Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa
File:                     746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa (raw, json)
Hash identifier:          68g3LOr9ygf8VIsxhH4gYUM7BB0ycRFuQaTz9Dteu08=
Subject key identifier:   91:74:D9:7E:64:86:19:FF:38:4F:A2:F2:59:B7:9F:3D:20:5F:FF:C8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154FDB94B5254D8925ADC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        74.220.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:fd:b9:4b:52:54:d8:92:5a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=de5172d0-d890-4666-96eb-b7c4310740b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:ae:20:06:0f:97:41:e1:a8:c8:84:e4:92:
                    6f:56:0a:46:ca:60:7a:de:11:6b:e5:14:46:af:48:
                    e0:e9:99:97:e0:fe:b2:51:7b:4c:e3:15:b3:a9:30:
                    14:ca:13:be:db:d4:da:44:8a:93:5e:f9:84:fa:73:
                    11:33:d1:99:36:14:8f:2d:65:1a:6e:2b:67:3d:f7:
                    18:52:9d:00:78:6e:73:a6:f7:b4:7d:75:eb:42:cb:
                    58:a2:6f:16:e4:bd:67:79:a3:8b:06:07:ef:45:86:
                    d2:56:f1:f6:6c:4d:e8:c1:bc:99:ff:9e:9b:01:2f:
                    19:f9:03:f7:a4:e7:35:5b:d3:c4:7d:49:47:76:56:
                    59:81:64:8e:51:12:7c:1e:91:7e:d1:77:53:3d:d3:
                    61:c3:8f:a7:45:ba:e4:92:fd:72:f4:09:40:0c:5c:
                    c7:6a:0d:79:48:ba:57:5b:b9:9a:08:32:b0:e0:27:
                    15:d9:24:f5:56:85:52:3e:59:36:f6:d7:39:1e:37:
                    8c:fd:01:d7:4f:d4:56:19:35:8f:c3:38:48:a9:3b:
                    f2:fa:66:9a:31:99:37:c7:87:d7:c2:36:f8:5a:d4:
                    45:b7:9e:0f:73:df:4f:8c:53:af:10:b8:28:49:5d:
                    80:5d:e6:98:ee:be:2e:2e:d8:67:9e:54:07:0a:4d:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:74:D9:7E:64:86:19:FF:38:4F:A2:F2:59:B7:9F:3D:20:5F:FF:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:91:e5:df:fe:09:4e:80:4c:19:69:94:6a:94:59:60:49:
         15:c9:44:af:5a:f4:35:bb:fa:6b:87:f7:50:02:10:d4:ef:02:
         5a:10:74:d1:f2:db:42:07:f1:8f:50:d7:38:8f:98:4e:6b:9c:
         7d:2f:6c:a3:8c:02:f5:85:75:ed:26:35:7c:49:bd:bb:a0:f4:
         c5:cc:22:06:df:05:98:3d:98:d8:7c:7d:f4:b6:bf:bb:e4:f9:
         b0:7e:ca:fc:42:fd:c1:53:b6:ca:9d:46:33:10:7e:6f:a9:b0:
         6f:11:17:54:23:e5:f4:87:12:b9:fb:b4:58:e2:5a:0d:2d:51:
         37:65:cb:c1:8a:b3:a8:7e:60:e9:15:a2:bf:dd:1b:54:7a:9b:
         08:cc:9b:59:88:3c:44:9f:6a:23:b0:e2:9e:99:91:ad:40:09:
         1d:7b:e4:45:96:c3:f1:b2:a5:6b:ef:74:cc:9b:90:53:f8:9b:
         12:a2:14:bc:d3:71:e5:a3:0d:7a:bb:53:9b:39:52:c3:0a:aa:
         5a:d5:c3:ee:cd:b0:62:27:35:83:15:dd:5a:29:37:af:33:7f:
         96:8e:4f:ff:f4:88:1d:c8:1d:03:7c:93:42:a1:a7:2d:04:ec:
         c6:cc:7b:d8:8f:29:1d:d0:7f:95:4e:9a:33:39:00:11:3d:aa:
         90:ac:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:09 2025 by rpki-client