Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ed340ac5-2033-3074-a14b-e2f62216d681.roa
File:                     ed340ac5-2033-3074-a14b-e2f62216d681.roa (raw, json)
Hash identifier:          q6O7WS9Q1Vl7rFwxxTh7D/vUPBBi4s1FmmquV5yZpcw=
Subject key identifier:   83:3E:02:8B:89:28:86:37:A3:1E:C1:7B:4F:43:DF:5F:00:8A:A9:0D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848705AF409131A365267939D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ed340ac5-2033-3074-a14b-e2f62216d681.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     40294
IP address blocks:        47.43.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:f4:09:13:1a:36:52:67:93:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=27584aa9-0454-465c-baaf-4a298f5d1f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c4:4a:15:9f:0a:58:ab:b6:62:03:66:a5:ae:
                    85:83:f3:02:bc:86:0a:93:e3:93:91:2c:89:c4:e8:
                    3b:09:11:e6:dc:0f:b1:5a:d1:7b:f7:97:fc:ff:b8:
                    57:45:76:0e:91:6b:d4:f6:09:ae:98:10:b1:07:e8:
                    a1:3b:bc:df:91:9a:d6:8e:2f:51:09:6a:0f:c1:2d:
                    a7:1e:3a:8b:22:9d:44:dc:a8:89:1e:b6:11:79:66:
                    bd:d2:68:90:19:95:85:e1:4b:e7:20:ed:66:c5:f1:
                    cc:0d:86:e9:e4:4d:aa:7a:09:bf:72:9a:ed:1c:69:
                    de:96:25:09:fb:90:9a:b6:06:8d:3b:22:86:91:6b:
                    a5:33:f4:50:ba:14:bb:b0:c9:9f:bf:30:92:98:26:
                    3b:83:0f:b3:f7:94:6f:11:72:ed:db:44:3c:31:17:
                    43:86:61:6a:01:8e:39:8b:8c:e4:46:62:3a:27:c3:
                    2e:ce:cc:0c:14:32:58:59:09:42:5c:ee:d2:e7:5d:
                    d3:f9:6b:72:77:2d:a0:48:1b:27:3c:76:d9:6a:41:
                    17:3a:e0:c1:b4:64:04:0a:d1:52:ef:70:e2:bb:c3:
                    2d:17:f2:e7:bc:0d:21:02:a9:8e:69:eb:fe:24:ab:
                    2e:db:dd:93:96:1d:14:03:94:ca:db:00:21:00:4d:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3E:02:8B:89:28:86:37:A3:1E:C1:7B:4F:43:DF:5F:00:8A:A9:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ed340ac5-2033-3074-a14b-e2f62216d681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:85:f5:d6:a3:97:48:0c:d8:9f:fb:30:d8:d2:cb:fc:ce:
         84:d8:ad:06:fc:0a:5c:a9:9b:f3:1c:f1:7b:0b:0e:74:1f:b6:
         c8:6b:2e:8f:b4:d5:76:41:92:c9:80:f4:53:38:07:53:ed:a0:
         cb:c5:75:aa:ea:a4:fb:fd:23:4d:06:29:ef:e4:57:6b:ac:4c:
         c6:e6:0c:bd:c9:2e:b9:e3:2b:ab:10:71:91:be:e2:c2:89:ed:
         f3:35:19:85:ce:53:87:98:c6:e7:21:bc:59:44:99:88:1b:36:
         fe:37:b0:f0:11:57:c1:09:66:aa:a9:5b:6e:6a:13:3a:28:4e:
         86:91:98:7a:23:07:f3:59:8c:e7:c5:41:b4:6a:bb:e7:a9:61:
         b4:76:73:d4:3e:64:87:36:af:06:4d:b3:eb:dd:b7:b1:90:36:
         de:f0:d2:9f:d0:ed:c1:96:3e:ed:27:7a:fe:6a:b1:30:0e:d6:
         96:61:ab:46:ed:a2:4d:be:f1:75:dc:62:91:7c:7f:90:8e:98:
         3b:d6:84:09:f2:cd:6a:cb:0f:90:df:ba:04:3a:12:f0:d6:4c:
         8b:d6:63:20:30:24:3b:8f:e7:b4:d2:d6:5f:98:26:4f:a0:a7:
         2d:0c:d8:9c:54:18:20:c8:16:26:de:e3:80:e0:81:53:a2:89:
         d7:cc:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:49 2025 by rpki-client