Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643c247f-7cb1-300c-9fa7-327327c89df0.roa
File:                     643c247f-7cb1-300c-9fa7-327327c89df0.roa (raw, json)
Hash identifier:          ncqPv8XDq7tIxXSZREnAWH0IEauqL/WF20Q9DRSknZw=
Subject key identifier:   6C:4F:CE:3E:E0:45:D8:F6:05:E2:A2:96:C0:DD:00:87:26:21:4B:D9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D20F034E8AB5C10911F000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643c247f-7cb1-300c-9fa7-327327c89df0.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        96.39.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:0f:03:4e:8a:b5:c1:09:11:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=69f275ab-2ef5-4552-ac42-0c4f2443e326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:ab:45:60:e0:43:b0:99:cb:74:86:85:58:
                    44:5f:d6:22:9e:4e:ef:39:b9:5d:c2:66:09:d2:00:
                    29:ab:f2:7f:b2:12:35:9c:4d:64:3f:81:77:71:4a:
                    2b:a7:3f:d0:2b:e9:70:03:ed:77:71:07:db:66:73:
                    5a:e2:a5:9e:e3:7b:22:28:bd:cf:11:dd:a3:2a:d1:
                    cc:11:47:99:b1:e9:f9:11:87:1e:95:ef:a0:db:8a:
                    4c:79:c7:5d:bb:4b:b5:4e:2b:ee:37:59:1d:93:1b:
                    be:ef:a6:9e:3a:ed:46:0e:e0:6c:13:41:d9:bf:e5:
                    41:3c:4f:be:93:9e:fc:2d:15:5f:2e:ed:9f:b3:80:
                    21:0d:3e:44:77:9a:a4:85:41:02:50:02:3d:2f:0f:
                    dc:aa:b5:7b:80:c1:21:b1:c9:b1:0d:f2:1d:86:ae:
                    28:47:c7:dd:4d:72:52:f7:64:c4:93:a6:ce:21:ae:
                    b9:a8:a6:f6:ed:98:04:6d:ba:7d:84:bf:f4:f6:c1:
                    ab:91:f2:46:e9:5a:9e:79:9b:c5:1b:ed:70:43:08:
                    8b:74:44:cd:a0:ef:01:56:2d:c1:b3:14:ff:dd:df:
                    f7:ca:d3:58:71:ee:eb:f7:b0:32:63:77:3a:7b:fd:
                    d1:7c:05:4b:fc:4c:c1:2f:18:18:87:47:ea:29:1d:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4F:CE:3E:E0:45:D8:F6:05:E2:A2:96:C0:DD:00:87:26:21:4B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643c247f-7cb1-300c-9fa7-327327c89df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.39.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:ec:17:b8:78:62:fd:2f:10:e6:75:b5:81:08:c4:07:83:
         74:98:34:7d:e1:65:c4:5a:f8:6b:73:e8:9a:86:2f:79:b7:6d:
         46:ba:97:1d:69:74:56:50:9c:f9:07:87:b6:b2:cd:f7:b5:0e:
         fe:78:1d:6f:4a:b8:67:95:ff:dc:c9:df:4c:8c:1d:ee:20:64:
         eb:d0:40:91:da:f7:a7:93:95:97:27:5e:2a:a8:66:e3:0a:4a:
         fe:1f:90:11:b7:c5:f4:bf:53:ed:4e:41:eb:3f:59:f7:a8:64:
         8d:6c:4f:07:e0:84:22:fe:a1:8e:f6:61:de:c9:0b:c7:58:1b:
         a9:fe:ed:9e:53:54:04:0a:2c:e7:d4:cb:0a:18:57:65:44:6e:
         68:f1:db:71:b3:28:a9:d4:58:5a:32:65:e7:bf:c4:9c:ac:fa:
         bb:95:58:b4:f8:48:81:2a:4c:3d:c3:71:b5:fb:0b:e1:03:2f:
         3d:af:16:cd:5f:db:db:43:a3:d8:56:be:38:6f:47:52:bb:bb:
         95:f1:37:58:2a:2a:3b:5d:c8:c5:8e:ef:a7:41:1f:1f:02:fd:
         2e:f9:93:2c:50:6e:62:a6:2e:29:ed:78:6d:33:3d:7a:5f:a1:
         78:e5:6e:08:f6:e1:67:f9:6f:09:cf:ee:44:e6:9f:69:bb:e1:
         4d:84:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:54 2025 by rpki-client