Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0706b40f-46f2-3e21-84a1-ca5c80c898d9.roa
File:                     0706b40f-46f2-3e21-84a1-ca5c80c898d9.roa (raw, json)
Hash identifier:          eTzxKyFU7Lst6WKxYFHhU5SnqI9EW185FCZQOuKhMqs=
Subject key identifier:   79:D9:C3:11:C4:01:EB:3B:1D:DB:AD:95:E6:0F:2B:E8:9A:CC:D5:B8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847E0950018B130ADA17237B000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0706b40f-46f2-3e21-84a1-ca5c80c898d9.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     7029
IP address blocks:        173.188.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:95:00:18:b1:30:ad:a1:72:37:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=730a99a0-eab3-465c-80b6-1b562f111085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3d:16:a9:ea:20:14:01:c8:04:07:be:86:48:
                    96:36:84:d2:9a:ae:3e:05:da:93:f4:59:00:a8:f0:
                    3b:9c:74:09:f9:89:4a:da:e2:2f:28:46:f6:33:db:
                    ef:d5:3e:4a:c7:09:3b:ea:00:85:ba:17:ac:79:7c:
                    ea:75:b7:af:96:57:42:49:8a:06:68:3a:76:3d:c8:
                    35:ac:75:47:b0:ab:04:ce:ea:a4:e9:96:18:c9:89:
                    b1:6a:91:14:d2:bf:db:b2:0c:c5:bd:1c:aa:0d:e3:
                    32:36:47:41:6d:f1:c0:bc:74:46:4a:bc:92:30:0d:
                    bd:8a:74:c1:a0:ab:fb:31:e4:e7:8c:8c:be:ef:03:
                    07:6a:04:25:b7:02:d2:4f:ea:d6:32:d9:9e:63:0e:
                    0f:87:f2:8a:c0:fb:b5:34:81:db:2c:41:cd:4b:4d:
                    2f:8d:6d:91:22:d3:fb:15:b1:ab:c3:0c:6d:aa:ea:
                    62:76:cf:a1:85:d8:90:a6:a5:0a:12:4b:bb:81:ba:
                    17:32:de:36:4c:26:f8:29:76:fc:ae:8d:35:07:ae:
                    e7:c8:df:3e:bc:92:7e:1f:77:9a:66:45:64:2d:12:
                    bb:d7:26:8a:74:74:a5:1a:f0:65:ed:6b:80:a3:81:
                    ab:93:bb:f7:9a:4d:f9:b1:ef:7c:0b:e8:42:61:a8:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D9:C3:11:C4:01:EB:3B:1D:DB:AD:95:E6:0F:2B:E8:9A:CC:D5:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0706b40f-46f2-3e21-84a1-ca5c80c898d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:86:0f:11:7c:f2:4e:12:82:3e:61:10:78:75:7d:91:a3:
         ab:12:58:e0:74:d3:50:1a:fd:1b:9b:49:22:63:e6:34:9a:f2:
         39:b6:e5:be:44:12:a0:29:8a:48:a6:94:72:e4:2e:ba:71:c0:
         11:54:dc:c4:95:a0:6c:b8:9f:fb:21:95:5e:27:af:09:13:bd:
         eb:b1:66:61:51:be:d4:86:b5:57:3c:7b:6c:8d:29:79:9e:46:
         85:91:4d:44:d0:bb:fe:27:6d:96:1a:d8:5c:04:a1:88:34:c9:
         b2:8c:c5:0f:34:f7:ae:20:57:f3:53:c5:0f:2d:38:66:3f:0b:
         b5:6f:ab:a9:55:37:81:a0:39:f9:eb:b7:ae:60:4a:15:c5:d0:
         69:c2:5f:a6:db:35:1c:e3:2f:83:3c:0d:2a:26:71:42:36:97:
         58:ee:8a:e2:37:58:6b:bb:ff:38:8a:f7:e8:74:bd:e5:e5:ee:
         b7:7f:03:09:b9:62:35:c4:d1:08:f3:36:6e:84:4c:0c:6c:4f:
         13:af:62:3e:1d:5e:0a:d8:76:a3:0d:74:72:8a:cd:47:7e:09:
         20:6b:3d:51:56:6d:42:52:c1:b3:16:05:a2:69:14:ae:9b:66:
         58:da:0d:83:59:99:75:e1:f9:25:00:9a:f1:bb:c8:68:d8:28:
         b3:37:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:48 2025 by rpki-client