Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ac018be-94f5-3e17-9404-9b293c7c6c64.roa
File:                     6ac018be-94f5-3e17-9404-9b293c7c6c64.roa (raw, json)
Hash identifier:          /rwgdIVg/lQiA35a9Tv3qE+KGeqaqy17wS69vRQxNbk=
Subject key identifier:   19:24:80:71:95:EC:11:1F:5D:B6:B1:D4:22:61:9F:75:66:8E:0C:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143EF6B6A446E596795B2000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ac018be-94f5-3e17-9404-9b293c7c6c64.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        174.162.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:f6:b6:a4:46:e5:96:79:5b:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ae1bf83c-90d7-49ef-8146-249affaca792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:1c:28:32:ad:43:67:1f:bb:a6:b4:f8:47:
                    31:71:92:01:f3:29:14:48:de:a3:3b:e2:27:9d:6b:
                    57:53:09:5c:b0:c8:2d:1a:b6:1a:74:e3:51:c2:29:
                    14:f1:98:26:f0:d9:2f:6a:1d:1d:66:19:1a:0c:ca:
                    c3:9a:c4:b2:b7:b0:10:fa:1c:60:1c:cd:4e:b7:8c:
                    04:a5:12:e6:56:19:08:1c:50:03:89:a7:ed:6b:c0:
                    ef:1c:ad:51:a6:16:81:6e:e1:18:45:41:de:8d:a4:
                    ce:2e:24:f7:df:e7:79:07:c0:6d:df:c8:28:ed:d2:
                    a8:ea:f8:56:d6:0b:be:08:6a:07:83:a0:d0:81:97:
                    01:f6:2d:b8:f5:1f:cb:6f:1d:27:af:ae:98:e4:cc:
                    b0:4b:c5:4a:0e:2a:37:d1:e1:b2:cd:0d:00:79:7b:
                    3d:11:b1:e5:5a:cb:4b:d1:d9:13:69:44:46:3d:70:
                    0b:fc:42:f0:5b:36:62:5a:57:80:f7:4f:b7:aa:32:
                    15:86:bb:c7:f9:5a:14:a1:66:a6:43:7d:66:1b:83:
                    d8:b6:90:ef:7a:67:2d:81:f8:bc:b0:e1:7f:fe:d6:
                    fe:cd:50:bc:41:d2:ac:69:af:2f:f7:c7:f0:0b:b7:
                    f1:52:ce:27:3e:ad:b7:27:ca:35:40:22:12:8a:33:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:24:80:71:95:EC:11:1F:5D:B6:B1:D4:22:61:9F:75:66:8E:0C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ac018be-94f5-3e17-9404-9b293c7c6c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:23:7c:fe:35:32:ca:41:87:28:39:61:7b:dd:b8:d1:44:
         69:6d:b4:d0:81:d6:87:3d:e0:85:bf:cc:0b:ad:26:d7:7d:54:
         64:0b:04:22:a3:3a:e5:81:f4:6b:48:d9:42:e7:cb:46:c1:b8:
         e5:ca:ee:0f:78:18:27:e8:49:15:ad:ca:3e:fb:f8:a5:18:f5:
         01:c8:0b:d9:dd:bf:5a:1f:cb:71:36:d3:d1:f3:d0:9a:5a:c6:
         0a:5a:7c:c6:07:2e:05:28:50:60:fa:5a:3f:51:05:a1:66:b4:
         5c:29:24:07:9f:9b:32:fb:aa:bd:6f:9e:83:ea:95:5e:bf:60:
         18:7a:a4:7b:69:d2:88:c9:d0:4a:3d:4b:90:76:5d:38:c3:6c:
         a4:14:ac:c1:e6:d2:e5:6b:94:ad:76:ab:03:2a:43:72:20:63:
         31:02:50:20:55:bc:84:a8:0c:22:36:cf:48:d8:97:b4:6c:21:
         21:69:e5:35:09:6b:d7:07:cf:f9:eb:5c:a0:a6:de:44:19:72:
         e4:5e:5e:05:f3:4a:4f:e3:3e:ae:f4:89:76:12:5d:c8:a0:a5:
         86:e1:b2:be:40:7e:e7:6d:01:aa:64:ad:8e:f1:18:dc:84:d0:
         d7:7e:d1:b5:f6:ec:0e:20:51:5a:d8:44:d4:1a:2a:a8:44:20:
         ba:68:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:15 2025 by rpki-client