Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
File:                     b0293e2a-b333-3875-817a-b2830f596b7b.roa (raw, json)
Hash identifier:          ibO+Tg789BAF1VEwi6/eYWi7bQOe2jcFDjn2xG4y9bE=
Subject key identifier:   66:B9:55:6F:67:95:D9:CF:C9:20:47:2A:60:C7:C7:F5:55:43:58:1A
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584898D5FCE0673CC7A03BF8A880
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     48737
IP address blocks:        174.35.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d5:fc:e0:67:3c:c7:a0:3b:f8:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=7f99f1e1-3e9e-48ae-bd6e-a533a042c030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:a1:a0:12:ab:80:aa:78:f4:60:fd:fa:7e:
                    a7:49:f3:24:42:dc:61:78:bb:9d:e4:d4:f3:33:5d:
                    35:a8:66:bf:69:e9:75:84:e2:57:64:83:4e:a7:e2:
                    40:ff:e3:a7:63:61:c8:7e:79:ce:dd:50:77:ab:38:
                    2a:8f:bf:ef:af:4c:94:38:b3:d0:21:23:58:37:90:
                    f8:b5:28:bf:a7:bb:2f:25:8a:88:b3:25:42:36:42:
                    48:bb:7c:6c:48:c5:18:24:d6:86:b2:2c:bd:60:39:
                    9c:66:90:33:ac:5b:4b:9d:87:48:54:7d:22:06:a3:
                    4b:9b:9f:ff:db:11:7c:c1:68:23:54:fb:4b:de:cc:
                    2d:31:ec:0a:1f:6e:c3:56:7e:26:83:14:33:18:2f:
                    ff:97:5f:32:01:ed:f0:6b:d4:75:95:49:70:09:1d:
                    19:9c:13:7b:42:7e:c7:01:69:26:00:79:16:c1:99:
                    7d:15:ca:07:4d:9b:c0:31:0b:ee:f4:f6:a2:49:4b:
                    e9:cf:6e:4f:a7:55:b5:41:07:45:39:72:77:f2:24:
                    1b:e6:f1:d0:47:57:8e:ba:99:6f:99:54:fd:39:b7:
                    8b:fa:6a:9d:0a:90:f1:29:9f:9e:07:ec:d7:60:97:
                    b2:2c:d7:07:42:18:46:d4:6d:0c:63:4f:eb:68:73:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B9:55:6F:67:95:D9:CF:C9:20:47:2A:60:C7:C7:F5:55:43:58:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4e:21:93:68:8e:82:c7:2f:3c:57:05:96:e9:01:cc:74:5d:
         df:a9:30:00:36:64:0a:00:26:30:d9:f3:7b:1a:31:0f:d8:2b:
         73:37:38:43:53:48:08:a1:17:a2:a6:07:60:8f:85:63:2a:98:
         73:f3:8b:68:49:b7:d9:bb:fc:3e:13:4d:de:01:5d:b7:57:8d:
         f5:0b:b9:e9:eb:8c:57:c9:be:9c:15:eb:f8:82:fd:c3:31:08:
         4a:95:8f:03:f1:e8:68:8c:62:c9:bf:b0:fa:69:a7:a0:34:10:
         ba:8e:33:53:43:8f:7f:51:a4:da:e1:7d:9f:b5:63:ec:8c:c6:
         7e:b3:6c:c5:81:6e:af:1c:c6:cb:87:6a:4e:0e:f1:8c:cf:4e:
         10:a2:53:51:03:da:e5:90:56:53:11:70:da:8f:68:07:2c:d0:
         89:ed:25:50:e9:ec:9a:1f:15:c0:ad:e8:5f:1f:5f:ec:49:fa:
         f2:44:d6:0c:c7:a4:67:f1:29:42:ed:3a:4b:d9:1f:8f:ac:28:
         13:76:7a:fd:89:d3:4a:ee:fd:11:42:98:81:33:58:d1:bd:60:
         4b:50:2e:3a:29:e9:22:97:e4:95:b9:91:90:8a:b7:3c:ba:db:
         de:b6:10:70:74:ee:92:34:4b:cc:b5:b4:26:8e:c7:12:a6:3b:
         ff:1f:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:51 2025 by rpki-client