Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa
File:                     9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa (raw, json)
Hash identifier:          znMR+UaAFv8RP2lq4rqJLyc9Nyo42yRpVegc/FK3OjQ=
Subject key identifier:   C2:6F:5B:39:4B:F3:5F:79:F0:23:D1:8E:05:5F:66:7A:B0:22:DF:BB
Certificate issuer:       /CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
Certificate serial:       010D0C9F432858490CB16F3CE54E9A94762DBC00
Authority key identifier: 26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        64.112.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6f:3c:e5:4e:9a:94:76:2d:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=788d1827-a157-44c8-8388-ce036257d1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:88:3a:bb:9d:48:f9:bc:2d:43:24:0b:7b:
                    df:86:99:99:b5:b6:f7:53:9f:c5:74:b9:15:ac:de:
                    ea:4a:62:58:43:a8:f8:fd:9e:63:9b:aa:53:12:b1:
                    14:5c:90:0d:91:63:67:30:82:f3:e5:90:eb:63:24:
                    20:8c:a8:b1:a4:e7:b8:f0:2c:e1:6f:7c:45:43:02:
                    59:8c:54:ea:22:ac:e7:c0:70:be:bd:c8:82:9a:91:
                    e9:20:13:d1:e4:53:6c:bb:1c:f5:74:7a:7d:6e:60:
                    df:0d:ef:76:d2:c9:85:89:52:05:9b:de:42:0e:e0:
                    27:3b:f6:9f:e1:a6:56:36:2e:94:d8:b7:d2:46:b7:
                    48:1a:8a:1c:a7:73:cd:55:b6:f6:92:8b:76:d9:88:
                    e3:ad:be:85:7c:76:79:c4:16:0b:e9:91:f8:53:2f:
                    5f:ad:9f:54:25:93:25:9a:00:54:64:92:21:b7:9b:
                    62:f9:bd:a1:d5:4b:e7:82:bb:af:fe:0e:48:c1:4e:
                    0e:4d:43:31:02:3e:26:7a:03:be:0d:39:8d:ae:12:
                    ec:3a:65:9a:9b:32:bd:33:1f:10:15:18:45:cb:82:
                    52:cd:6e:83:eb:03:d6:8e:e5:47:b3:d6:42:73:ce:
                    bd:3e:08:31:de:24:43:36:89:cf:bd:ac:7a:f5:98:
                    fc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:5B:39:4B:F3:5F:79:F0:23:D1:8E:05:5F:66:7A:B0:22:DF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/9f7cec9c-afbb-3691-8e2f-de7853e41f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl

            X509v3 Authority Key Identifier:
                keyid:26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:55:ae:d5:18:6d:10:6c:ba:e8:82:01:36:5b:8d:8b:3f:1c:
         3a:64:fe:b7:d8:ed:a4:86:53:85:0c:c7:5c:e5:91:84:a4:62:
         83:e4:cd:fa:8f:ee:c4:18:3b:a9:c0:92:57:1d:c7:bd:d7:02:
         1e:7a:3e:9f:fe:8f:79:40:12:2f:11:6e:4a:60:bd:5a:f4:ea:
         82:88:2c:36:72:2b:10:bc:20:cc:46:e3:97:e9:34:ba:a3:f9:
         07:28:26:d2:7c:3b:fd:20:04:d3:d8:dc:8d:c5:3a:da:cb:94:
         0c:e5:19:bc:79:a3:e3:31:13:d5:41:4c:5b:18:76:e5:67:7a:
         8d:11:bd:bf:9e:60:21:9b:14:8a:db:30:eb:13:a3:7a:6d:c8:
         8e:5f:ac:9a:31:73:27:c4:7d:81:aa:f5:e9:3a:34:76:cf:b7:
         f0:d3:46:f6:40:14:fa:af:18:a7:aa:b6:eb:8d:b1:93:4a:94:
         59:fb:1c:9b:c4:4f:d7:92:f1:e4:ee:1b:f6:d4:f1:40:33:7e:
         2d:9f:d8:af:67:35:51:92:46:48:4c:21:72:e7:c6:d2:59:33:
         63:92:0a:64:77:35:54:35:2b:0c:7c:7e:64:2e:d9:05:48:93:
         d0:b1:30:4a:b9:20:c0:76:a1:c3:a7:e1:db:ff:fe:a8:d8:58:
         b9:29:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:10 2025 by rpki-client