Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
File:                     4e6253b3-d831-3192-8372-3f91ef10aa0f.roa (raw, json)
Hash identifier:          J8KV0fJZXerFjgis9Lr64VftNhG//9lQZxJ4PjXxpAs=
Subject key identifier:   DF:51:42:75:BB:FF:63:3E:B7:21:25:4C:2C:53:45:DC:CF:B1:F3:DE
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F43285848E2D114ACAB433EA83DB91E00
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     15213
IP address blocks:        64.57.0.0/20 maxlen: 20
                          64.57.0.0/21 maxlen: 21
                          64.57.1.0/24 maxlen: 24
                          64.57.2.0/24 maxlen: 24
                          64.57.3.0/24 maxlen: 24
                          64.57.4.0/24 maxlen: 24
                          64.57.5.0/24 maxlen: 24
                          64.57.6.0/24 maxlen: 24
                          64.57.8.0/21 maxlen: 21
                          64.57.8.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:14:ac:ab:43:3e:a8:3d:b9:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=013494bb-d6f1-4f0a-86d6-9acce10a9e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:19:03:c4:b7:87:45:03:8a:2e:6d:34:41:
                    65:9f:6e:5c:13:db:a8:67:a5:ae:dc:c4:6e:ea:97:
                    dc:7f:ba:6f:10:84:85:c4:ad:61:21:d3:7a:cc:bd:
                    d0:5a:92:75:44:f1:36:e7:44:01:6f:d6:53:15:32:
                    05:07:75:64:81:86:50:70:90:a2:d1:d5:de:fe:c3:
                    3a:5c:ca:d0:c8:45:60:6f:b8:fd:eb:d2:45:c2:4d:
                    5a:10:b4:5e:32:89:81:8f:07:4a:8c:83:a4:25:02:
                    c7:ea:c1:e0:a6:d7:b6:c5:91:73:79:75:05:c8:ab:
                    7c:13:03:ed:db:72:ba:d4:bc:51:1b:99:bd:f7:bf:
                    3e:ba:66:8b:6d:8e:2d:b2:a5:58:3b:fe:be:e3:18:
                    92:7b:0a:46:88:69:06:99:65:88:58:0f:b3:a8:fc:
                    96:48:cb:42:e5:6f:a7:4e:29:ec:ec:9f:f7:9a:15:
                    3d:ac:d8:f2:7d:96:69:40:ae:30:64:3a:80:95:65:
                    35:3c:08:7c:f3:ad:4c:6f:69:00:08:12:27:85:f4:
                    30:4c:64:6d:3c:83:57:fa:e1:51:d3:43:60:cb:46:
                    55:4a:1f:d0:90:ee:27:e2:2b:11:cb:33:65:56:b7:
                    4f:00:76:74:16:a6:e3:b3:e4:e1:9b:99:3a:88:bb:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:51:42:75:BB:FF:63:3E:B7:21:25:4C:2C:53:45:DC:CF:B1:F3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:21:87:8b:b5:83:2c:d6:e4:3b:e9:7f:e8:67:8b:31:0a:ba:
         d0:cd:74:a8:ba:41:d8:8d:af:b2:fe:93:ce:87:ee:4e:39:9a:
         1d:b5:75:2c:d2:89:bc:7d:e4:06:58:f6:a6:c9:e7:ee:05:f8:
         e9:78:2c:9e:b6:d0:a0:2b:58:ed:42:f9:ce:4c:6a:bc:dd:ce:
         d5:ea:23:5d:48:76:09:90:d7:d5:84:bf:07:6f:26:a6:b8:cb:
         47:8b:ba:99:e6:f9:9c:6e:39:72:ba:ea:21:ea:49:12:a4:b7:
         90:44:80:93:80:37:5c:4c:c0:77:30:8a:3a:ff:78:e5:99:b0:
         cb:1b:ab:ff:cd:af:54:c1:f5:ee:c1:37:e3:ad:37:a6:d5:00:
         11:ad:bd:63:eb:37:78:c2:55:84:e7:c7:80:e5:12:ac:1c:40:
         78:40:70:5c:66:76:34:22:a7:be:fd:13:fe:9a:8f:59:47:82:
         85:48:98:f3:79:52:23:de:ae:8e:0d:fd:c7:20:4a:b1:a6:c5:
         df:87:e4:8b:ec:7c:41:d3:14:a8:14:bc:33:50:8c:58:6c:7e:
         c9:ea:39:4e:12:f8:18:ad:50:ad:2a:e8:e2:a5:12:8e:e5:a6:
         87:d6:6c:f6:14:30:72:a4:6a:8b:4d:1b:ea:2e:45:dd:d4:f4:
         19:55:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:56 2025 by rpki-client