Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/30c663ba-0867-3314-b5d5-4d27ba0751b5.roa
File:                     30c663ba-0867-3314-b5d5-4d27ba0751b5.roa (raw, json)
Hash identifier:          29cDH6UhI6g5gScxR/Lh2/Z1f89lDHfcGqLcpfmLz+w=
Subject key identifier:   EC:A0:69:68:86:81:07:FC:0C:D4:21:7D:50:9A:B8:38:99:E0:13:2F
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584917DC2B919638A8BAEEF201A0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/30c663ba-0867-3314-b5d5-4d27ba0751b5.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     15319
IP address blocks:        63.247.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2b:91:96:38:a8:ba:ee:f2:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=120092b4-1ca2-4695-922c-08968b381ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:e9:de:63:9c:46:0d:3e:99:a2:da:71:e5:
                    a5:c5:2b:8a:6f:c4:98:d7:98:fd:be:fe:48:4c:54:
                    9b:72:e2:81:4c:76:93:77:de:ea:22:45:7a:1a:b8:
                    7b:89:9d:4f:3a:8d:fb:63:86:5a:34:c1:39:94:56:
                    a6:ad:12:84:7f:20:7b:0f:21:3f:d6:bf:4a:50:6d:
                    35:9c:e8:0e:79:cd:4b:a7:8a:fb:3e:58:27:eb:96:
                    f5:89:97:89:54:19:4f:ca:bd:eb:70:06:f6:33:6e:
                    fe:fc:d8:9d:d3:b9:dd:36:75:80:90:7a:a7:34:0b:
                    d0:da:5c:52:22:09:26:47:ee:61:71:d2:07:db:cf:
                    c2:0e:97:48:ff:87:f5:59:f8:97:98:64:ba:2a:c9:
                    e8:f0:c4:6d:c4:29:8b:b0:bc:d3:2d:3d:86:08:89:
                    53:40:83:96:52:e1:7d:c9:17:01:fe:a2:00:4c:da:
                    99:b9:14:4d:cb:f5:4b:ed:b8:11:18:66:8e:90:46:
                    d2:48:60:09:d3:31:cd:84:54:f4:b4:a8:5b:55:37:
                    8c:06:23:13:ca:17:88:19:d0:8e:8d:3b:eb:83:0f:
                    3f:d6:16:2c:9b:c6:50:2c:73:96:d0:7c:eb:56:fc:
                    b9:b1:42:49:cf:a1:58:e0:89:96:54:02:97:94:67:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A0:69:68:86:81:07:FC:0C:D4:21:7D:50:9A:B8:38:99:E0:13:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/30c663ba-0867-3314-b5d5-4d27ba0751b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:6a:23:36:85:3c:95:06:f4:07:dd:a4:1e:21:c8:04:46:
         44:ba:70:4c:f4:02:1c:b7:83:1c:26:56:21:a8:9c:be:2c:50:
         b2:3c:a3:fa:cb:14:39:39:17:1f:d5:62:58:ec:65:9c:36:6c:
         b8:63:c3:23:a7:34:79:17:b2:db:7a:15:c9:bd:f3:e3:7d:85:
         b7:33:e1:19:46:84:a0:cd:ba:50:cf:07:9e:97:20:63:97:6c:
         ae:7e:46:f5:61:33:13:c8:b8:cf:87:1a:3e:97:f1:31:af:33:
         b8:96:fa:90:5c:93:da:8f:09:02:a7:8b:90:50:e2:1f:16:0a:
         e4:79:b3:07:8b:95:d2:ce:93:0d:25:10:dd:20:04:70:c1:63:
         5b:9e:5e:17:0a:bd:99:1b:51:85:c9:81:05:c8:87:32:1c:36:
         35:c7:db:75:33:a2:26:2f:05:66:d3:82:4d:d4:60:b2:25:9b:
         8e:a9:db:16:81:72:ab:92:11:81:67:25:83:6b:7b:6f:ff:f6:
         45:b2:83:fe:43:4d:c6:87:8d:9a:70:de:a2:dc:89:91:97:19:
         44:66:38:eb:0b:88:e2:e1:0d:81:1a:fb:2e:f5:94:84:db:bf:
         b4:ad:f1:3b:37:d6:3a:cd:ed:f9:ac:30:20:85:85:69:94:b3:
         40:06:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:43:58 2025 by rpki-client