Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa
File:                     51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa (raw, json)
Hash identifier:          LaManKIIK+JXLbZHGlba0o7VEMgiAEHwB7gOx8DPA4c=
Subject key identifier:   7E:5D:33:D6:5E:E9:EC:52:F0:37:E2:B3:A8:DE:E4:41:0D:3E:9B:A9
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F432858491246AD7B0F6D9B14B976A940
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3561
IP address blocks:        64.29.68.0/22 maxlen: 24
                          64.29.72.0/22 maxlen: 24
                          64.29.76.0/24 maxlen: 24
                          64.29.80.0/23 maxlen: 24
                          64.29.84.0/22 maxlen: 24
                          64.29.89.0/24 maxlen: 24
                          64.29.93.0/24 maxlen: 24
                          64.29.94.0/24 maxlen: 24
                          66.180.130.0/23 maxlen: 24
                          66.180.142.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ad:7b:0f:6d:9b:14:b9:76:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=03b68420-febc-4b9b-8e4e-e9f2d8854259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:c5:34:b7:dd:eb:c2:d1:fd:46:fc:a9:d5:
                    7d:96:1a:00:6a:3d:70:dc:99:19:e7:69:84:a5:0a:
                    3c:aa:6d:92:3e:41:28:6f:26:4f:aa:93:17:21:1e:
                    ed:95:a9:bd:c6:4a:bd:95:6c:9c:a0:eb:3b:cc:30:
                    8d:6c:a6:4b:6e:59:0d:38:98:17:28:80:5a:5c:62:
                    90:69:c0:d6:97:2a:16:88:f4:37:bf:3c:8e:11:8e:
                    9d:1d:82:1a:2c:d1:ab:df:a1:36:b8:05:ad:74:d6:
                    9a:c0:af:88:ba:c7:fb:7f:6a:7d:f8:66:76:44:f7:
                    41:a1:43:57:57:6f:34:97:53:2a:a2:8f:db:c7:c7:
                    6f:18:cb:37:9d:9e:bb:3f:de:53:82:2b:c5:2a:39:
                    ba:bd:20:83:01:ed:b3:eb:e8:72:a5:f0:78:f6:7f:
                    ca:b4:ba:27:be:47:e9:2d:8e:12:2e:cd:c5:9b:a9:
                    3f:30:c8:51:d0:e8:e4:1f:5e:da:be:03:5b:1d:2a:
                    fa:2d:62:ba:af:d5:cb:61:21:d6:68:f1:73:36:15:
                    26:57:b0:ee:3d:c5:56:d4:12:0c:88:ae:cc:69:69:
                    89:f9:f1:24:49:7e:2b:d5:07:ae:69:57:1a:97:cb:
                    bf:bd:bf:ad:7e:a9:a2:a2:9c:f1:6d:54:a8:94:94:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5D:33:D6:5E:E9:EC:52:F0:37:E2:B3:A8:DE:E4:41:0D:3E:9B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.68.0-64.29.76.255
                  64.29.80.0/23
                  64.29.84.0/22
                  64.29.89.0/24
                  64.29.93.0-64.29.94.255
                  66.180.130.0/23
                  66.180.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:19:ed:99:7e:43:54:28:a4:f8:df:ab:60:46:6e:39:47:
         9b:07:39:0f:f3:4a:2b:a3:84:d6:c5:8a:69:f6:ab:6e:43:d3:
         76:0e:6d:e6:2b:e9:21:cd:6d:a4:19:49:19:de:df:46:51:07:
         96:c5:91:f7:c4:7b:54:30:38:15:d4:26:8e:ca:a8:a2:c4:ca:
         85:96:00:4a:15:a8:40:62:c7:4e:11:aa:01:7c:a4:2f:1a:6a:
         1c:36:63:5d:ad:62:9f:cb:3a:8d:75:f1:e4:f4:fe:e0:48:e1:
         41:e7:6f:0e:73:f1:7d:89:c1:e3:ed:11:3d:53:9d:41:4f:dd:
         68:01:2e:62:96:58:a7:2e:6f:f6:d7:0f:87:cf:e7:ca:41:2a:
         57:0a:0e:b9:33:3d:68:99:14:f1:35:d3:62:62:79:e2:8f:cb:
         1a:ce:3a:d6:1a:be:27:1a:a1:1b:33:8a:f9:4e:f2:76:b8:43:
         5b:bc:6b:ea:14:3e:05:6e:1f:57:c6:8d:10:c8:34:18:db:06:
         3d:5d:3a:f9:43:52:0e:6a:29:74:4d:72:b2:62:2d:12:f6:8c:
         8b:e3:f4:b6:6a:42:6e:94:cc:de:c4:48:75:3c:9a:f9:1d:8f:
         ba:f6:ce:35:55:70:91:f3:0a:4d:68:5e:3d:ab:de:ea:5a:09:
         ab:ca:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:16 2025 by rpki-client