Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa
File:                     7b012c24-2f2b-3db0-b745-b22b856c2688.roa (raw, json)
Hash identifier:          cQT1DNUhXfgWiy9HVsi6qjIu7nbZCZIwoLr9hTbobIg=
Subject key identifier:   A9:D9:38:FE:A3:E5:A7:BD:A6:3C:0F:CC:50:EE:A7:E0:43:B9:85:67
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F43285848BBBB8417E32501A598A94600
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        168.203.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:84:17:e3:25:01:a5:98:a9:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=76409b10-0037-480c-9f9a-a71cf26341fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:f8:bb:91:b7:99:06:3f:c3:ce:85:de:9f:
                    86:95:46:77:dd:5e:ce:9d:c1:51:ad:55:cf:c7:0e:
                    87:9f:02:14:f8:04:15:6e:54:9e:bd:d6:09:fc:39:
                    16:8d:c3:0d:76:94:72:1a:ad:96:6c:53:e0:dc:2f:
                    21:d6:b3:c9:56:e6:0c:80:d3:81:89:1c:2d:6f:1f:
                    00:6c:3a:69:d1:58:03:23:d0:87:21:13:37:e1:b0:
                    f0:62:95:56:97:53:68:9b:c5:d1:10:94:2b:86:24:
                    c8:0f:0c:7c:43:12:cd:ee:d0:20:41:bc:1c:c7:a9:
                    03:dc:d9:e2:e4:d3:05:09:83:1f:6e:e1:ac:79:cf:
                    c3:35:1b:12:df:30:22:76:67:29:04:3f:90:1a:c1:
                    4a:4b:2a:25:b1:98:71:ce:6d:a7:bc:a7:bf:3f:96:
                    8e:a8:80:2f:12:ed:13:7b:22:23:24:57:c1:e6:b3:
                    60:0b:48:e7:52:e7:e1:78:71:c9:55:e1:b9:78:05:
                    d7:88:fc:bc:69:74:8b:68:5f:eb:4f:48:d0:7a:f4:
                    61:0e:bc:10:dc:99:14:0d:21:87:cf:bc:7a:82:60:
                    d4:b0:cb:cc:f7:a1:cf:70:18:84:fc:23:4c:79:34:
                    74:8f:b6:89:fb:61:c4:a2:5d:60:c1:fd:95:a5:f6:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:38:FE:A3:E5:A7:BD:A6:3C:0F:CC:50:EE:A7:E0:43:B9:85:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/7b012c24-2f2b-3db0-b745-b22b856c2688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:75:fa:bc:a2:4e:c7:2a:5b:87:7c:8e:9e:47:53:d7:53:
         c3:1a:9f:31:c2:a6:d6:a2:7c:5b:96:d4:87:47:e3:e8:1f:8c:
         47:11:12:a6:11:36:9c:05:c3:b8:34:1a:48:8d:0d:e2:1d:eb:
         14:60:c6:b1:04:f4:63:53:34:1f:50:5e:e9:88:e5:c8:c6:9d:
         4c:1b:b2:bd:84:fd:c5:ec:e0:a7:59:8e:68:95:6d:bd:13:c6:
         da:b9:f0:6e:39:1d:eb:aa:53:69:da:3a:08:f9:b1:de:76:59:
         17:bf:01:1c:95:4e:89:da:0d:af:ba:26:2a:61:8e:1e:0b:37:
         0d:4d:e2:e1:06:f3:86:5e:15:ec:26:48:77:8f:99:69:a8:50:
         04:c8:78:1f:06:ca:35:bd:d9:37:8b:29:65:63:5d:a1:c6:d9:
         f0:3f:92:a4:b2:05:51:56:46:e5:e0:0e:c9:84:84:87:8f:9a:
         16:82:3b:65:05:c0:3b:66:44:cb:5b:93:9e:dc:7b:4b:96:8f:
         a4:ec:15:88:02:68:42:dc:7f:72:52:ec:43:8f:6a:dd:1e:80:
         dc:3c:21:73:34:18:c2:71:0e:4d:b6:79:fe:c8:e5:76:0e:a0:
         55:fe:62:8e:33:71:5e:bb:b0:40:ff:14:07:ba:d7:b0:9c:36:
         fb:24:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:13 2025 by rpki-client