Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
File:                     b7134fac-817f-3d3b-94d7-fe93439e4a04.roa (raw, json)
Hash identifier:          2uwc8K5eRx2/WXKFTgBF6EAGZMzYJ4xz/Mk/KdaJ8fI=
Subject key identifier:   39:18:D3:96:81:D0:68:DE:18:10:B5:0B:B6:18:AA:0D:B0:F1:B8:1B
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584917DBFF796CFFA2D014421380
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     20326
IP address blocks:        64.130.48.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:db:ff:79:6c:ff:a2:d0:14:42:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=da5bc05b-2741-4a37-8a22-b1e3f548dc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:81:5a:fe:49:04:94:42:72:21:7c:56:d8:7b:
                    af:c5:27:e6:c7:06:58:74:c4:4e:46:e1:e6:12:d7:
                    9f:89:11:da:a5:64:13:75:fa:f3:5f:d3:6b:8e:5a:
                    db:ea:b9:d8:a2:fa:80:ef:34:92:09:50:a2:ba:cf:
                    e1:35:74:32:fe:71:e0:25:a4:42:23:18:51:6e:38:
                    a1:a0:69:91:97:86:86:c1:5c:7d:a0:27:7f:14:60:
                    db:df:bb:93:9b:fc:27:a2:2c:4b:9d:a1:9f:d6:9c:
                    d3:46:ca:69:08:ff:cf:fd:62:50:9d:d4:4b:60:ce:
                    54:e7:0a:7c:5f:b3:6a:04:42:0b:75:bd:ff:76:82:
                    3b:b5:01:12:66:77:b9:38:65:0c:d1:01:e6:d5:77:
                    05:ce:eb:4d:5a:c4:66:5e:af:7b:5c:73:e6:68:d0:
                    19:a8:9a:c4:bd:d6:b9:fa:e6:58:ef:4b:63:ff:1b:
                    9c:b0:07:6d:03:03:c0:f6:21:0d:01:60:d4:1b:16:
                    15:98:d3:98:00:77:d9:cd:fe:10:a2:2e:27:9a:1b:
                    9d:da:d0:7a:43:6f:0e:03:e7:8e:01:25:49:80:fd:
                    80:51:e7:e0:1c:85:82:73:fb:db:62:86:d5:97:ae:
                    37:f9:36:e8:61:d2:eb:d7:c4:45:c9:16:e8:ef:2e:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:18:D3:96:81:D0:68:DE:18:10:B5:0B:B6:18:AA:0D:B0:F1:B8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:06:39:96:1a:ec:86:d8:66:6c:de:8f:48:53:59:22:a1:48:
         82:8b:ca:88:d6:a1:33:d2:75:b0:39:ca:3b:7b:d9:96:2f:30:
         fa:75:7b:20:60:20:24:5a:f5:3a:e9:aa:9b:5e:c0:8a:57:e5:
         99:e4:c5:2f:21:7e:0f:ba:8d:2e:0a:5a:96:33:25:64:a1:ba:
         ab:fd:60:d6:54:f4:1a:0c:da:9f:a5:aa:c7:6a:a5:de:1f:c2:
         1d:6f:16:11:a7:c4:93:0f:b5:b2:8a:1f:c1:30:00:93:1e:9a:
         bb:51:62:a0:c8:fb:13:95:cb:0f:7a:9d:ee:c8:05:31:01:f6:
         9b:a5:c4:bd:cd:e1:ae:ee:e4:4b:1d:1d:ba:ca:cb:f8:4f:6c:
         f1:2c:c5:8c:54:40:b2:3f:97:81:36:ab:45:7a:2f:f3:da:c8:
         fc:fa:5d:c3:0b:3e:30:41:3d:71:0c:ab:46:39:21:40:b4:94:
         b4:a9:e1:de:f3:9d:91:d7:7d:49:36:68:c1:d1:cb:20:30:41:
         19:49:19:f5:ba:79:17:35:f7:aa:3f:f9:9f:e9:a3:45:25:0b:
         4b:34:d2:6c:dd:68:a0:44:db:ad:ec:7d:7b:08:e1:ce:1d:b9:
         69:43:31:76:ce:25:54:88:36:f1:6f:55:0e:80:93:c4:a2:8b:
         88:2a:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:35 2025 by rpki-client