Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa
File:                     6c3485d6-1237-32dd-8713-2aed82f2e07d.roa (raw, json)
Hash identifier:          iF+kVInz51KICWf2/bmU531ZJchX8vpMSdA2McgGgN0=
Subject key identifier:   E7:2E:27:11:69:8D:95:BB:37:50:57:88:16:05:E5:BE:E9:02:C5:6A
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F432858480644F871A4B4D2C511C27640
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396982
IP address blocks:        170.10.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f8:71:a4:b4:d2:c5:11:c2:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=c8ab36ad-8825-4c85-b346-9d0c0afb78c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:4b:4a:6e:53:51:47:05:b3:7a:b4:f3:0f:
                    0c:db:a0:db:b9:73:33:91:c4:7d:ca:1e:3b:b8:c8:
                    ac:b2:18:75:28:ef:b9:70:bc:ed:26:e7:a5:34:04:
                    57:33:e8:c0:23:27:83:c7:3c:5c:cc:26:02:c7:e6:
                    53:dd:5a:ef:da:ac:47:91:19:9a:7e:0e:35:9d:ad:
                    b5:bf:8a:17:37:4c:a7:99:81:4b:5b:72:64:37:9c:
                    52:43:a3:a6:e0:c2:6b:38:c2:27:40:73:2c:07:2c:
                    f9:77:06:50:70:4f:41:db:51:be:64:57:37:6e:79:
                    27:7b:99:29:86:68:19:99:6f:17:4b:9c:79:e7:8d:
                    f6:4f:51:c4:11:2c:85:8d:56:57:35:89:00:18:40:
                    58:ba:32:f1:b2:a1:2a:ff:65:6a:4a:c3:46:0d:eb:
                    e7:1c:b9:19:b8:02:39:3e:19:78:bc:1f:c4:cd:70:
                    57:02:52:9e:82:81:0e:32:9b:df:5d:5d:aa:77:81:
                    c6:22:c4:b1:84:06:de:75:34:a6:8d:4e:ee:e5:66:
                    66:3f:d7:68:e6:5e:a9:cf:8a:7f:58:e8:48:da:8f:
                    b1:30:d9:de:a2:39:b9:e6:75:4f:0a:8e:b7:71:4a:
                    2c:52:23:c9:7e:93:d3:41:da:1e:0a:af:b0:b6:7f:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2E:27:11:69:8D:95:BB:37:50:57:88:16:05:E5:BE:E9:02:C5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6c3485d6-1237-32dd-8713-2aed82f2e07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:54:68:40:74:7c:f9:3e:a9:71:18:89:66:e8:ef:04:3e:4f:
         36:d0:17:69:dc:d3:ac:fc:f0:a8:79:c0:a2:32:d6:ec:74:55:
         8c:b2:24:c2:70:62:ab:b3:bc:42:ef:29:b3:a6:85:4b:9c:bf:
         2e:1e:ab:c1:00:e6:72:b0:bb:28:12:bf:a8:e5:28:f6:88:96:
         60:dc:3c:56:ce:92:69:3b:e3:75:d0:8c:65:b4:81:45:da:e3:
         be:fa:b8:a0:6b:8f:f4:de:85:f9:b6:ef:7b:95:75:5a:8e:dc:
         9a:13:4a:df:93:44:22:c6:35:64:1b:d9:ed:05:64:25:58:0a:
         ad:84:d3:a5:4f:78:4e:da:ef:1c:4d:e7:9c:52:5a:32:a7:d6:
         95:f4:93:cc:c1:d8:c3:3b:2a:17:d3:21:9a:1a:98:f7:52:ee:
         26:86:17:a6:10:f2:9a:61:3d:25:5f:cc:10:13:7a:65:4d:2a:
         3b:0d:04:c2:7b:f1:14:58:57:9b:c1:31:7b:ef:17:55:c6:df:
         f5:2e:8b:e3:dc:8f:9f:26:8f:df:86:b9:89:35:e8:38:6a:4e:
         a2:cc:14:55:34:76:32:84:4e:89:65:92:ea:8e:63:32:79:72:
         58:2c:3d:82:da:6e:4e:34:f2:6a:be:5a:29:b7:e9:b3:94:83:
         db:0d:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:28 2025 by rpki-client