Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa
File:                     4a20907c-8789-30e0-8b4e-fbd791134a9f.roa (raw, json)
Hash identifier:          FCgi11BbJRovLjfZZgYqV1vnttdpxdbZtygfTSf9OwM=
Subject key identifier:   0B:20:F5:87:DD:79:83:9B:78:3A:EE:B8:F5:02:B5:D9:13:85:C4:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F15536799871C1993D400700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        173.189.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:36:79:98:71:c1:99:3d:40:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=034c028c-134f-4b37-9b33-cda6f00aa7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:b0:03:ce:15:e3:51:65:d8:3c:92:3d:eb:
                    23:71:23:28:05:e3:6e:c4:7d:c8:35:3d:23:b0:4f:
                    b5:5a:ef:64:6e:a1:99:aa:28:fd:e5:fe:f2:b6:bf:
                    11:45:3b:9e:eb:06:cb:5a:f5:01:ac:f2:d3:32:44:
                    3c:ec:b8:3e:dc:d2:1a:8b:bb:61:76:51:9c:c2:4a:
                    c2:d6:43:81:1f:a7:a7:05:4c:ae:9f:a3:4c:39:52:
                    27:8e:ce:f7:0b:1a:06:81:c8:a2:06:f0:89:c8:54:
                    78:f9:30:aa:54:bd:19:cf:d5:1e:a2:64:b7:fd:59:
                    d2:06:45:33:ad:6b:d9:ce:3c:33:4f:5a:5b:49:f0:
                    d9:9a:c4:ae:ca:7a:81:62:6f:8a:5c:ab:20:ff:93:
                    50:b0:4d:79:91:b7:8a:5b:6b:15:2b:e0:2b:f3:22:
                    d6:83:ff:15:12:78:06:0d:16:45:e2:a5:46:20:23:
                    a9:8a:d7:d9:52:be:45:90:4f:aa:7f:b8:2e:54:90:
                    41:f1:77:96:a3:14:d1:f6:60:34:df:39:e2:10:5d:
                    ed:5d:a0:7b:49:68:43:ea:d8:2c:46:35:30:c7:27:
                    fe:b2:7f:e5:be:8e:04:8d:06:69:f1:e2:79:0b:e4:
                    10:95:ff:f9:80:a1:ed:bc:08:4c:02:11:85:d6:1d:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:F5:87:DD:79:83:9B:78:3A:EE:B8:F5:02:B5:D9:13:85:C4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ca:af:e7:44:ab:3a:5b:2a:78:41:a3:05:4b:a7:fb:84:a2:
         32:c7:a5:4a:2b:bd:bb:ac:bc:fa:3f:ac:b3:81:89:b1:4f:5d:
         e5:19:ae:fd:7e:fc:d3:be:eb:43:9b:4d:26:36:46:3f:52:3c:
         fc:d7:a0:90:f4:9e:76:01:0f:0d:67:5d:81:18:e6:ab:8a:89:
         15:d7:db:cd:0c:3a:4a:c5:1a:bd:f2:d0:99:1c:4d:06:15:00:
         74:c9:27:f7:42:e2:c7:76:95:e3:19:ae:fe:dd:a2:f6:41:0d:
         f6:43:9c:ed:8b:eb:6e:42:94:b1:34:9d:22:fa:ab:65:a0:9a:
         e6:a2:1a:df:83:a0:c1:50:16:f9:6b:4e:1d:25:a3:47:43:5e:
         34:24:eb:e5:b1:0a:16:d6:62:c9:c6:9a:d6:9a:6c:83:c0:c6:
         49:fc:47:7e:24:19:44:b7:31:41:4e:b3:29:56:dc:2c:d9:fd:
         c0:5e:df:15:12:e2:f7:6a:8a:87:ad:18:9d:ad:ff:09:48:a2:
         69:6a:9b:5e:3d:19:a3:2c:e6:c4:b2:dc:e3:c1:5d:a5:ed:a6:
         9e:cb:87:84:96:48:48:ae:28:37:9d:5f:75:22:7f:75:04:99:
         82:21:cb:78:1b:c4:24:08:57:a4:b1:05:f8:43:3d:0d:77:ff:
         c1:f9:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:19:38 2025 by rpki-client