Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa
File:                     490e40f9-36a1-3d80-91b1-b67f36065073.roa (raw, json)
Hash identifier:          NqikdpuTNGqa/HvX9/kN+tuSjY//x+I/XEFTwIqyG5o=
Subject key identifier:   D8:01:C6:B6:EA:DD:AF:8E:EE:72:12:88:50:80:54:04:14:32:E1:1D
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F43285847EA5A13C8562D3BC5CA163E80
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     54668
IP address blocks:        174.137.120.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:13:c8:56:2d:3b:c5:ca:16:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=db82ba2d-3013-4e16-adc2-48af61fc0722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:e7:7a:ac:f2:1f:6a:ca:50:f9:f4:2c:71:
                    90:ae:ce:d0:14:09:70:c1:bf:7e:38:ea:57:28:bb:
                    26:f5:ec:f5:87:11:f8:d9:85:cf:78:15:14:1a:81:
                    26:e8:7c:8e:ec:76:7d:b3:e1:3b:33:64:ac:38:7c:
                    ec:7d:4a:d1:ff:86:17:02:c6:0f:af:65:d6:e6:85:
                    eb:79:f1:6f:80:43:5b:42:b0:22:cc:d9:60:df:9f:
                    3d:a4:72:07:b2:06:7e:a3:fa:ae:a3:49:d3:8e:1c:
                    ac:75:c7:6d:ce:ff:1e:85:23:2a:bc:5d:a4:19:ba:
                    9a:13:39:c2:aa:98:e3:15:1e:a1:e1:de:98:c1:0d:
                    9e:cd:9a:cd:1a:75:94:94:d1:13:1b:e3:95:3f:f1:
                    f4:a4:94:69:46:de:bb:b5:2b:04:27:52:b7:74:14:
                    9b:f9:65:23:d8:a2:28:5d:ec:62:e6:6c:11:6c:d8:
                    06:f8:36:0c:c0:1f:75:ee:9a:ed:d1:14:09:c2:d0:
                    90:d4:98:49:19:59:3b:0e:c9:3c:ca:31:db:af:4b:
                    d4:38:ff:72:51:68:63:42:c7:7c:87:1d:be:fa:54:
                    c8:f3:b0:4f:93:3c:3d:b5:8e:c4:17:9c:5a:66:9d:
                    20:7e:37:cb:f7:c7:a9:70:cb:5d:a1:f1:51:56:e2:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:01:C6:B6:EA:DD:AF:8E:EE:72:12:88:50:80:54:04:14:32:E1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:3e:4e:67:f2:7d:59:36:df:35:ee:dc:a9:a5:a6:10:1a:
         d8:0e:ec:e4:05:fc:2a:0b:4d:db:48:5a:3c:c1:8b:35:99:83:
         bc:0d:e7:5a:92:55:de:c5:0c:e4:94:3a:4f:54:e0:0c:2b:03:
         9f:49:6a:b0:33:29:07:ed:4d:7c:43:89:65:2b:33:54:30:3e:
         b6:ed:6f:7b:9e:20:37:c6:91:77:5c:b1:a3:98:77:1c:0c:d2:
         d4:35:dd:54:ae:7c:85:56:97:63:27:29:73:8c:c9:62:3b:a3:
         2c:81:85:72:81:13:23:68:55:64:ef:07:01:26:29:2a:40:11:
         87:00:13:40:07:e5:0b:fe:ef:48:46:02:f5:1e:15:21:b4:2a:
         0b:4d:7e:c3:f1:34:af:f6:47:00:ca:23:65:b7:9f:53:ab:76:
         02:eb:c0:8e:08:0f:85:db:58:54:4c:6c:c0:f2:05:5d:18:8f:
         04:b9:52:48:fc:26:a9:34:8e:b6:9e:0c:fd:4a:18:8b:0e:69:
         dc:dd:92:90:fe:32:09:2d:ef:19:45:ef:56:9a:7e:c6:a6:3f:
         23:b5:2d:1f:04:2d:3f:17:5a:32:67:d4:05:f5:52:1b:63:5e:
         1c:87:d4:f7:a3:a0:b1:b5:75:89:fd:2b:7b:65:50:74:b6:9b:
         24:70:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:24:57 2025 by rpki-client