Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa
File:                     e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa (raw, json)
Hash identifier:          QHcjsvuYx1BkW3LTyzFfr8jct7e0DUz7je1tF5sRQVo=
Subject key identifier:   B4:96:1B:19:47:62:49:59:8D:47:AA:2B:91:F3:D7:DC:68:50:10:3A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584877514F4D8D7936E106C35F90
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa
Signing time:             Tue 07 Jan 2025 13:51:55 +0000
ROA not before:           Tue 07 Jan 2025 13:51:55 +0000
ROA not after:            Mon 07 Apr 2025 12:51:55 +0000
asID:                     7029
IP address blocks:        174.130.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:51:4f:4d:8d:79:36:e1:06:c3:5f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan  7 13:51:55 2025 GMT
            Not After : Apr  7 12:51:55 2025 GMT
        Subject: CN=3ef9f7c6-9328-4d55-a176-a655a7b3931a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:86:88:1e:0a:a1:0d:02:75:74:79:06:1b:
                    4f:cb:bd:53:46:68:d1:1f:fb:a9:9c:41:de:11:48:
                    56:21:0b:d3:ed:50:84:75:a4:a2:a1:da:21:95:d2:
                    90:f6:d3:35:a2:1a:08:19:84:5d:74:04:15:c4:fc:
                    bb:88:4d:f2:c8:6b:65:24:9d:80:c0:c4:e6:61:d6:
                    5b:84:0c:51:44:74:b5:fb:30:2d:41:55:5a:52:97:
                    5c:9a:ed:5d:cd:2e:45:6b:a8:f1:71:6c:b1:7a:20:
                    12:92:0c:ae:13:57:89:2f:b8:36:98:20:34:c5:1a:
                    22:19:3b:89:95:e5:3f:48:01:c5:ad:06:3b:f0:24:
                    85:a0:86:5d:8b:08:74:1c:2a:ad:e0:a8:19:47:2e:
                    8a:f4:0a:9d:b9:43:45:cb:fc:57:04:2b:fe:69:99:
                    b9:f2:1a:a8:bd:63:ad:55:17:cf:f5:63:02:86:14:
                    a4:17:ed:1f:69:29:14:92:81:53:aa:d4:85:f5:62:
                    dd:66:56:0b:97:77:16:31:d7:c2:18:03:c9:e8:a6:
                    96:8a:2c:96:4a:fb:6a:6e:59:30:54:c2:8a:b3:c5:
                    4d:5c:b2:e6:c7:73:2d:bc:b5:16:b6:fd:f1:a3:55:
                    de:f8:03:fb:0d:c7:cb:54:55:dc:71:af:54:60:20:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:1B:19:47:62:49:59:8D:47:AA:2B:91:F3:D7:DC:68:50:10:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1c1c622-d8f3-39d9-941c-1d272ecb2182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:94:9d:7d:95:55:08:fe:3d:74:03:d6:b4:2c:57:67:9f:
         cf:6f:46:dd:ab:84:d4:e1:14:c7:c3:9a:98:5a:20:70:4a:55:
         c2:b6:9f:3f:81:50:1d:71:3d:6b:38:53:bf:6e:38:b5:d7:e9:
         97:8b:c6:76:4b:6d:e4:f5:f9:9e:32:a0:63:a6:32:88:83:3d:
         47:a5:69:e2:5a:0e:c0:77:cf:21:0d:fd:90:9b:8a:ea:cd:96:
         39:cc:c8:5d:87:d1:f4:7e:83:a0:ef:49:7f:e5:8c:27:40:6e:
         a6:d6:25:31:4c:8f:c0:80:4d:fa:ea:a0:9f:3f:80:43:ee:41:
         88:7d:49:d0:fd:e5:3d:83:8c:57:27:ec:ff:2e:9f:56:a3:5b:
         c8:ac:d0:cf:ad:32:a6:39:10:8e:d8:1c:35:e6:0d:59:58:75:
         09:9c:8a:c8:a1:17:93:f7:4b:cf:c9:d5:15:97:4c:a4:88:e5:
         1c:dd:3b:68:e2:89:34:98:ec:ff:7f:a6:ba:bf:8d:ea:09:34:
         e1:6c:22:82:27:3c:50:dc:5a:02:06:d7:d0:1b:5f:98:4f:d2:
         2a:c0:7f:a1:60:c8:26:e9:6d:19:26:86:22:83:73:ee:4f:cd:
         b5:f3:a4:21:4e:ad:a0:b7:52:1d:bf:ae:83:0a:bd:ac:01:5c:
         b8:58:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:27:19 2025 by rpki-client