Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa
File:                     0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa (raw, json)
Hash identifier:          v0puaTZ+O0XRDs6wZR18EyfXUkPuQvWHdZTnMNPOD4M=
Subject key identifier:   17:52:53:2F:A9:79:23:3D:58:F0:78:F3:07:FA:BE:B3:E4:E3:3B:E9
Certificate issuer:       /CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Certificate serial:       010D0C9F432858490E16CB0BCADB09A911415B60
Authority key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     57976
IP address blocks:        64.227.216.0/21 maxlen: 24
                          64.227.228.0/22 maxlen: 24
                          64.227.232.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:cb:0b:ca:db:09:a9:11:41:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=11b70a40-cabe-4a4a-91ff-2d1bd36ef97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:75:9a:14:54:d0:28:ae:bd:19:d1:aa:4e:
                    42:4d:21:0a:3c:18:cc:9c:01:54:65:6f:f1:c7:ed:
                    34:19:1f:39:70:6f:f3:fb:c8:37:77:ec:9c:07:a4:
                    5a:50:4c:7c:8e:9c:24:68:47:15:d1:34:8a:32:68:
                    38:23:ba:27:02:a5:4c:9e:6e:15:cf:78:f2:d6:5c:
                    e8:03:7c:86:d5:f2:50:d4:b1:de:49:88:20:22:e3:
                    5c:61:80:1a:bf:a6:90:fc:fd:5e:6c:c4:60:ee:ed:
                    29:ed:76:d8:2f:bd:ea:fe:b8:23:f9:e1:fd:58:1c:
                    14:11:d7:23:7c:76:03:b9:2e:d4:c1:29:fa:6b:0e:
                    88:29:41:f9:e0:17:8e:62:6a:2c:f8:19:58:58:61:
                    f8:1c:9d:a6:74:a7:b5:03:66:46:09:16:ad:81:70:
                    ce:ee:28:54:83:98:29:e0:b4:dc:45:1b:c5:cb:76:
                    12:0c:b7:db:b6:28:ad:34:52:2d:4b:84:6d:88:36:
                    a4:e5:10:e8:14:91:6e:d8:78:f2:ca:2a:d5:96:2d:
                    86:68:82:9c:2d:04:39:58:2b:de:ce:ea:30:35:19:
                    2f:38:8b:ee:02:b1:8a:d8:11:be:2c:91:96:1c:59:
                    6f:4c:f0:7f:a7:f0:c7:0b:79:5f:39:c1:b1:54:1c:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:52:53:2F:A9:79:23:3D:58:F0:78:F3:07:FA:BE:B3:E4:E3:3B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/0cb76c26-c5d0-3e65-9bb8-d0726168daac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl

            X509v3 Authority Key Identifier:
                keyid:AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.216.0/21
                  64.227.228.0-64.227.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:66:b9:44:14:6c:33:bb:47:7b:8a:ae:8a:a8:0b:5c:b0:6d:
         38:41:d9:57:7b:7b:9b:96:53:ff:43:2f:1c:57:b2:4c:84:84:
         c9:d5:a0:06:c7:0e:3c:f0:30:93:88:5b:e0:77:29:a6:29:09:
         cd:e3:3e:6e:d7:a7:9e:ef:77:c1:63:87:ad:ae:cf:c2:6a:57:
         61:34:cf:27:8b:6c:1a:db:67:76:ff:7b:1d:4b:ff:c7:e1:9c:
         25:a2:c7:31:d1:96:ca:45:5e:9f:da:40:ff:a6:eb:11:94:4e:
         75:3e:d0:8a:15:4f:7c:39:1f:5a:78:b2:7f:6e:0e:a7:de:14:
         84:9f:d5:67:20:1b:e3:5f:17:42:1d:1d:1d:99:ab:e9:08:fc:
         0e:1b:4d:6c:1a:31:2f:e5:9e:5c:df:73:9e:61:9a:0c:60:af:
         e3:32:bc:cc:54:99:87:9b:d5:4d:88:1c:da:aa:4d:7a:e9:b2:
         13:0d:2f:2b:aa:df:03:7c:2e:12:a5:8e:6a:e9:7e:a6:f4:e5:
         1d:ca:18:80:8e:41:f1:24:a1:cd:60:f8:de:40:75:1d:11:3e:
         62:ac:e2:6e:0b:9a:ce:a3:78:1d:d6:ff:08:6a:c6:13:c7:cc:
         45:eb:e8:11:0c:82:be:4d:1b:63:10:8e:ea:2e:13:d3:20:4c:
         66:af:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:45 2025 by rpki-client