Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3096ce69-c3e4-31ec-ba91-681851bb5138.roa
File:                     3096ce69-c3e4-31ec-ba91-681851bb5138.roa (raw, json)
Hash identifier:          1ODKZs4eYZSAumXAVKTOH8GnBeaeeBO3a6zHBZWj8NQ=
Subject key identifier:   31:17:A9:27:C2:E7:06:31:00:38:95:25:4A:4D:07:64:01:22:51:80
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858493FC77036DC511B56D9471E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3096ce69-c3e4-31ec-ba91-681851bb5138.roa
Signing time:             Thu 20 Mar 2025 09:11:36 +0000
ROA not before:           Thu 20 Mar 2025 09:11:36 +0000
ROA not after:            Wed 18 Jun 2025 09:11:36 +0000
asID:                     30036
IP address blocks:        97.64.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3f:c7:70:36:dc:51:1b:56:d9:47:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 20 09:11:36 2025 GMT
            Not After : Jun 18 09:11:36 2025 GMT
        Subject: CN=115bbd4f-1c1d-45b2-9f4f-e3955f9ffe99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:8a:61:66:d5:2b:d5:21:d0:0b:34:43:3b:
                    c6:52:bf:67:9d:f0:6a:12:3d:e4:06:cf:98:8f:cf:
                    a3:93:35:9d:1b:76:6a:00:13:ff:06:45:3f:8a:f0:
                    e0:af:ae:90:54:2a:53:bc:12:15:d2:34:8c:65:7e:
                    ce:e4:74:37:3e:fc:6c:d3:b5:84:62:b1:10:f4:fa:
                    bc:23:ff:81:24:50:e7:ec:4e:a5:a3:82:b7:b3:fe:
                    d1:0d:27:1e:84:39:ff:f2:08:16:b5:6e:be:9d:23:
                    4a:1a:5a:ab:f1:a5:63:16:0b:51:30:47:51:35:c2:
                    e4:68:2f:df:d6:69:9b:a0:7c:e4:35:36:bb:73:33:
                    fa:81:b3:90:d7:6f:c3:60:59:e6:41:30:ee:65:ea:
                    32:47:73:f8:70:2f:ae:5c:25:0f:33:45:42:ab:8b:
                    df:8a:51:22:b4:ea:ef:9f:11:60:da:06:96:a8:d1:
                    1b:44:70:e4:34:08:31:db:02:de:eb:55:67:64:62:
                    1b:88:a7:f5:ac:54:b3:4c:d7:05:0f:d1:d4:35:b7:
                    32:a7:c4:61:49:c2:2c:f3:dd:f1:2a:77:89:1f:21:
                    93:9f:3e:cb:07:40:21:17:9f:20:b1:80:0a:b7:99:
                    f3:e9:e1:b3:78:88:77:6c:bf:7b:fe:a0:fb:f7:df:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:A9:27:C2:E7:06:31:00:38:95:25:4A:4D:07:64:01:22:51:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3096ce69-c3e4-31ec-ba91-681851bb5138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:f3:f2:4f:bf:a1:39:3a:df:33:af:f0:07:f6:8d:e4:21:
         f5:12:02:43:7b:cc:d7:81:a5:a2:7c:78:07:19:d2:97:ea:c0:
         93:f9:0e:96:b2:46:35:85:fc:50:fd:95:5e:76:91:ae:0e:fa:
         48:51:7f:46:2a:31:4d:6f:96:12:4c:91:f8:c5:f1:ea:6d:76:
         64:6b:c4:4a:bd:b5:9e:4c:b9:42:fc:01:3d:fa:33:77:17:03:
         82:bb:9d:24:c1:30:56:79:e1:c3:4e:6e:24:28:64:19:d0:14:
         e0:d3:d2:b1:43:ca:7a:2d:b5:e2:1c:6b:b6:c5:ce:66:62:34:
         f7:3a:43:c9:74:80:0f:f2:b5:c4:4a:fc:0b:d4:3e:04:98:a4:
         15:a8:31:f1:7f:6f:68:3e:98:b1:aa:a1:9f:45:8e:25:c0:8e:
         e2:a2:a8:e2:10:52:f6:fe:9c:f0:df:1a:f5:7a:87:8e:ee:4d:
         cc:17:8d:aa:2e:7c:97:64:29:12:e2:a4:d2:84:bf:07:48:64:
         1b:6d:96:06:40:fc:42:11:46:7a:cb:f8:f9:3e:4c:ef:79:cd:
         28:8a:d6:c6:77:8e:e4:41:24:2e:5b:4d:d6:95:6f:c2:58:0e:
         a7:95:b5:ba:9f:3e:48:31:5f:74:7a:37:29:2f:5d:a5:f8:76:
         b2:75:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:44 2025 by rpki-client