Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
File:                     63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa (raw, json)
Hash identifier:          lph0F2q6mp0QxxbvPH7zlXPEaTOONdVhLNf1kvKT6Uc=
Subject key identifier:   3A:E2:E9:25:5B:68:37:DC:3B:62:3C:E3:49:90:A6:9F:5C:69:E9:52
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F43285849473400484AC9D8E8E51FBE40
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     7922
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:34:00:48:4a:c9:d8:e8:e5:1f:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=b53c2c8a-d588-479b-9d39-b5303b4f9b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:cb:97:3e:25:52:75:75:52:ab:48:ef:f2:
                    45:46:c1:22:0a:ff:23:b3:2c:12:f5:4e:a0:71:ec:
                    e5:17:75:66:89:55:2d:ce:5f:6a:21:a5:5a:66:3a:
                    85:74:c3:e4:40:1c:82:69:a9:67:e3:39:d3:b3:4b:
                    fe:95:d0:14:62:34:7f:68:e5:f3:36:6c:bd:61:9c:
                    9c:aa:48:4e:4c:2f:74:79:78:a9:01:02:a9:de:dd:
                    35:9e:f6:dd:b2:3a:32:86:89:22:f1:5a:9a:f8:92:
                    ab:bf:f2:3f:8e:f9:97:a3:d9:e1:79:ff:09:22:2a:
                    7a:53:79:b3:ac:2a:53:b2:ba:22:3e:17:31:76:dc:
                    c9:ad:2f:2c:cc:3b:e4:a9:7f:6a:06:2b:7a:1f:b9:
                    b7:2a:c3:cf:02:03:9c:d0:23:1e:2b:b9:25:d2:ed:
                    16:4f:14:80:30:59:bf:1c:a2:5a:b7:12:05:65:8c:
                    0a:85:cb:41:b1:9a:c6:3a:75:bd:4e:aa:82:40:f4:
                    22:85:b1:0d:59:a5:f7:6d:a5:a4:34:66:cc:ed:64:
                    44:df:9e:13:ee:30:b5:e8:ee:03:d5:75:51:60:6e:
                    67:3e:78:e0:0d:eb:78:24:c1:93:08:f4:da:78:91:
                    3c:71:a2:6e:dc:fe:48:84:65:11:1b:1d:e6:b4:c0:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E2:E9:25:5B:68:37:DC:3B:62:3C:E3:49:90:A6:9F:5C:69:E9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:43:74:e5:58:28:09:4a:a1:f6:72:35:12:7d:27:97:77:e5:
         66:dd:cb:5d:b6:01:7c:2b:6c:7d:40:a5:03:cc:73:ac:b4:fa:
         a6:c0:b5:95:5e:c1:c6:b2:b0:49:ee:fc:65:65:27:ff:c7:82:
         aa:d7:76:42:d7:75:78:a8:9a:7d:40:52:86:84:e7:df:b6:f4:
         ad:45:23:54:03:d7:ad:65:bc:b4:b5:6b:63:c0:31:22:e3:1a:
         b0:e1:40:e1:37:64:83:59:81:a6:22:8b:78:6b:80:01:3d:70:
         e9:74:64:64:6b:72:b6:e1:6e:ce:a8:bf:61:c9:17:ce:b4:0c:
         15:b3:8b:58:b2:8f:d1:06:b0:b9:08:77:f8:05:15:07:e9:35:
         aa:a2:19:c2:6f:01:b8:14:de:05:8a:10:ff:20:8e:1d:8a:ce:
         7b:45:1a:1c:bf:11:c6:60:bc:36:21:05:bd:18:20:2b:42:4e:
         e4:64:17:71:1f:c5:33:49:6f:b3:7f:4c:0c:44:e4:f9:f7:64:
         3b:e0:d4:9e:5a:e7:39:0e:bf:3e:d3:51:45:67:63:84:27:d2:
         8b:33:84:d9:01:90:90:20:89:3f:44:78:69:d8:5f:d4:3c:1e:
         36:d7:31:c9:63:aa:36:1f:ad:a7:0c:4a:33:ab:32:9b:bf:92:
         07:6b:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:56 2025 by rpki-client