Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa
File:                     248dd090-9420-37f9-9305-b5cd56b24a28.roa (raw, json)
Hash identifier:          NpsZJ9uknLgUJN0Y4wvTyGQz+2K4rcHdL0olU7J4yLQ=
Subject key identifier:   FE:3C:F9:CB:9D:69:FF:00:BF:29:E1:26:47:F5:30:03:62:BF:67:17
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584812D530D7A95CE95F891C3480
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     25820
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:30:d7:a9:5c:e9:5f:89:1c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=7b223e33-fe39-44c4-8a73-bfbcbd831aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:eb:61:fe:2b:02:b6:c5:ad:f5:c8:8a:16:
                    b8:ef:65:00:9f:bd:cc:b2:a8:83:37:80:7b:82:87:
                    4e:78:2e:f7:04:a9:30:8c:09:70:5b:d8:dd:06:cd:
                    7f:03:81:90:1a:a1:0e:a3:a9:8b:e3:e7:6b:47:36:
                    f6:db:86:28:6e:77:c6:67:3a:12:32:82:fb:25:1f:
                    93:ba:44:08:13:b2:99:9b:45:50:f5:a3:7f:84:60:
                    85:a0:c8:34:cf:d2:44:63:31:ca:92:4a:90:c1:40:
                    3b:84:83:19:a2:79:06:de:97:33:60:16:ce:cb:1a:
                    98:49:70:bf:06:6c:56:48:87:d4:73:75:4a:e1:a4:
                    b3:e8:9f:f7:52:b9:e4:7c:7d:71:f1:fe:6d:ef:b2:
                    49:3d:ca:cc:99:30:22:74:11:77:7f:8c:03:af:12:
                    d4:bb:a0:7d:27:f0:be:b5:d8:da:a3:b2:fc:35:db:
                    02:8f:2b:63:d6:3c:2c:5e:24:dc:02:02:fa:6a:95:
                    94:2f:78:15:4b:cb:9a:a5:ee:63:20:48:9f:04:a9:
                    b9:b2:df:99:a0:08:99:87:3b:b1:aa:70:87:3a:a9:
                    05:6a:d7:b5:8d:d6:e4:20:41:94:7c:21:9e:2d:61:
                    0f:b7:c4:a0:f3:87:42:4f:49:25:2c:3e:c4:17:1e:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3C:F9:CB:9D:69:FF:00:BF:29:E1:26:47:F5:30:03:62:BF:67:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:9c:db:52:06:ca:92:d4:fb:08:ce:16:f8:b0:e2:1a:d8:
         e5:41:a1:01:bd:c1:04:26:f7:01:be:8b:70:f8:56:ff:3a:22:
         55:c3:c5:e0:71:89:09:6e:8c:d6:b2:bb:66:1d:fc:44:e0:dc:
         50:2c:3c:4a:2a:11:7f:4d:1f:46:82:79:1e:c8:f2:78:b1:e6:
         ef:36:f5:2d:1a:bc:dc:6e:c3:d3:28:1a:14:f8:1e:d0:ee:51:
         50:a3:de:41:26:c7:32:00:fc:44:7d:90:7b:bd:ff:af:af:e7:
         4f:58:6e:79:99:ee:da:eb:11:b3:a3:71:fe:98:d1:2a:eb:36:
         87:d3:20:4b:85:50:5b:ca:5f:20:f7:78:08:d8:81:07:e9:b0:
         9f:91:b3:fc:d0:6a:ab:26:e6:b8:d4:75:2f:fe:0d:42:76:ae:
         16:82:ac:2f:c3:70:c4:64:f7:72:36:8a:dc:ba:db:bb:61:d0:
         a7:0c:e7:03:ca:da:9a:19:26:be:a0:61:9d:3a:9d:b4:a0:9f:
         10:3f:8e:c1:95:a4:31:f1:f7:e4:be:b6:86:c3:04:4c:96:7c:
         09:e0:9b:d8:77:9a:53:6d:8b:85:8d:35:04:70:76:8d:07:9b:
         6b:5e:fb:c4:40:47:03:5c:32:88:b3:41:11:d8:6f:f4:ea:90:
         e9:ee:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:33:00 2025 by rpki-client