Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
File:                     5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa (raw, json)
Hash identifier:          pd1iVCRmn6sIQX9a3IXfMmnyUq6Lxvup5xmp7gCmDRU=
Subject key identifier:   27:AC:72:D4:35:6A:10:A7:F9:89:2D:07:10:66:A3:8F:91:73:A1:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA82694CC8CEA2FCA5C080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.238.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:82:69:4c:c8:ce:a2:fc:a5:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=eb562455-c72e-466b-9b6b-d865f9dfe1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:ab:6b:3a:ee:b9:41:16:c0:31:75:3d:90:
                    f6:62:04:40:26:f9:03:d7:77:76:9c:6d:36:3c:fd:
                    43:46:d8:c8:5c:9b:d3:75:02:66:e8:a2:a1:ea:17:
                    81:6b:a9:28:59:44:ea:14:95:10:10:d1:0c:39:30:
                    9a:75:75:74:1b:83:bc:f1:9e:46:0d:7c:f0:d3:07:
                    f1:da:85:78:06:ae:29:c4:3e:7a:ec:a3:35:70:12:
                    29:62:4d:dc:87:14:74:22:82:46:ef:52:1b:28:06:
                    35:e1:4c:b6:38:c4:33:3d:4b:7f:2c:2b:19:9c:2b:
                    35:3c:4f:b0:95:54:bf:35:c9:93:4a:6e:b3:2c:f1:
                    0f:59:74:7a:9c:35:3d:e2:eb:49:98:9f:5e:57:53:
                    aa:73:70:5c:f7:d3:b1:dd:59:e4:50:e1:62:6d:36:
                    1b:ef:92:57:cc:c4:35:88:0e:95:be:39:df:9a:71:
                    b3:9d:56:8e:65:83:49:ea:46:d3:8d:b2:ef:6c:8b:
                    80:b9:d6:29:f5:b3:a6:c0:09:43:4b:85:b4:db:0d:
                    a6:41:1b:a8:7f:9e:02:63:f9:db:2f:86:b9:0a:69:
                    31:f2:d6:99:2e:c9:f8:44:23:44:25:7f:e0:c7:d5:
                    78:ac:8b:e0:2e:40:9a:b7:a5:56:24:97:03:af:e0:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:72:D4:35:6A:10:A7:F9:89:2D:07:10:66:A3:8F:91:73:A1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9b:1d:61:43:0c:fa:17:55:11:9a:b6:dd:ae:31:9c:28:4c:
         1d:48:ce:81:16:b4:ce:b3:46:6a:16:28:b1:fb:6a:38:63:04:
         12:4f:31:e8:b8:88:7f:df:67:26:87:00:39:c5:e8:01:95:8e:
         0b:b2:ed:64:ae:89:58:11:f3:b6:42:e2:94:18:4b:e2:8e:80:
         7f:f1:e4:4c:88:a5:57:bc:be:51:6f:aa:5f:54:62:0d:f7:f8:
         25:6c:f0:d7:10:e8:6d:17:71:28:ce:42:00:d7:88:d4:ec:01:
         fc:df:91:b1:3f:d6:ba:ac:8f:48:fb:df:cc:dd:dd:66:6f:38:
         95:fd:30:9d:2a:28:11:29:bc:0d:d3:5d:d1:2a:85:6c:20:b8:
         e2:48:26:9c:e4:d3:9a:73:dd:6c:7b:47:5c:29:44:48:78:cd:
         b7:b7:a6:d7:6f:29:9a:90:fd:d2:06:e7:92:f1:45:cb:c4:81:
         9f:29:53:6b:e4:33:44:f1:6e:4a:f4:3d:4e:02:39:a8:f0:9f:
         8a:9c:e8:60:de:47:e0:4c:a1:35:47:8f:1a:04:44:81:c7:67:
         b0:20:fd:12:89:54:8b:58:59:1f:aa:9a:a1:5d:c7:8c:60:fb:
         7a:51:b3:af:75:45:d9:f1:5b:cd:3b:e3:e3:18:e0:b3:03:6a:
         ea:27:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:48:51 2025 by rpki-client