Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa
File:                     e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa (raw, json)
Hash identifier:          l4PDdWqWhpInv9gUMVdjW2LNZy/1Rofpzbfc7dPcDS4=
Subject key identifier:   66:5D:85:9B:F3:56:DE:54:BC:B1:C9:C2:69:4C:23:7E:42:9B:52:F5
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F43285848EF6160EF8BB044072F335A80
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        64.35.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:60:ef:8b:b0:44:07:2f:33:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=ad615153-dc27-4bb5-ae3e-61404ea3ecf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:3b:ad:8e:95:92:c0:e8:1e:38:12:6b:a3:
                    4b:f7:48:65:74:d6:39:48:fd:48:c4:d8:cb:77:76:
                    58:55:22:ba:06:05:c0:aa:1a:c1:b2:dc:bd:42:31:
                    c2:02:ca:94:a3:1b:31:62:12:4f:6f:88:9a:94:01:
                    88:a2:26:33:2b:f8:91:6d:52:e1:b6:f8:40:9e:01:
                    10:9a:7e:60:c5:41:95:1e:b7:72:f5:fa:c7:2a:a9:
                    7d:fd:16:7a:8f:7b:48:75:30:b9:e3:c3:45:99:d4:
                    49:a4:11:11:29:4a:14:ca:84:c7:8b:d9:c6:30:03:
                    26:ac:2c:4f:fd:f4:47:12:85:1f:65:07:3a:98:51:
                    43:61:b2:f3:9d:11:67:83:8a:40:6d:07:0f:c5:c5:
                    94:94:17:91:d6:90:3d:ae:fa:47:70:7d:fb:51:87:
                    d3:24:c4:4c:cb:c1:b8:4e:81:84:2d:e2:b6:05:5e:
                    89:36:c9:9d:f9:2a:90:fb:06:6a:c9:3c:86:6c:4a:
                    f3:82:37:fd:f1:f0:2e:ca:d5:f3:ac:cc:ea:62:27:
                    2f:8a:0f:f2:5a:41:c7:4a:06:be:4d:44:57:e6:dd:
                    12:28:71:08:6a:74:3f:02:ea:91:54:71:34:43:ea:
                    b9:c4:37:28:e7:9b:14:b5:fe:33:c3:f8:5c:4f:70:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5D:85:9B:F3:56:DE:54:BC:B1:C9:C2:69:4C:23:7E:42:9B:52:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/e16eb81f-efb0-335a-9ea8-1e97cfaa0c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9b:c2:f8:ee:80:15:ed:bd:e3:f7:b5:40:6a:76:0f:33:c8:
         57:15:08:10:07:61:1d:93:03:12:90:00:de:c6:97:ee:05:e9:
         e1:55:be:e7:45:48:9d:c4:8c:b7:60:21:a3:8b:c6:5c:01:98:
         6e:34:03:cb:c1:40:9c:96:4e:c0:bd:cd:a8:76:5c:62:b1:e8:
         cf:c3:25:9d:41:a1:70:d7:0f:58:79:1a:07:58:01:e6:00:ad:
         7c:01:2a:2a:cc:43:38:49:82:2c:f5:45:5b:5a:4d:27:a4:45:
         a1:51:79:4e:d7:eb:38:34:4b:89:22:13:35:61:6a:02:80:fb:
         97:24:d4:97:89:4d:8a:6d:a3:53:57:d0:6b:8e:07:09:85:bf:
         ff:c4:b4:2e:47:13:d2:e5:5a:b3:e3:8b:69:70:bc:c2:23:fd:
         66:3a:0e:b4:22:b4:f0:ae:d0:86:29:77:d7:72:c8:84:d2:7e:
         77:61:58:04:5f:3c:51:e6:58:ff:a1:06:86:39:a6:ad:0b:cd:
         c4:c2:ea:fe:70:6a:8f:70:65:fd:74:62:12:52:6a:83:22:56:
         ad:0b:6b:bb:5d:6b:6a:63:c5:28:2e:20:82:d9:c8:af:c5:11:
         f5:93:db:2d:53:c3:6e:f9:42:68:8f:0d:28:59:6b:26:44:04:
         a9:0e:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:06 2025 by rpki-client