Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa
File:                     d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (raw, json)
Hash identifier:          MEbmwC/Bz9ilf7FFmAI4A3fSyLBXduHkOl6jJ+UqYU0=
Subject key identifier:   B8:9F:82:62:12:90:8F:A8:2A:D4:20:34:8F:C0:90:53:04:4B:95:96
Certificate issuer:       /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab
Certificate serial:       010D0C9F4328584917DC2CB654E7FAAA5AA44B40
Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     400141
IP address blocks:        63.135.70.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2c:b6:54:e7:fa:aa:5a:a4:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=d7990e5a-2322-419e-b329-f8c372ebdf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:2a:33:ac:2f:69:9e:81:0e:3c:b3:16:9d:
                    3a:d5:99:47:86:72:a4:75:18:3c:15:bf:3a:e5:d7:
                    1d:d0:50:5a:e2:cf:c0:b6:bf:b3:b6:a6:c3:23:fb:
                    33:54:d2:b9:8d:df:f5:b6:de:fa:a5:9d:29:30:b5:
                    94:f5:16:b1:3e:90:18:a2:01:fa:d4:00:50:80:ef:
                    ad:cf:65:3f:93:7e:d4:fd:42:a3:cc:03:dd:d5:12:
                    53:6c:af:88:6b:11:38:23:1a:78:a7:eb:ba:f3:3e:
                    fb:ea:6c:70:52:b3:2a:2f:2e:bd:55:46:2d:45:ab:
                    fa:85:81:c3:c9:19:df:c8:6a:35:4b:1c:7c:28:02:
                    c6:43:da:69:4b:56:5f:c9:2c:74:85:81:6e:b9:a4:
                    15:95:59:7f:69:96:55:1e:20:2c:c1:aa:9a:12:b5:
                    d9:2f:8c:01:c3:ab:c5:b4:cc:07:38:13:c9:6b:a0:
                    a7:cb:c3:bb:d5:43:27:83:a2:b1:d2:47:2e:f1:22:
                    87:eb:be:63:93:5c:a1:cb:82:90:9f:cc:92:ba:26:
                    fa:73:5b:7c:b7:71:09:ef:7d:ab:d2:05:94:eb:8e:
                    60:30:74:c7:0a:c7:8d:7b:96:9f:7b:c2:ac:4f:55:
                    ed:60:8a:91:fc:86:23:fb:27:57:f4:8d:c7:58:fc:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9F:82:62:12:90:8F:A8:2A:D4:20:34:8F:C0:90:53:04:4B:95:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl

            X509v3 Authority Key Identifier:
                keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:2e:fc:2e:30:26:cd:f1:ae:99:a6:55:20:73:c2:07:2b:03:
         d9:5c:0e:5d:d1:42:3b:d4:e0:0f:f4:2f:c6:f6:d8:83:7d:c8:
         b6:8e:b7:62:b4:a4:8e:23:65:56:c9:5e:ed:ce:b1:ec:8b:82:
         b3:20:d9:2f:2a:54:65:52:e8:7e:ff:bb:99:7a:3d:30:b8:0a:
         d5:a1:47:d0:ea:fb:53:c5:f5:6f:46:8c:15:91:f8:77:95:8c:
         af:e9:f3:fd:08:b5:57:08:46:ab:e8:c0:12:6e:22:d2:9a:11:
         ac:48:66:3e:50:d3:5b:60:17:9a:44:95:cd:a5:0c:e0:d4:a7:
         33:46:57:8d:b7:e1:c2:1c:1e:88:88:d3:d8:ff:d9:8f:b8:9a:
         2a:39:ec:d2:c9:a8:39:30:56:0b:ad:a9:0b:4d:3e:a1:6a:77:
         fa:8d:ad:b6:15:ba:1b:cd:64:02:da:46:d6:73:f4:33:81:05:
         04:e9:fb:bf:77:b9:78:8f:41:14:47:05:d6:d8:58:3a:67:98:
         16:b8:5b:22:d8:72:0a:66:22:67:40:c7:3e:6f:83:bc:22:97:
         43:03:ca:83:67:ef:de:ea:89:00:ec:71:3d:31:9e:1a:b2:04:
         bb:b8:7b:23:89:b6:5e:4a:de:5f:44:4a:4a:32:f8:2c:0d:83:
         fc:91:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:06 2025 by rpki-client