Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60276cd1-35a4-35b7-8906-41792af584ca.roa
File:                     60276cd1-35a4-35b7-8906-41792af584ca.roa (raw, json)
Hash identifier:          lZxQCz0hVgxeq05n6nlLRi/oFyBHvqyGIMUqe/qAMsc=
Subject key identifier:   D1:81:E4:0B:6C:91:17:7A:FF:F4:1F:3E:D0:50:52:B0:C6:4F:3A:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA8CB6A014FD00466CFA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60276cd1-35a4-35b7-8906-41792af584ca.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.249.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:8c:b6:a0:14:fd:00:46:6c:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=ed932f93-7d9a-4ef6-8c13-cc712f190d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:69:78:e5:69:b4:a4:f1:46:f0:ba:06:01:
                    5b:80:f7:e5:91:53:ae:ab:bf:d6:d1:76:bc:19:fd:
                    bc:e5:7e:dd:ca:d2:51:9a:7b:0d:ba:e9:5e:1f:13:
                    ad:b6:1e:a7:fc:91:d2:cc:fc:09:15:b8:93:45:eb:
                    89:11:a5:3e:4a:f7:fb:1e:85:69:4a:d6:50:32:52:
                    c7:2c:db:72:2f:37:6c:29:6f:93:b7:fb:1a:51:b6:
                    b7:13:b4:23:fc:7d:66:03:e3:01:41:b9:32:e8:3b:
                    dd:74:71:33:ae:8c:a2:7c:fe:7b:44:aa:ff:e8:f7:
                    23:0f:6f:42:bf:cb:75:e5:64:3d:ed:c1:a9:e4:3b:
                    ff:d4:3c:d2:cb:2c:53:e5:92:ea:0b:b2:a2:b8:16:
                    94:92:81:6d:51:b1:fc:60:e7:fd:ce:8f:d2:f1:68:
                    cd:d1:4b:7c:e8:12:37:3b:ba:68:d4:b8:a9:35:ea:
                    39:bc:bf:47:94:67:e0:b6:61:4c:58:1d:d4:00:96:
                    2d:eb:d2:27:95:ee:af:08:3b:e0:cd:bf:3c:07:7f:
                    7f:3f:72:36:4b:1f:7c:f7:ad:b1:59:82:2f:be:ee:
                    57:b4:b8:81:d6:09:e6:36:91:f9:13:f7:50:26:cb:
                    66:72:e2:47:a8:1b:54:4e:9a:0c:5e:84:78:25:47:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:E4:0B:6C:91:17:7A:FF:F4:1F:3E:D0:50:52:B0:C6:4F:3A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60276cd1-35a4-35b7-8906-41792af584ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:85:15:ad:ce:c9:37:3e:ad:0c:86:9b:18:e5:a2:32:87:
         b2:02:95:03:91:2d:af:8c:49:45:09:91:ca:2b:2b:bb:4a:1b:
         34:c9:9c:94:8b:b4:b5:fc:2d:b4:07:86:38:b3:1c:e4:df:c2:
         c4:37:57:3a:34:e7:f1:cc:5a:48:9a:0b:ef:ed:29:af:c4:76:
         68:3c:ef:4e:74:67:a7:8d:c5:38:68:82:5b:1b:a1:8f:a7:8a:
         93:6a:1b:b3:1d:1c:af:97:4f:b1:8b:db:6c:0d:8a:72:cd:34:
         08:39:cd:2e:1b:95:8b:fc:c9:41:33:7b:b3:ce:91:03:33:a2:
         a9:f7:03:ec:5d:8f:75:65:69:e4:cc:fc:50:35:67:ae:6d:8d:
         8a:c5:93:79:e6:3a:60:83:de:dc:19:e5:78:a3:a8:58:59:2e:
         58:38:a8:1b:57:5c:6e:19:fe:28:3c:22:f0:26:22:91:9a:4c:
         88:06:89:96:fa:7f:38:21:e4:c0:d9:e4:ae:cd:01:5d:b0:f3:
         b7:59:03:98:6a:3a:9b:12:84:b5:66:78:11:6f:99:cc:2c:83:
         42:4f:45:c8:01:70:04:fd:d0:85:35:27:e2:3c:1d:ac:1a:79:
         5b:28:26:1a:af:e5:d8:77:6d:38:79:f1:cc:84:00:7a:f1:f3:
         9c:e5:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:53:05 2025 by rpki-client