Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa
File:                     441c4f19-758d-3201-afca-03467cbc3620.roa (raw, json)
Hash identifier:          ejhsck8ZDcaevRaKp8SK7FQWF4yvdPmuJZSHb68gdaI=
Subject key identifier:   3A:28:76:D1:B0:82:1A:1C:C4:4B:15:2F:F8:2C:72:A2:F8:39:11:82
Certificate issuer:       /CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
Certificate serial:       010D0C9F432858486695B677B6C387B5087ED3C0
Authority key identifier: 1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     400734
IP address blocks:        139.60.210.0/24 maxlen: 24
                          2620:13c:b000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b6:77:b6:c3:87:b5:08:7e:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=a86a6d48-441a-4e5f-8c01-e77513cd1e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:d7:ee:da:8c:f0:a6:11:63:f7:22:bd:f5:
                    33:60:1e:3e:0c:2f:1f:42:a4:c7:b4:73:4d:35:72:
                    09:5c:cc:cf:fd:3f:95:82:35:3c:9e:6d:83:c2:f0:
                    7c:a9:e4:66:ab:a4:a6:68:88:dd:2b:73:7a:b1:82:
                    a2:f4:a4:62:02:c5:b4:c6:28:21:43:14:39:c8:29:
                    1d:42:41:3f:66:49:92:c3:25:74:d9:f7:e8:0e:0a:
                    25:1f:3d:9e:86:e9:92:5e:cf:4e:69:04:42:bf:7e:
                    61:da:5a:86:bd:ae:dd:e0:22:3e:23:14:9f:63:db:
                    d0:9f:89:cb:f8:30:b4:ba:73:db:be:b6:a6:4d:f3:
                    49:44:31:54:0e:c2:f9:d3:e1:10:b0:7d:f9:0c:7c:
                    ac:62:c6:2e:e7:7c:59:d6:f6:20:4f:56:93:b0:01:
                    de:a5:7e:5a:40:81:5e:e1:7e:19:59:00:e9:6d:eb:
                    f9:86:dd:ae:77:80:8f:3c:3e:c0:b9:01:28:10:41:
                    e6:2a:2e:fc:99:29:04:3b:f6:ab:86:51:e3:4c:06:
                    73:c2:24:2e:32:e4:60:e7:bc:20:4f:d0:91:d1:ac:
                    1b:a2:98:57:61:d5:1a:31:a1:67:11:b7:75:fd:a9:
                    8e:e0:ac:14:aa:11:98:52:46:56:3a:f9:01:30:ad:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:28:76:D1:B0:82:1A:1C:C4:4B:15:2F:F8:2C:72:A2:F8:39:11:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.210.0/24
                IPv6:
                  2620:13c:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:55:f5:7f:60:89:99:bf:7d:09:98:91:2d:6f:17:5a:f4:
         9b:db:e7:c0:cd:37:59:8a:f4:5e:92:f3:ef:ff:85:f0:e6:19:
         fa:1e:cb:ae:c8:63:0b:94:88:b8:2f:9e:76:1b:f2:88:d6:9d:
         8f:4d:29:6c:ca:2c:11:d5:72:fe:f6:d4:76:2c:9c:e6:14:5f:
         56:33:78:61:38:32:4c:f3:41:f5:85:bd:e8:c2:2a:a7:72:46:
         1e:af:58:68:1e:66:bf:98:93:d2:df:d3:42:2f:d1:a4:9f:d0:
         91:3a:3c:10:53:10:a4:3c:44:29:a8:ee:1b:f1:e4:80:42:90:
         a3:28:9f:ba:2d:af:fb:ec:e1:c3:ca:3d:92:61:13:d4:8c:08:
         e9:6b:1d:8a:ab:be:d0:23:d6:9f:0b:d9:d9:8c:be:c2:33:08:
         63:81:b5:7d:ed:74:56:2a:fb:fc:0d:f7:d5:95:79:13:cb:3f:
         f5:d3:a6:aa:ec:69:a0:24:43:9f:5d:03:ee:a3:4c:12:55:a8:
         78:25:af:35:54:50:ca:e0:68:84:36:12:ea:bc:0b:c7:b0:28:
         cb:bf:97:93:e2:82:73:53:96:1b:6c:15:09:5f:9d:cd:5d:ea:
         65:f8:d6:94:2f:b8:1e:67:c3:e9:86:6d:11:f8:bd:a5:38:c8:
         4e:2e:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:35:16 2025 by rpki-client