Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/796f1f19-3089-36a7-86c3-c190b6c28eea.roa
File:                     796f1f19-3089-36a7-86c3-c190b6c28eea.roa (raw, json)
Hash identifier:          NQYFYsF9Cfosg9KwmydgGoqk4Pg6OxXw9An9T76P0jE=
Subject key identifier:   29:84:5F:0A:90:9D:16:1A:35:52:4E:02:C4:7B:EA:80:45:14:CF:49
Certificate issuer:       /CN=050335c5-eabd-457a-a0b3-c677e99e9ba6
Certificate serial:       010D0C9F432858489075F01FB24A1FDB6F54B560
Authority key identifier: 94:5A:0D:DF:E4:1E:16:93:F9:30:6B:D4:D4:8C:76:8F:2F:1C:19:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/796f1f19-3089-36a7-86c3-c190b6c28eea.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     1008
IP address blocks:        134.195.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f0:1f:b2:4a:1f:db:6f:54:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050335c5-eabd-457a-a0b3-c677e99e9ba6
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=f7ab7f70-d7a5-41f4-b9c8-234d04e22f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:22:47:2a:41:b3:62:5b:6d:77:44:31:8d:
                    db:f6:83:13:12:fe:e7:f7:a5:cb:26:3a:b6:7f:4a:
                    b7:14:34:e9:39:b6:dc:5b:38:55:af:cc:39:35:36:
                    cd:eb:15:62:90:ae:7a:94:c8:fb:29:d3:70:aa:48:
                    2b:64:80:39:bc:c1:b8:d5:af:2d:ce:85:41:5f:df:
                    36:6a:11:33:7e:32:a6:d1:ab:fe:a1:1e:b6:9c:b5:
                    d6:ac:d5:21:0f:f1:ba:c9:0d:8b:44:93:9b:70:86:
                    b7:87:0d:63:46:2a:5c:c2:72:99:a8:65:42:93:df:
                    9e:35:6c:a5:1f:46:43:87:9c:e7:6c:be:ac:77:58:
                    08:07:15:93:c8:71:0c:f9:3a:b6:ac:c2:67:3e:03:
                    93:6f:17:4f:71:4f:3c:f6:1d:82:c8:3f:dc:3c:66:
                    c6:6e:be:f5:04:58:d3:73:02:d0:e2:c7:cf:9a:47:
                    91:ad:25:2f:10:f0:61:55:ac:63:47:b9:4e:ad:7f:
                    86:42:b1:f9:89:59:1d:4f:04:ea:7d:3b:8d:2e:45:
                    54:4e:ff:6f:06:7c:9e:df:33:4a:76:86:a4:92:29:
                    46:59:cd:4c:6e:72:fb:08:ea:dc:7b:89:1d:4b:f6:
                    20:77:30:4e:81:c7:78:86:af:62:ef:7a:2e:73:8d:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:84:5F:0A:90:9D:16:1A:35:52:4E:02:C4:7B:EA:80:45:14:CF:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/796f1f19-3089-36a7-86c3-c190b6c28eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/050335c5-eabd-457a-a0b3-c677e99e9ba6.crl

            X509v3 Authority Key Identifier:
                keyid:94:5A:0D:DF:E4:1E:16:93:F9:30:6B:D4:D4:8C:76:8F:2F:1C:19:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:2e:1d:44:0d:b0:b4:a0:ff:bc:30:38:42:8c:85:bb:b8:
         3c:7e:90:00:18:30:a2:56:c2:c9:6b:e7:cc:36:c5:65:68:3d:
         5d:8d:bc:64:5e:9f:37:dc:9a:4d:ae:5f:82:f7:ab:24:38:ae:
         8a:d4:bc:b5:ff:e1:54:e0:55:75:a5:fb:5d:46:71:c4:98:03:
         e8:77:75:ea:10:76:e9:21:37:6c:7a:29:c0:4b:c3:df:e5:00:
         4c:12:7b:bc:05:f5:80:13:5b:21:05:29:c3:bc:14:78:6c:20:
         5f:17:41:b0:f5:cb:0e:f9:06:e6:3f:22:9b:2e:39:22:8d:ed:
         cd:a9:0d:a6:ee:5f:58:cf:b6:c3:8d:82:5f:e8:e9:d0:da:42:
         6e:a5:9f:ab:a8:8a:7b:8d:e8:21:a6:4a:80:5e:f8:b5:ad:1c:
         da:c1:bb:fb:c1:4b:57:8e:b6:0e:6a:91:7f:76:6f:93:89:36:
         d6:f0:f8:f7:61:1a:a3:57:36:6f:79:62:eb:79:f2:88:ff:02:
         d6:b8:bd:87:32:ed:c4:f1:1b:d9:a9:31:ab:d5:92:d5:f6:a7:
         bc:4d:4a:12:e4:95:cb:a9:a8:cc:c4:70:94:9a:48:d5:2d:33:
         48:40:af:a5:c8:25:48:80:6e:d3:ec:ee:9a:28:77:28:0f:02:
         5d:83:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:52 2025 by rpki-client