Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/4d743a49-6443-3756-9963-f32eee17b5f7.roa
File:                     4d743a49-6443-3756-9963-f32eee17b5f7.roa (raw, json)
Hash identifier:          UBz/zxdLgx5rnUa2LZRhTsIYEVVFDrb72xy/uJx0cEo=
Subject key identifier:   73:79:73:2F:BA:E4:7A:5B:5F:79:4D:06:76:EF:FE:3A:69:42:6D:15
Certificate issuer:       /CN=c30b1281-e5b2-4923-ba75-e49d8c0ab081
Certificate serial:       010D0C9F43285848090FAA9C1D2DC009F8E4D800
Authority key identifier: 24:69:79:E9:BC:1D:1C:25:F2:33:08:E9:99:BC:4C:7B:E2:45:3C:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/4d743a49-6443-3756-9963-f32eee17b5f7.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     54406
IP address blocks:        64.4.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:aa:9c:1d:2d:c0:09:f8:e4:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30b1281-e5b2-4923-ba75-e49d8c0ab081
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=1c1e9119-0182-4b83-a418-ca5fce39502a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:95:06:f8:5c:6d:43:e4:4b:4d:bc:1e:aa:
                    6b:8a:15:47:3b:9f:de:64:10:45:71:c4:ce:7f:f7:
                    b7:36:76:74:a5:94:8b:de:76:22:3e:96:c9:da:a1:
                    1f:21:df:05:00:d6:48:81:f6:0e:70:56:23:0d:41:
                    5d:e9:16:15:42:77:83:9f:d8:af:dd:77:26:63:76:
                    be:e7:94:d9:01:fe:b6:f5:69:f2:ab:37:5e:9c:eb:
                    6e:c6:5e:41:47:73:54:3b:25:e2:76:e1:a0:f8:53:
                    e6:e6:fa:da:6d:ca:1e:45:49:21:fe:04:f3:9c:70:
                    e7:3a:36:8e:f4:60:1e:0b:7d:54:73:47:ba:57:e3:
                    81:38:c2:80:f3:e1:d3:28:dd:98:9f:07:e3:f4:50:
                    b1:1e:08:a7:05:b3:16:b6:b6:8b:80:bf:30:19:20:
                    06:af:d7:cf:34:b5:c8:97:55:af:0c:44:65:25:8c:
                    aa:91:bc:93:68:c9:e9:4b:cb:25:6a:88:75:b5:6a:
                    a5:5d:a7:e0:e1:e0:0e:68:41:06:10:a0:4d:0b:bc:
                    2b:76:04:b5:ba:63:8c:6d:15:dd:44:7b:de:15:5e:
                    bd:ed:43:d7:22:3d:57:ef:09:93:9d:ba:36:30:7d:
                    2a:36:3a:2b:6a:8e:1c:52:a2:be:82:1f:dd:6f:7c:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:73:2F:BA:E4:7A:5B:5F:79:4D:06:76:EF:FE:3A:69:42:6D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/4d743a49-6443-3756-9963-f32eee17b5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/c30b1281-e5b2-4923-ba75-e49d8c0ab081.crl

            X509v3 Authority Key Identifier:
                keyid:24:69:79:E9:BC:1D:1C:25:F2:33:08:E9:99:BC:4C:7B:E2:45:3C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:87:a3:58:8e:94:61:a2:b8:13:6f:9f:29:9c:6d:23:e6:
         d7:09:3f:82:eb:a2:75:0b:eb:c9:34:3d:22:eb:67:7f:6f:e9:
         27:1e:42:db:0f:41:b1:ea:90:d3:c3:f9:19:89:7a:36:67:c1:
         d5:ab:a3:b3:4f:7d:fe:c4:ca:92:0a:64:ab:42:2c:13:e0:39:
         32:b2:43:14:0a:1e:00:62:c9:e1:42:a3:59:5e:f1:fa:42:c4:
         27:18:68:26:86:2b:ea:14:b6:e9:fe:14:3d:66:ab:0e:8c:dd:
         8d:4c:fb:8b:50:fe:d5:01:b2:c3:c9:c8:54:ed:24:6f:31:0b:
         bb:0e:3e:1d:0c:15:a3:28:b1:35:bf:a7:15:b8:0b:3f:25:a2:
         e3:f1:4c:6a:0f:83:53:7a:67:fe:55:c0:7f:c1:a6:c1:71:a9:
         be:5a:e2:38:4f:f3:e5:89:cd:95:d7:93:d5:08:34:50:f5:e1:
         d3:af:32:94:85:dc:2b:08:46:89:3a:2d:16:0b:dd:0b:09:6d:
         64:03:84:27:cd:47:f8:fd:60:bb:76:61:d3:d4:21:f9:9c:b6:
         73:75:52:bd:d5:03:2f:9a:ee:ee:55:ba:ec:b3:26:d2:68:b0:
         30:03:7d:22:6f:a9:a6:ff:e6:44:73:eb:4f:d0:b0:54:c2:7a:
         30:9d:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:44:05 2025 by rpki-client