Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa
File:                     882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa (raw, json)
Hash identifier:          wsYx9W1qNmOfiVQchnD3u/7U/yL5TY1VIUoSV0aovFs=
Subject key identifier:   AC:96:45:2A:54:55:C2:87:C0:91:F4:93:0F:7D:73:F0:03:0F:FF:D1
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F432858484EDAD170AB8CCBE376D54C20
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     1742
IP address blocks:        140.247.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:d1:70:ab:8c:cb:e3:76:d5:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=b562ccb5-4278-4f46-a833-698a5c93a42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:82:80:9f:34:41:4a:ed:01:9e:52:0d:ef:
                    3c:ec:fc:24:7b:28:92:e5:2b:f9:f8:87:2e:1d:e4:
                    ac:f3:6e:e2:e3:52:18:a9:35:7f:89:e7:10:87:e8:
                    a5:bb:7e:cb:75:af:f8:12:e3:a0:21:41:6e:86:be:
                    ab:59:61:a8:32:68:3c:a7:f3:c2:13:7f:53:e7:1c:
                    e7:a1:ae:15:52:9c:a1:9e:fc:3a:b0:2a:9c:a7:d2:
                    2c:a5:70:a5:98:ab:be:85:2a:32:45:6e:79:aa:4e:
                    59:a9:65:f8:b8:d7:f4:47:6a:4a:9b:c8:30:b0:b0:
                    79:41:4d:b3:47:54:57:48:16:b4:3f:06:fe:c0:1c:
                    c3:87:a5:e9:67:0c:01:29:fe:bc:13:d7:8c:3a:1f:
                    05:86:22:bb:26:1b:8c:3b:6d:43:a5:8e:1d:45:84:
                    19:e0:33:67:f3:9d:f8:d6:0f:2f:ff:df:f4:54:29:
                    a9:ed:8a:58:af:e4:a8:44:f3:a1:d3:0b:ce:d5:59:
                    cf:5d:9e:a7:ac:ef:78:3d:6b:09:9c:d7:33:36:bf:
                    5e:3a:22:8d:34:79:82:e1:7f:12:03:51:fe:9b:81:
                    e4:eb:c0:79:5b:a1:98:b4:f8:6f:e8:10:fb:c6:8c:
                    cf:f0:02:91:f8:e5:e3:1e:a8:34:9c:3c:92:b9:3d:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:96:45:2A:54:55:C2:87:C0:91:F4:93:0F:7D:73:F0:03:0F:FF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:b1:4e:84:e9:f7:84:e3:9b:35:92:52:30:09:d8:69:c9:
         e3:f9:bb:3d:e6:14:39:6c:b7:92:92:02:71:9f:f7:78:dd:f5:
         a8:53:25:25:22:a5:9d:87:fe:8c:22:ff:cd:03:84:c8:84:3a:
         3a:91:5b:c4:b0:41:75:49:16:a6:4f:3b:92:b8:0c:21:b1:95:
         fd:8e:e1:c1:f7:86:3b:a2:a1:08:84:50:06:e2:a7:2b:5e:bf:
         86:df:13:c3:2f:ed:cf:58:7e:1b:2f:0c:25:79:4e:a6:3e:a7:
         58:18:65:35:8f:17:1e:db:37:91:59:2e:d1:89:b4:03:03:72:
         a0:17:05:a6:cf:1f:87:5d:b7:71:64:2e:0d:55:67:c4:40:9b:
         50:c8:60:a0:41:56:1c:de:c9:d3:1d:ec:67:cd:bc:4e:1a:7d:
         26:8c:e4:8a:5c:a6:d3:4e:cf:d3:c8:7f:a0:2f:23:62:19:ad:
         46:47:81:73:02:8e:50:12:b3:ae:bf:3a:8f:b1:52:0e:7d:4d:
         bb:0c:5d:97:4d:cb:b6:03:85:4c:25:1c:ab:0f:70:f3:b9:be:
         c2:a4:44:bf:04:51:34:71:3a:89:03:7c:f0:4e:aa:bb:fa:b5:
         1a:bd:9d:7a:f0:33:d0:b0:f1:6b:1e:a5:57:bc:ca:8a:10:e2:
         62:83:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:55 2025 by rpki-client