Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa
File:                     843317a2-294c-3284-83c8-9e6a60866a59.roa (raw, json)
Hash identifier:          X4siH58pkGem9zyWX9Hvu/4XLPAxOw+TzU8kef/fS90=
Subject key identifier:   36:A7:4F:30:8A:E4:8F:E3:97:6A:09:C4:CD:5E:6B:0F:62:81:7E:7B
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285849393E75CD41B5A71EFA42E4C0
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     18594
IP address blocks:        64.57.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:75:cd:41:b5:a7:1e:fa:42:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=3531d22a-8bdb-4af5-b3ab-a0b322045c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:67:24:2c:1c:2c:6c:6d:d0:4a:66:18:e6:
                    af:fb:8a:0f:08:79:48:32:09:14:12:cd:68:a5:7d:
                    3d:fc:a6:6f:54:cd:0a:1f:85:19:68:2b:7d:92:5e:
                    53:1b:4d:53:87:2f:13:35:53:14:5f:48:5d:47:f0:
                    e5:f3:ca:9b:4b:7f:e4:f1:30:61:41:bd:0c:70:89:
                    02:29:cf:be:19:aa:bb:85:40:ff:e8:1e:7d:33:05:
                    aa:30:96:79:f5:81:04:6e:49:91:9f:59:a5:97:05:
                    85:04:84:b7:e2:8f:b1:50:38:d9:a6:19:24:6d:40:
                    14:2e:33:3a:79:9c:35:ab:0f:8d:93:91:d1:74:6e:
                    17:db:6b:13:ea:f3:a8:86:f2:4d:02:b8:c8:77:44:
                    36:09:e3:76:2e:5e:9e:43:db:18:59:a2:2b:0c:41:
                    84:64:a0:24:f4:7e:8d:5c:11:a4:01:c6:bd:e6:72:
                    a9:5d:40:95:64:9a:89:c4:56:9d:6b:2b:5f:04:2c:
                    ad:fc:cd:8e:60:36:85:1e:15:bd:af:05:e0:68:84:
                    a9:c1:5f:59:f1:35:44:a8:86:52:18:1f:60:af:3a:
                    9c:2e:50:f3:70:ba:24:d9:55:33:b5:10:bc:a5:54:
                    cb:f2:d2:52:35:0d:ae:4d:17:18:84:44:d2:20:9a:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:4F:30:8A:E4:8F:E3:97:6A:09:C4:CD:5E:6B:0F:62:81:7E:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:23:7a:38:9e:ea:1c:e5:44:fc:5d:85:94:ba:16:f2:74:aa:
         5c:44:52:fb:d8:ba:71:34:9f:d7:28:c8:e1:9f:44:01:d4:90:
         db:9a:6e:d1:96:16:06:9d:1c:9d:02:76:9e:04:16:c1:e6:4f:
         40:31:8e:f6:4c:f5:2c:3c:98:de:17:98:52:3a:76:e9:18:b2:
         57:10:12:47:57:48:26:a7:5e:52:70:9e:82:e8:19:9f:82:5c:
         a2:f3:e2:6d:89:08:b6:64:72:40:ac:ad:8d:b3:0b:4c:b3:45:
         e7:53:b7:24:05:e4:fa:0b:b0:2c:62:b9:67:da:18:22:7f:f2:
         44:cb:5c:38:2c:f9:f9:b8:4d:ed:0a:e8:9b:b1:58:5a:1e:c3:
         5f:a2:7f:a9:ef:d1:3d:44:66:b8:3d:85:b6:3e:38:cc:10:64:
         0a:3a:01:b0:da:e8:d1:a8:40:06:e8:e8:61:07:45:52:85:a4:
         7b:3c:e3:62:12:f8:6e:f6:0e:81:4d:e4:d1:a8:d7:ba:4a:20:
         b9:7f:4e:13:49:d1:4f:2f:18:c6:f7:d5:8a:71:ee:59:cb:09:
         36:fe:77:d3:b5:c3:dd:95:49:16:99:de:2f:ba:55:4c:54:6a:
         16:f1:cb:73:c3:51:33:e4:85:a8:ea:14:4e:e4:e3:af:8a:44:
         02:ca:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:22 2025 by rpki-client