Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa
File:                     6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa (raw, json)
Hash identifier:          lBrLLwwdhANiUgqZY/7fyen7Rc9o9CabYVpnSkAd8Bg=
Subject key identifier:   3F:8D:71:74:36:59:83:46:29:7D:92:45:E4:5C:B5:81:1D:3A:45:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA7691545F067C57076F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.250.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:76:91:54:5f:06:7c:57:07:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=0030a999-d574-4f0f-afb6-567356021302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:ac:16:b7:88:af:03:0f:d5:53:dc:7d:64:
                    10:97:65:c1:63:f4:46:49:e1:09:4b:2f:b5:89:d4:
                    b1:cc:ed:88:fa:1b:be:bc:7c:de:c3:17:74:4a:52:
                    7e:f6:8d:d0:db:8f:a3:e8:17:4c:3c:06:44:a1:fa:
                    e8:e5:52:90:f0:c4:b6:87:10:5d:7b:45:16:72:5f:
                    ac:e6:2d:f8:30:e2:2f:5b:74:fc:c9:92:fe:4d:39:
                    1e:99:0c:6b:3a:a5:e2:4e:22:ff:59:31:4a:fc:d8:
                    e9:67:99:3a:21:4e:84:9d:84:29:95:a6:9a:2b:4b:
                    83:d7:6e:24:1d:48:01:df:a1:c8:2a:00:c8:1e:95:
                    f2:41:b5:38:45:e7:72:a9:fb:29:d3:1c:10:f3:8e:
                    e1:2b:01:2c:5b:36:8c:48:c6:73:b9:12:3f:ac:4b:
                    71:4f:23:ab:22:72:36:76:7a:8c:4e:d4:03:4e:4e:
                    17:3a:fd:24:e6:db:51:45:11:72:bd:c0:64:23:38:
                    9b:56:2e:af:cf:fb:e0:37:0d:f3:4a:3e:2d:72:b2:
                    34:7c:37:72:ba:8c:cb:c9:6b:60:38:e8:8d:57:bc:
                    93:76:59:ff:ed:51:31:26:b2:dc:5b:6f:17:9b:ac:
                    19:12:9a:f5:a8:6a:10:63:3f:bb:cf:db:72:36:b6:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8D:71:74:36:59:83:46:29:7D:92:45:E4:5C:B5:81:1D:3A:45:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:49:74:90:af:cc:b5:92:8a:cf:ca:c0:48:ce:15:25:41:
         92:76:09:c7:9d:26:bf:01:de:13:a8:47:c7:3e:a6:26:83:c1:
         81:78:4b:b4:45:b1:5b:48:3d:bc:22:7a:5c:80:6d:74:65:13:
         7a:a0:54:2c:0b:e8:e8:81:79:7c:21:40:5a:13:f4:73:a3:c2:
         a4:b7:ca:42:b3:91:4c:27:c7:68:1e:0a:81:a4:ac:92:d5:6f:
         d4:f6:9a:bf:20:ad:70:a7:c7:6c:aa:f2:6a:a7:fb:f1:13:0e:
         47:b7:3b:cc:93:f5:34:5c:c2:9d:20:63:6b:4c:9b:63:43:90:
         ae:33:fc:5a:90:58:08:90:5c:93:09:39:8f:db:50:fb:7e:e7:
         13:7b:d0:c5:36:9b:02:78:81:00:a9:61:6f:9c:8d:6d:4c:69:
         d9:f2:e6:45:bd:b9:8d:0e:71:99:05:5a:d5:8b:f7:3b:29:2e:
         cc:5e:cd:50:6c:5d:75:ca:4c:f0:20:cb:92:eb:5b:87:a4:af:
         e2:c3:17:5f:2d:8a:d7:43:9b:d7:c7:61:ce:71:8d:cc:73:7e:
         93:26:90:dc:94:13:59:4a:dd:77:7c:e4:cf:17:f1:0c:b1:d2:
         19:3e:93:d5:48:ef:8f:6d:0c:e8:2b:42:f8:27:28:ed:db:1a:
         d4:1e:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:42:13 2025 by rpki-client