Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c42a073-036c-3eda-9504-2ea2f4a79e70.roa
File:                     9c42a073-036c-3eda-9504-2ea2f4a79e70.roa (raw, json)
Hash identifier:          F+t776WVpXaE5k1ghKE+eXhnwNO/M2uJVRh5z6ycVUc=
Subject key identifier:   3F:36:D8:BD:DD:D9:E3:79:E3:C8:CE:65:AF:4E:7B:01:C8:F2:E7:6E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AF857818755A89ACCBD280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c42a073-036c-3eda-9504-2ea2f4a79e70.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     20115
IP address blocks:        174.81.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:85:78:18:75:5a:89:ac:cb:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=b5fe9eac-5c2f-447b-a808-e5036958d150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:22:ce:ed:c6:4d:31:2f:cc:ff:23:5f:3d:
                    38:0c:f7:f3:fb:4c:ae:18:3f:f0:b9:40:c3:a4:39:
                    44:94:3e:14:a4:51:10:46:39:c3:a1:79:16:cd:d1:
                    1a:e0:ec:99:f7:74:25:ac:2c:ba:fc:08:ca:d5:41:
                    77:ce:30:80:ff:62:d3:98:7b:e5:46:81:87:d7:ab:
                    d9:e5:9b:68:f0:1b:6b:3f:d6:98:e2:66:04:57:3a:
                    2d:0d:30:ee:e0:53:cf:4a:73:ec:23:ed:25:ab:cb:
                    b6:25:ae:b6:9e:f0:26:61:7e:ec:e3:7c:39:63:7f:
                    ed:a0:71:f7:71:c7:f9:d8:5b:06:c0:3a:92:02:1f:
                    bb:2f:4f:3e:19:e2:35:ed:10:b3:c0:8d:65:62:a7:
                    34:74:87:b5:e6:f0:be:33:f1:f6:c5:62:c1:26:3e:
                    39:fe:15:46:a6:63:5e:26:ee:ce:1f:f5:32:28:4e:
                    de:7d:93:b3:de:46:7d:9e:aa:c9:e6:e9:d7:bc:1f:
                    d8:6f:9b:e8:28:ef:84:89:ec:e9:27:eb:9b:b8:79:
                    1e:a0:c3:73:9b:46:ee:51:e1:03:17:76:eb:b2:4e:
                    0c:fb:73:e9:9f:32:ad:1c:75:5b:61:20:23:46:7e:
                    6f:ab:36:7c:1c:8b:81:2d:91:cb:49:c3:df:b9:bf:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:36:D8:BD:DD:D9:E3:79:E3:C8:CE:65:AF:4E:7B:01:C8:F2:E7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c42a073-036c-3eda-9504-2ea2f4a79e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.81.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:46:86:b1:72:90:2e:20:e8:c6:8e:4f:ca:41:71:13:ba:4f:
         9f:83:3e:01:14:36:d9:81:21:a9:be:f3:4a:42:81:ab:92:88:
         f6:38:cd:19:78:a3:3b:f5:ae:7b:f9:c1:93:aa:7f:af:08:66:
         2d:e5:9b:45:8a:df:6a:76:6a:45:03:63:62:33:21:5a:77:10:
         39:49:db:9c:1a:33:9e:d6:32:05:68:83:0d:32:23:b2:b5:0e:
         67:9e:2d:e5:bf:53:1a:3d:de:0b:b7:54:7b:5a:0a:e3:24:9a:
         da:9b:5b:1b:e2:8f:27:61:c1:65:13:51:76:02:37:c4:30:de:
         81:7d:79:41:d4:19:f8:0d:8e:0b:e7:53:a8:f3:8f:0e:f3:07:
         10:d6:9c:26:a6:c4:3f:96:db:ff:ba:61:18:da:a6:49:3d:05:
         02:b6:ea:e5:bb:66:55:d8:79:ee:89:8c:55:aa:77:90:96:81:
         6e:dd:d4:a0:13:d6:5e:40:1d:da:ac:69:ef:f3:02:fa:f0:bc:
         de:78:23:19:d5:22:e3:a4:5f:b4:99:f7:7f:73:e9:10:9c:c8:
         8c:63:2f:64:57:78:2a:87:0f:a2:38:e5:09:47:f9:d2:ca:4b:
         14:f3:a1:f6:8b:ca:59:fe:6d:8d:c9:e5:09:be:a8:a2:4b:ff:
         ce:fb:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:59 2025 by rpki-client