Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c22290e3-fbdc-363d-89d8-44e46a1d4e3f.roa
File:                     c22290e3-fbdc-363d-89d8-44e46a1d4e3f.roa (raw, json)
Hash identifier:          rF/rcuWTZ3VTb/GZTsofGrV7DFNCO1Tsun7o8ixTD2s=
Subject key identifier:   BF:87:AE:E8:82:95:89:6D:88:2B:0B:CC:61:3E:AF:85:7D:B8:E5:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C125BE2AEFBC0EADDCE5880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c22290e3-fbdc-363d-89d8-44e46a1d4e3f.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        174.173.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:5b:e2:ae:fb:c0:ea:dd:ce:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=35e86447-f38f-4d43-96ac-4c3d43210243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:2f:11:52:05:74:2c:fb:4b:5a:63:67:42:
                    db:06:a0:b8:e7:36:7d:60:a5:10:4d:14:d5:f1:4d:
                    82:59:f7:7e:8e:06:5e:2a:3e:81:30:eb:43:30:43:
                    38:5f:3b:47:9b:aa:aa:93:af:91:99:1a:ec:46:7c:
                    51:e7:45:98:82:07:d3:06:49:af:bd:89:33:7d:ac:
                    d5:2e:97:99:69:7e:2e:9a:ed:eb:b4:08:dc:f2:04:
                    82:29:a1:40:fc:69:18:cb:e1:ba:55:8b:02:b7:45:
                    8d:26:e0:8c:37:2f:3e:fe:ad:76:05:9c:90:29:6c:
                    52:41:1f:53:f7:c7:a5:11:81:4f:e4:18:a5:ed:3e:
                    70:7a:fe:25:b4:ee:a4:d0:67:36:bd:44:91:bb:2d:
                    d4:74:91:66:95:2f:a8:8c:3f:4c:28:5b:1d:f3:7f:
                    cf:07:99:ed:b0:ab:c3:1f:bd:a7:35:e7:43:f9:6b:
                    f7:8a:30:ec:34:2b:19:ec:93:97:86:85:a0:42:43:
                    ab:38:26:5d:bc:39:ea:c3:be:f5:37:79:4a:90:20:
                    b5:db:8f:e0:b4:8f:2f:be:96:76:74:91:38:27:13:
                    f9:a9:70:8e:e6:41:4c:59:e9:8b:ec:f2:b8:71:dc:
                    97:bc:f5:3d:87:d8:8e:0c:e7:e8:8a:b9:63:25:5f:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:87:AE:E8:82:95:89:6D:88:2B:0B:CC:61:3E:AF:85:7D:B8:E5:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c22290e3-fbdc-363d-89d8-44e46a1d4e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.173.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:79:cf:bc:80:47:a7:70:63:bc:6a:ed:38:fb:37:15:da:1d:
         15:a6:5c:a5:63:4a:79:e2:d8:d0:1a:64:72:8e:b2:10:40:68:
         a4:7e:7c:5f:87:1b:89:b0:03:2e:4e:f9:22:8c:02:dd:8b:6d:
         0b:eb:36:02:a6:c4:7c:c2:88:e1:43:84:81:e2:f4:d8:c6:c2:
         a4:21:f6:a7:0b:48:14:4b:3c:bd:76:6d:c7:11:b3:52:a6:27:
         bc:6b:cc:93:a4:fe:84:cb:b6:40:4a:d7:ff:54:d9:e6:c9:50:
         1b:67:8a:2d:4b:89:df:86:a1:c3:1e:41:5f:fb:1d:ba:ca:53:
         38:37:73:2a:28:14:f4:f5:7b:36:2e:74:6c:7a:1f:03:50:de:
         0a:7c:6d:6b:63:77:ad:82:eb:dd:32:54:a8:70:8f:67:be:44:
         62:74:a4:df:94:9b:35:bf:4d:4b:fb:cf:c6:94:f6:a6:d9:c1:
         ad:62:6f:f4:38:77:1e:fb:6f:23:5b:ea:13:68:5b:ec:08:15:
         7b:46:26:63:8c:14:19:b5:71:64:ed:5e:16:dd:de:c9:ce:39:
         b2:a2:45:19:43:ca:df:be:11:3a:a9:43:69:f8:c0:62:af:73:
         f3:e8:f9:43:1e:e9:71:01:4c:4e:71:9c:d3:33:74:e5:28:49:
         37:12:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:04 2025 by rpki-client