38:54:d6:9e:45:f6:f5:
                    5e:69:e1:cf:ac:3f:04:57:5a:b6:c3:be:7c:af:50:
                    dc:84:a0:e8:64:da:95:63:fb:c6:85:a8:9e:bc:4c:
                    ee:37:2c:ee:99:df:de:e2:92:5c:de:f1:fd:ab:67:
                    8c:e1:fa:ca:7a:4d:cf:d6:9d:41:34:f0:81:ea:2c:
                    7e:f2:e3:3f:b2:69:c6:a9:a5:57:ac:00:c0:2d:f5:
                    24:36:a2:d1:45:51:e6:63:e7:87:c1:64:97:22:ef:
                    16:16:32:f6:00:99:b5:54:f4:6f:74:98:68:b4:66:
                    09:a5:ec:f6:65:78:2d:e2:40:df:c1:c9:e7:ed:6c:
                    68:05:39:1f:6d:9f:e6:ff:2b:63:74:56:9d:6b:67:
                    b3:f8:10:47:54:40:5c:b0:fb:f5:3b:7d:23:b6:96:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:CE:21:92:46:A4:D4:C9:BD:C6:29:D9:AA:14:8E:3F:CC:92:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/abf7ba58-34fa-38d0-9ff3-bcfab1cc7ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:69:51:47:5d:42:48:bc:56:ba:a4:95:93:5f:fa:4c:9a:
         4c:ff:51:db:47:7f:fa:24:44:41:28:4d:e9:34:53:f2:ec:6f:
         da:05:00:2d:68:bc:65:2d:51:e9:39:96:e6:02:42:08:db:9c:
         fd:15:07:a7:a0:9a:63:21:07:f0:62:62:87:ae:71:e9:98:3c:
         d3:fe:07:fa:0a:6b:9d:53:48:24:e6:2e:d1:df:17:86:57:54:
         aa:51:86:8a:83:74:ef:e2:7e:74:c3:0f:7c:7f:ec:e9:93:4c:
         81:95:f6:3c:d5:b9:18:ca:ae:1d:df:2a:43:5f:d5:78:9d:2f:
         cb:99:fd:ce:ef:46:87:75:91:9b:e8:10:50:61:c7:4d:04:6f:
         16:da:67:48:b8:d6:73:3a:36:f2:4e:3c:2f:15:ea:1f:0f:a9:
         e0:e3:1c:f8:8e:f4:6f:7c:10:4d:03:41:73:55:ef:33:35:43:
         d5:3e:0f:13:9f:02:62:87:20:91:51:89:a6:7a:c2:ee:f0:d2:
         20:7d:7c:3e:af:8e:d0:46:9a:2e:7c:59:33:7d:e6:8a:88:1b:
         77:1c:17:6d:a2:bc:87:1f:b0:cf:c3:ae:05:68:62:ff:49:86:
         1e:e4:e4:f8:b9:9c:77:cf:b0:53:2c:0e:f3:cd:6f:9d:33:7d:
         39:6b:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:51 2025 by rpki-client