Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/ec2a6834-bafb-354b-a539-ce3e57374c5e.roa
File:                     ec2a6834-bafb-354b-a539-ce3e57374c5e.roa (raw, json)
Hash identifier:          MiWWFSVae47nXBqifXtdub2Kw6lQXyfKH4CzJTLIC5o=
Subject key identifier:   E3:9C:C9:E2:DC:48:07:E5:59:6F:20:89:6C:AE:0D:15:B3:58:8A:E0
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285847DF2F4B67A03052E8F2FB1980
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/ec2a6834-bafb-354b-a539-ce3e57374c5e.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20249
IP address blocks:        169.196.48.0/23 maxlen: 23
                          169.196.48.0/24 maxlen: 24
                          169.196.49.0/24 maxlen: 24
                          169.196.65.0/24 maxlen: 24
                          169.196.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:4b:67:a0:30:52:e8:f2:fb:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=4aef082b-5834-42c9-adc0-72a40643cf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:95:98:83:f6:14:0e:6e:fb:60:34:67:2d:
                    72:8a:ec:31:0d:08:79:f6:8c:b4:9d:0a:cf:39:26:
                    e6:f3:c9:d9:f5:65:f5:9c:13:ee:7f:f1:3d:10:d6:
                    aa:44:ef:17:26:76:b0:a4:7a:6d:36:c7:53:18:b3:
                    41:f3:82:c7:dc:88:be:d5:04:c2:3d:65:af:3b:2d:
                    34:82:e2:d7:b0:87:9a:c9:b0:e2:5a:0b:16:1b:56:
                    df:0b:76:bc:d4:36:cb:c9:8f:c4:e8:07:e1:10:54:
                    e4:34:82:4c:9a:d1:08:ad:b7:5b:69:2e:13:8c:f9:
                    b9:31:58:1e:9d:e3:c1:b0:c1:74:97:fc:8d:c4:de:
                    db:31:1b:bb:ff:8c:ba:eb:c0:6a:78:49:14:29:7c:
                    83:bc:87:fe:51:74:e6:0e:86:8e:e3:c0:9d:dc:3f:
                    12:c9:49:f9:6c:f8:b9:b9:cc:68:61:08:23:45:40:
                    72:81:e9:d6:ee:45:a2:c9:d2:01:34:42:4f:dc:c0:
                    ae:17:48:a5:0b:fb:de:00:63:c2:ff:38:0b:10:fd:
                    81:83:21:e8:b7:99:e5:d2:0e:d2:38:95:40:95:c4:
                    85:f8:6f:11:3c:7c:6a:f3:33:57:2d:ef:9b:d7:4f:
                    2f:93:cf:42:c7:65:1b:ea:06:78:ce:c9:46:bb:3b:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9C:C9:E2:DC:48:07:E5:59:6F:20:89:6C:AE:0D:15:B3:58:8A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/ec2a6834-bafb-354b-a539-ce3e57374c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.48.0/23
                  169.196.65.0/24
                  169.196.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:fd:d1:f4:c1:ff:b5:ae:e0:db:90:0c:8c:5a:00:4a:90:
         96:82:ab:ba:7e:42:02:1f:a9:7f:81:ab:43:e7:f4:bf:7e:7c:
         3b:d1:56:f3:89:22:ad:18:c7:11:ab:63:08:db:2a:5c:3e:85:
         12:69:7d:57:3a:71:1b:96:b8:80:7b:b8:4a:36:9b:72:29:a3:
         c4:b3:9c:c2:9f:80:9b:a3:ae:f2:e5:ab:65:1c:b2:d7:e0:e6:
         30:46:17:38:c3:c4:cf:8b:53:52:c5:2e:9a:e5:a5:a6:b4:d1:
         ba:c4:15:7a:cd:38:81:eb:f2:b0:28:49:7a:67:3b:60:d0:dc:
         ec:5f:4d:c6:bc:7f:67:8d:9a:5f:55:08:f4:9a:33:20:c3:72:
         a1:b3:90:5e:33:44:08:39:8f:4b:63:07:6c:76:d3:37:3b:d1:
         a3:b9:2f:d4:0e:31:45:f9:e5:4f:a6:5d:77:11:4a:f1:8c:15:
         1d:79:95:1c:3d:aa:c1:b2:93:d5:46:d8:c6:8f:a9:65:c5:e3:
         05:fa:ea:d1:b4:2f:76:9e:1a:7c:f6:6e:54:a1:75:53:79:43:
         d3:58:18:34:60:80:3c:f0:9f:5a:02:8f:93:51:34:23:da:41:
         ab:e1:bc:d5:2f:6e:1c:95:55:72:8b:ca:1f:d4:5e:fe:36:d3:
         81:77:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:31 2025 by rpki-client