Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa
File:                     4ee5944c-2578-327e-8b6d-d50b04da84cd.roa (raw, json)
Hash identifier:          MLbfgXD1YIMxnvFLcRivpTi3+OjUQN+RK3fmdcR6rL0=
Subject key identifier:   58:68:FA:58:49:82:51:2F:3B:FE:4D:06:89:9C:3C:A9:F7:2E:A9:85
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F4328584855D5A0B4C8B2BF41C0077B00
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        173.241.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:a0:b4:c8:b2:bf:41:c0:07:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=7115bd6f-1c1e-4147-ad23-b8fde379c8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:0f:e6:72:05:45:61:42:4a:80:6c:a2:88:
                    c4:4c:e8:82:86:88:17:3c:fb:32:2c:6c:ee:e8:b8:
                    4c:a0:56:c8:3d:04:03:eb:34:ba:e8:08:9f:86:4f:
                    06:65:68:10:bf:8e:b4:eb:9f:3e:2c:d5:9a:65:dd:
                    22:bd:49:de:33:ff:ae:c1:a3:0f:c4:8e:5b:42:71:
                    74:fa:4c:c4:7e:fd:51:f3:95:20:f3:0e:18:91:1b:
                    ac:79:d5:af:1f:08:91:a1:c0:e7:dd:a8:09:c5:ec:
                    8b:97:bd:c5:98:88:9c:7b:27:14:ec:df:c1:63:86:
                    66:1b:65:6e:9f:26:65:a2:bd:2a:57:d1:fa:b6:ad:
                    7f:13:72:6d:58:0f:12:ea:3e:ba:c5:0e:b7:49:21:
                    c7:ce:03:23:c8:bc:b7:0b:04:de:83:7d:93:b7:0f:
                    30:28:bc:83:c6:71:eb:9d:b2:e7:7e:9d:8c:b5:19:
                    8a:c5:69:5d:7a:93:07:6e:f1:06:d3:23:e4:c7:4c:
                    e0:ce:e6:30:45:40:68:da:cf:cd:15:68:33:e5:da:
                    7d:9c:57:cb:10:ea:4e:4b:94:32:3a:10:7c:3c:85:
                    61:3f:5f:a5:43:a8:e9:44:3c:9d:6d:61:f9:dd:fb:
                    dc:81:eb:4c:6a:e0:d7:c4:b1:f7:80:88:8d:cb:f1:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:68:FA:58:49:82:51:2F:3B:FE:4D:06:89:9C:3C:A9:F7:2E:A9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/4ee5944c-2578-327e-8b6d-d50b04da84cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:8c:ae:0a:f9:96:a6:1d:21:08:a2:d7:bb:2d:8c:d7:9f:
         04:fa:25:65:10:14:eb:71:8a:7a:59:b9:b1:1c:eb:11:0f:05:
         45:0d:13:25:52:b2:b9:97:11:83:5b:ee:ac:8f:a3:3e:11:0b:
         26:6b:fd:2f:07:96:c8:d9:d7:d6:d6:94:79:a3:bf:d8:7a:8b:
         44:6a:07:56:97:99:18:a9:51:39:17:60:cf:29:57:cd:39:f9:
         a8:27:0b:ca:f4:e7:2d:1f:2a:4f:46:d5:87:68:d5:6d:d6:90:
         9d:64:45:a6:87:0a:6a:42:2e:ea:b4:2c:bf:fe:73:66:c8:e7:
         70:33:5a:29:f7:74:da:13:67:70:44:6b:d4:5e:67:50:d2:15:
         49:a4:4a:e0:d4:4d:96:79:1b:e7:8b:b7:c8:7e:05:f5:ac:ad:
         94:66:00:2c:15:bd:f4:c3:7d:1a:94:da:ed:e7:72:f5:47:29:
         a2:e5:c4:5d:1b:7c:68:33:da:03:ad:7f:e7:af:8c:d1:34:9a:
         d6:30:09:28:69:ff:ef:8f:8b:97:d9:22:58:80:ca:e9:41:7c:
         90:50:02:11:73:f0:8a:f2:b1:24:c5:1c:0f:80:3d:13:6e:de:
         8d:e4:8c:be:a3:fb:57:14:3c:9d:23:bd:d0:6c:ce:6a:da:fa:
         3f:1a:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:06 2025 by rpki-client