Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b9cdaa63-30ca-32da-a992-137d1b705f1a.roa
File:                     b9cdaa63-30ca-32da-a992-137d1b705f1a.roa (raw, json)
Hash identifier:          eB5PJ/pSLYN7vMD5ipvdMcc5w/Bb0cbl6tlFu4ro5rI=
Subject key identifier:   2B:EA:26:64:1B:51:2A:86:01:69:EA:F4:9A:31:76:C7:6A:25:45:D3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C84BD8945709D03E1B39EC00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b9cdaa63-30ca-32da-a992-137d1b705f1a.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36040
IP address blocks:        64.15.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d8:94:57:09:d0:3e:1b:39:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=fb56596a-51ed-4aae-9316-b466d37eb381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:74:2b:d0:ab:2d:13:42:4f:c2:32:c4:7c:
                    e3:04:3a:ad:af:56:45:b5:fe:c3:60:11:dd:38:37:
                    9a:6d:b9:56:98:b5:3d:4d:f1:3f:06:e0:18:5d:08:
                    eb:27:41:01:af:5e:6d:2f:de:24:b4:a2:8a:39:84:
                    34:04:bd:a9:85:31:d9:21:13:7a:6a:e1:79:b1:aa:
                    7f:3b:d9:24:34:02:b3:f8:7d:79:35:4f:a0:ea:91:
                    5e:d4:74:bb:06:60:ef:5e:92:8e:36:f5:1a:43:57:
                    12:de:8e:cf:b9:76:08:7f:39:e9:22:5c:c7:61:91:
                    89:2c:43:b1:3f:5c:f1:a0:01:86:f1:7c:42:19:2d:
                    60:ea:54:50:9e:5b:f1:e1:50:72:73:10:b4:40:a0:
                    87:17:fa:26:6f:36:4a:96:e4:65:34:0b:67:fe:c1:
                    90:2a:0a:83:7e:1a:1d:45:9b:79:18:6a:cd:de:8c:
                    24:eb:8f:f8:72:cd:3a:20:0f:61:ca:e7:1a:9a:b6:
                    35:e1:1c:d3:67:4c:48:af:49:ef:84:8e:16:99:c3:
                    50:39:bc:ae:8e:d2:1a:18:77:f3:a7:57:7b:94:d9:
                    ee:50:ac:d8:e0:e1:0e:d7:70:d7:9a:0f:63:46:93:
                    2f:1d:49:43:56:67:ee:45:72:7b:d5:aa:7a:c7:27:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:26:64:1B:51:2A:86:01:69:EA:F4:9A:31:76:C7:6A:25:45:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b9cdaa63-30ca-32da-a992-137d1b705f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:44:b7:39:8a:59:59:74:f0:d1:8c:54:c7:f5:80:2e:f4:
         a6:b0:91:e6:4d:53:68:7a:01:63:fe:42:d9:2c:d3:e1:c6:cc:
         c2:75:77:eb:ab:c5:2b:68:80:c1:1f:45:4a:37:16:b5:bd:b6:
         3f:95:cf:24:b7:0c:2f:41:39:93:6a:67:d8:7c:b5:b1:46:97:
         a4:90:1f:9b:ed:4a:5f:ff:54:e3:0b:fe:99:9e:40:ed:6d:77:
         34:96:b6:0f:bd:66:e9:b2:83:ed:e0:a6:e1:ae:0c:60:6a:0c:
         37:fa:b4:bf:2f:0b:d2:ce:d4:0b:04:8f:63:4e:29:0f:82:f0:
         e3:e4:1b:36:d6:0b:d8:07:99:1d:74:e1:f9:9a:77:cc:91:c4:
         5e:6a:09:86:64:84:2d:44:20:7d:c1:2d:ba:68:9d:46:53:27:
         fb:3c:b3:fd:e9:64:ab:d2:74:b6:72:7d:65:d6:62:6f:ef:d3:
         66:38:e4:95:cd:7b:b0:ca:4e:1e:f1:9f:5f:65:20:c0:52:cc:
         ba:a8:df:bd:61:1d:4a:c8:b5:a9:85:42:07:4c:fe:90:d0:cd:
         bc:53:d0:8d:ba:fd:42:46:2b:60:ca:e2:58:28:8d:f0:94:e7:
         4a:3f:c9:83:be:2f:87:cf:c8:ec:2c:d6:e0:a7:32:60:29:be:
         41:2e:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:49 2025 by rpki-client