Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/70f770ec-edbd-336d-af1e-2b599d37dfef.roa
File:                     70f770ec-edbd-336d-af1e-2b599d37dfef.roa (raw, json)
Hash identifier:          LmEYO+GyHCru/yEL5A7x8/RKN5MAFH0hcJFJO9oRzPQ=
Subject key identifier:   60:C3:D8:6D:90:C2:64:AB:FE:88:B0:BE:7A:75:BE:18:75:EF:C5:66
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F43285848037B6131822F13D6E0618D80
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/70f770ec-edbd-336d-af1e-2b599d37dfef.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     26968
IP address blocks:        74.121.32.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:61:31:82:2f:13:d6:e0:61:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9e717503-b82f-49bc-ac0d-8b1f344c99d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:71:c2:c6:0f:4c:e3:51:f2:b5:dc:4b:ff:
                    68:74:49:81:51:df:0f:c2:c4:b1:02:5d:40:14:c9:
                    0b:e1:f2:4d:ec:5f:0b:67:e4:9b:e2:25:0d:d7:ec:
                    71:15:c1:0f:5e:05:34:e8:41:19:b6:e1:46:7e:44:
                    95:87:31:51:16:df:bd:8d:57:24:9c:3b:3b:b6:81:
                    db:b4:c5:e3:45:23:3f:66:f2:e9:0a:cb:9f:86:66:
                    33:d7:1c:4f:a8:f6:41:ab:9f:40:ed:37:ed:91:81:
                    37:ab:54:76:61:9e:33:4e:31:62:e9:4b:ee:69:a1:
                    67:a8:21:b3:66:3e:ee:55:82:43:2e:08:c6:16:3e:
                    94:ec:84:ef:33:3c:16:76:09:7c:06:bb:8c:48:e2:
                    a5:32:06:4a:17:12:bd:7a:0c:38:c1:fa:88:00:0a:
                    b4:a5:86:27:78:35:52:a8:f9:e2:d6:01:0d:02:db:
                    92:93:2a:18:d3:a1:85:d8:b7:33:92:a1:d2:94:ab:
                    2c:38:0b:a3:72:41:fb:32:34:11:5c:79:7c:63:81:
                    44:97:3c:e6:7f:db:d9:d5:41:59:72:97:77:d7:72:
                    ad:5c:92:4f:17:84:d4:9a:47:f9:3d:63:22:13:fe:
                    31:85:f5:38:7d:87:8d:45:93:f0:d6:37:06:b2:a6:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C3:D8:6D:90:C2:64:AB:FE:88:B0:BE:7A:75:BE:18:75:EF:C5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/70f770ec-edbd-336d-af1e-2b599d37dfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:91:1b:9d:0d:53:52:fd:5c:98:aa:8a:d6:aa:f4:31:d9:d5:
         a7:73:49:78:25:14:98:16:28:9d:f8:81:98:58:ba:f5:43:3c:
         bf:82:e0:31:16:9a:9b:5b:d2:0f:82:2d:63:01:45:b3:15:6f:
         b6:0b:75:e4:99:6c:ef:67:82:1e:93:c4:44:ac:0a:e2:c6:43:
         18:31:18:4c:a5:b8:d8:83:e0:40:14:e6:d3:a1:eb:40:24:d6:
         f1:cb:26:06:90:bc:4b:0b:be:53:f3:dd:4b:f9:5a:f0:72:a2:
         9c:84:fd:66:ff:d1:2c:06:ee:2a:a5:a4:2d:b7:74:45:be:32:
         9e:8e:ad:17:5b:2f:2e:7c:83:7b:2b:46:8b:50:b9:9d:6d:c6:
         c8:73:9a:3b:b1:a5:f8:5b:16:ca:7b:5e:69:4d:6f:92:03:5d:
         de:80:9f:c7:a0:98:d9:d9:e6:19:32:44:60:d9:ee:df:b3:17:
         9d:96:41:9c:bb:c5:3c:22:60:9e:dd:67:69:ef:9b:2b:8f:40:
         63:62:a7:87:3f:8e:50:2b:15:33:05:fb:96:fd:44:fc:99:c3:
         23:79:52:19:36:5c:92:a0:3b:e9:38:9d:fd:c4:d3:86:0d:f3:
         62:de:ee:73:30:90:1f:44:dc:f0:a9:34:be:31:64:0e:68:c2:
         59:e0:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:41:56 2025 by rpki-client