Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c85e8be-2173-3500-b7b7-d1458a4548e3.roa
File:                     9c85e8be-2173-3500-b7b7-d1458a4548e3.roa (raw, json)
Hash identifier:          uufqTO2EFolHewdXNjeTZYpNss3oVV5vTh51rQVrosY=
Subject key identifier:   B8:DC:40:BD:EE:9A:92:6A:A8:02:D4:49:91:01:1F:5A:F2:3C:9D:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA85789CC8DF13D8B8A940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c85e8be-2173-3500-b7b7-d1458a4548e3.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.241.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:85:78:9c:c8:df:13:d8:b8:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=f130ea50-a66b-44e8-8e7f-6a9ecc43c8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:ce:df:5e:b0:2c:b7:35:92:96:77:76:36:
                    48:77:78:50:a7:03:f1:6e:7c:e5:74:55:9a:56:91:
                    24:e1:cd:00:5d:e5:29:ca:e0:13:4c:29:80:ac:c9:
                    33:b5:97:e0:b5:d4:2d:36:29:6a:c3:60:67:c2:6a:
                    4e:df:e8:ff:fb:d2:59:bd:19:0e:2c:97:ac:d5:54:
                    e5:e6:35:bf:69:03:f8:bf:e4:b4:43:9c:e6:02:3b:
                    0c:c3:17:e7:3f:cb:90:3e:1c:91:ff:97:3e:e8:a9:
                    a1:dc:e1:53:e7:49:9b:97:ce:71:7d:8b:15:58:7e:
                    a3:a7:4e:de:db:3a:2a:be:40:1b:a6:1f:ed:d6:25:
                    5b:2e:18:21:8f:de:ca:be:3b:da:f1:fc:b3:04:42:
                    a0:a8:0e:44:f3:3d:65:0a:66:fa:44:2f:65:63:68:
                    a9:42:6b:2f:11:71:6f:5d:c5:cf:ee:68:f4:74:be:
                    83:0d:33:8a:da:77:49:28:55:a2:27:c0:06:c2:50:
                    f5:4a:e7:be:67:25:fa:5f:fd:4f:ea:bb:f5:85:0d:
                    8b:07:e2:28:b0:ab:98:94:00:a8:77:2e:c3:b6:f8:
                    8e:27:6f:99:56:0c:0d:5f:28:39:7d:d8:9d:f4:89:
                    a4:31:f8:9d:8c:7b:bd:45:34:e6:44:5c:80:f0:36:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:40:BD:EE:9A:92:6A:A8:02:D4:49:91:01:1F:5A:F2:3C:9D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c85e8be-2173-3500-b7b7-d1458a4548e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:57:42:79:cf:39:a7:97:c0:d8:9e:f0:1f:f8:73:b4:75:
         15:89:7e:61:c5:a2:69:6a:c8:41:34:48:c8:97:8c:e5:b5:8b:
         c7:41:80:9b:79:6b:2c:a5:3c:cf:9f:f8:4e:7f:70:13:54:2a:
         ff:38:62:ed:d6:ec:8e:58:ea:0e:01:13:1b:22:4e:ee:09:9b:
         13:50:8c:4c:d3:60:3a:93:9c:c3:ca:c5:55:6a:af:37:05:cc:
         21:fd:7d:46:19:24:a9:c7:6f:38:f8:37:12:6b:d3:70:b9:6c:
         0f:ab:b4:f3:5e:8f:ed:a5:50:88:71:f8:9f:39:a6:11:09:00:
         5a:73:0d:5c:e8:2f:2c:31:2e:60:9f:ea:5a:c0:ed:6f:c0:26:
         64:a5:f4:be:8a:80:d8:ec:3f:d1:ab:89:6e:5b:59:94:6c:81:
         92:71:8f:56:ca:d1:6d:de:22:e3:e9:df:77:cd:9f:30:78:03:
         10:6b:01:08:89:56:aa:ba:c3:53:44:a0:f0:86:a5:44:d1:78:
         01:87:ce:36:f2:85:23:e5:96:eb:a7:c1:d8:d4:85:cd:a6:e9:
         2f:6f:5e:4e:48:c9:20:6e:5a:c8:89:b7:88:0f:d1:81:10:df:
         33:ff:65:1d:aa:0f:47:65:fd:62:c8:e5:e3:8c:18:0d:0b:1c:
         24:a6:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:40:01 2025 by rpki-client