Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa
File:                     508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa (raw, json)
Hash identifier:          XrNGDzDaOBwVBkaMYEX7DIqkWEaTWHqurOY1Brb/O0Q=
Subject key identifier:   5C:54:62:90:AB:7C:AB:B0:5F:AA:49:5D:91:70:E9:70:41:9C:48:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B03C0394606C506975530
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.146.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:03:c0:39:46:06:c5:06:97:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=59a3f687-f504-4194-a489-2004df54d949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:2c:84:00:c9:d3:5d:f0:0b:18:c6:d3:28:
                    b1:a8:cb:e0:3a:b1:45:58:02:a1:60:79:db:39:24:
                    54:b9:f1:25:7b:41:94:a1:1d:c4:32:de:ae:63:7c:
                    6f:1f:20:d3:4b:87:a1:41:82:cd:60:45:15:7d:2a:
                    c6:fd:e7:63:d3:bf:c8:cb:cb:01:51:3a:d2:13:be:
                    e0:c0:54:5c:85:32:ef:8d:ec:a9:51:84:e9:c1:71:
                    bc:12:07:6b:9c:54:26:31:89:92:06:e1:ea:cc:24:
                    08:0b:27:15:69:60:17:86:9d:b9:ff:82:a7:63:43:
                    01:b8:72:23:82:f4:3e:92:4c:e5:48:c2:94:6f:fe:
                    a6:a4:2d:62:7d:85:e0:d4:d3:28:1f:b8:e5:d1:52:
                    c9:65:4f:9c:71:df:9d:79:6c:f9:87:1f:1f:70:02:
                    46:34:ef:9f:8d:48:c3:31:90:2c:b9:d2:a4:3e:9c:
                    c5:76:88:50:d8:bf:1a:84:0c:b9:72:d8:c5:71:c7:
                    bd:f7:46:3d:89:4e:1f:cb:51:08:ff:1e:63:73:d1:
                    cd:6c:72:f7:1b:79:cc:8d:ef:42:34:8c:91:6b:4b:
                    6a:ca:44:45:3c:e2:b3:f3:ce:36:bd:0a:e2:3a:3d:
                    b8:03:a4:92:90:31:a9:4a:7e:be:0e:92:e4:d7:97:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:62:90:AB:7C:AB:B0:5F:AA:49:5D:91:70:E9:70:41:9C:48:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508e8c5e-6dd8-369d-bd2b-01b05d99f76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.146.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:60:04:ef:05:c0:3d:38:46:03:33:16:04:7c:9d:ff:24:
         0b:21:2a:f5:41:7a:57:05:0f:71:a6:70:54:2b:4a:28:48:db:
         6a:19:ab:32:ee:7c:76:6f:8a:c1:73:34:4f:2e:60:aa:7c:67:
         c7:99:b1:2d:c7:e2:ce:1a:18:0f:40:1b:ae:67:2c:f4:20:12:
         31:e2:a8:58:b0:45:33:92:95:f5:85:26:e3:1c:af:84:5c:4c:
         1a:f2:e5:d1:72:10:2f:e3:cf:8f:a7:f1:3e:e7:48:8c:5c:c1:
         07:d2:7c:6a:cf:29:9e:6d:37:67:fb:1d:e0:0b:a1:81:bf:5b:
         9e:ad:9b:96:a7:2e:c2:26:0f:e9:a9:24:7c:87:7e:b1:9a:94:
         c8:20:da:ba:bf:19:71:43:f6:b6:cb:c0:35:99:aa:36:84:a9:
         19:c2:16:ae:e4:70:22:93:a7:3a:86:60:9b:83:7a:4c:ef:62:
         e4:bb:05:05:0e:58:b1:ef:30:67:d8:68:d8:4c:f9:cf:1b:3d:
         2a:46:f0:11:93:95:ad:96:fc:67:48:1c:be:0f:1c:29:d4:2d:
         39:e0:6e:7b:c7:5e:d3:a6:13:a1:97:14:01:23:96:24:40:cb:
         8e:80:28:c7:5b:ca:02:fe:d1:ec:f5:02:d4:a6:49:1b:49:74:
         35:d1:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:03 2025 by rpki-client