Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa
File:                     3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa (raw, json)
Hash identifier:          F92ZPtNiaEgzax1mCLJxfAGya69v2mbTTmKnxVvnVNg=
Subject key identifier:   6B:62:2B:0E:C2:05:D4:11:E7:B8:6C:61:BD:47:9F:60:4A:0E:4B:D3
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858486D9060A941F905EF378CEFC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.220.229.144/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:60:a9:41:f9:05:ef:37:8c:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=5fe190d3-23ac-4e96-8941-6c1468026174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:de:d8:20:b5:a2:b2:c3:34:1e:ec:4d:33:
                    6e:75:e4:85:42:c5:0a:84:3b:54:78:8b:2a:ba:5a:
                    a4:42:2b:2b:2d:08:9d:89:73:b1:09:b2:06:e3:fb:
                    71:c9:e4:25:09:22:9d:9f:a3:a7:de:60:d1:5d:42:
                    8a:1b:b7:16:53:33:10:3c:06:c9:bf:9a:3f:ca:1e:
                    bd:56:68:bd:4f:47:2d:57:7b:be:14:5e:3f:7b:b1:
                    39:d0:b2:17:e4:22:e7:08:34:38:da:c1:da:c6:55:
                    e1:76:f2:17:b3:7d:22:83:57:a8:be:7c:4c:11:fd:
                    51:6c:41:f4:f8:f0:ac:f7:d9:b6:3c:af:6e:4d:3e:
                    c7:b0:4f:70:f5:36:28:b4:9c:99:12:72:ce:7a:08:
                    a1:4d:9c:66:f6:bb:be:5a:49:61:0f:46:8d:05:20:
                    f4:63:c1:de:90:59:91:d9:58:82:60:18:f3:28:d6:
                    54:c4:8a:a8:4e:82:e5:8a:f6:0d:79:e4:35:8c:7f:
                    ca:c0:12:38:83:e8:2a:9b:95:9b:f2:21:1e:45:bb:
                    72:73:e9:c3:1b:9a:d7:af:6b:0e:ab:80:fb:98:55:
                    2d:48:04:41:89:fb:fc:d1:4a:ca:54:0a:69:32:c4:
                    31:0e:b1:91:08:b4:0f:a4:ca:0f:c1:82:bb:88:24:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:2B:0E:C2:05:D4:11:E7:B8:6C:61:BD:47:9F:60:4A:0E:4B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3b03fa34-49cd-368b-8ac7-eadebd73f8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.220.229.144/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:22:1b:d6:6e:af:cf:f0:96:d4:29:bb:e2:68:e2:f8:3b:67:
         59:8d:d8:c8:a7:82:44:7b:c4:53:6b:ed:0a:96:f3:c1:6f:6f:
         0e:6d:57:1f:68:79:9d:7c:b2:fa:c7:6b:36:06:4f:70:a4:a8:
         68:e8:69:37:f1:ba:cd:31:87:02:94:17:30:25:bc:78:ff:db:
         cd:dc:9a:d0:e6:1b:88:e9:2b:fc:ea:e2:50:d0:8f:db:b9:c3:
         d0:43:98:6d:f5:a4:f2:76:b7:7b:ef:46:63:8f:8f:0d:cb:ea:
         4c:ba:e4:6c:da:74:da:4f:9c:6b:1d:27:d7:2c:f2:bf:b4:cd:
         5d:96:73:e3:8b:18:18:90:b0:49:2d:f9:6b:fb:82:13:c2:4c:
         7e:48:ff:2b:6f:11:b2:9a:0c:7d:37:bf:79:61:40:45:3a:84:
         2c:d9:98:fc:8a:66:9a:f8:1f:c3:37:57:1b:61:7f:95:af:01:
         e1:5f:f0:da:84:85:8b:9a:58:2a:0a:3c:3f:14:a8:62:21:b1:
         08:df:8c:1b:c4:4e:e8:b1:e6:e2:ca:52:ce:63:f1:aa:d6:9b:
         c4:64:ab:0c:d0:cf:97:b5:3a:25:7e:c3:f6:1b:1c:f2:79:63:
         e5:c5:f1:c2:71:30:58:d7:ac:8a:48:f7:83:c5:cf:f8:90:40:
         31:71:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:45 2025 by rpki-client