Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02045410-67bf-38c4-9c4a-d5ff3b1316a1.roa
File:                     02045410-67bf-38c4-9c4a-d5ff3b1316a1.roa (raw, json)
Hash identifier:          qGSSq/iglxrJ3dMWmZsnh+cibMl4Trgyiu9jFf5U/T4=
Subject key identifier:   89:57:5F:8D:EF:32:26:16:71:D7:93:20:E0:D1:1D:02:F7:4F:88:9C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FBFD7BB7A56EDAC84C17C20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02045410-67bf-38c4-9c4a-d5ff3b1316a1.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        64.196.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:bf:d7:bb:7a:56:ed:ac:84:c1:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=626e9642-ca6a-4899-abc6-bfb633dfe378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:d4:14:ad:1c:22:1b:72:66:73:ea:14:68:
                    09:80:9b:c5:4e:06:2e:19:c3:7a:7e:04:c2:20:7b:
                    a0:80:18:52:aa:98:66:e0:1b:d5:0f:4f:89:ae:6b:
                    45:09:45:94:77:07:29:4d:ca:8d:59:bf:f4:dd:6d:
                    15:d0:45:77:44:de:24:07:f4:bc:96:a4:31:96:1e:
                    68:4d:1a:41:b5:68:08:86:a7:b6:13:45:3e:99:00:
                    16:7a:8d:3a:c5:81:a8:6c:cc:ec:a8:a9:da:3a:6b:
                    0c:5f:66:f6:5d:91:dc:37:f5:29:b1:0e:65:5a:3b:
                    f1:6f:68:b1:ff:24:a5:90:d6:b4:14:e5:5e:7c:06:
                    1a:a3:f5:4d:cb:40:e6:07:c9:9f:20:a1:55:99:1c:
                    68:3c:8d:0c:e8:ba:6d:5f:66:54:35:c7:6a:ad:65:
                    52:73:8e:ff:15:59:05:fd:5c:5c:89:dd:bf:c7:58:
                    31:2b:6d:6c:b9:04:30:6a:94:ef:92:e4:c7:36:5e:
                    88:23:cd:a1:a0:c0:99:e3:79:17:83:de:55:9f:d9:
                    f0:d9:a3:e8:65:93:9c:71:12:c8:2a:68:60:c2:d5:
                    63:c0:3a:49:36:a7:31:fd:08:26:47:e5:27:06:2e:
                    ea:ab:31:d2:9a:4d:45:1d:e5:78:e9:c2:69:ab:18:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:5F:8D:EF:32:26:16:71:D7:93:20:E0:D1:1D:02:F7:4F:88:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02045410-67bf-38c4-9c4a-d5ff3b1316a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.196.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:27:b8:40:b9:93:ed:3b:4f:b1:dd:44:1c:e3:de:f3:d0:9c:
         a1:3a:17:39:cb:c1:0e:70:8e:e5:bf:2f:00:d4:78:37:b6:31:
         a7:6f:24:9a:45:8d:e2:21:34:ca:30:af:c4:64:72:70:ef:4b:
         f0:22:d5:a9:79:12:38:bb:06:d2:8d:8e:79:86:71:52:0b:b2:
         46:9e:8d:06:06:69:a3:7c:8f:ad:3a:e7:b6:70:07:8d:36:ba:
         c7:54:84:84:34:30:d8:d6:e2:bc:dc:f4:01:58:55:6a:fb:5c:
         85:23:55:44:c3:12:d8:e1:ea:ec:62:c3:58:b0:e4:a9:97:31:
         48:fe:db:f2:db:28:94:96:d5:cf:cb:d1:35:46:09:a9:0b:74:
         61:7f:45:d9:50:d3:0a:69:f6:d0:05:e6:a9:9d:ed:c9:89:dc:
         3b:1d:7e:1f:91:ea:68:c3:da:5c:29:22:4f:1e:0f:ce:89:fd:
         5f:42:d4:33:49:dd:19:60:74:da:6d:33:b0:be:d7:a8:20:7c:
         73:b2:95:d4:4b:8a:fb:55:ae:ae:9e:9a:ef:32:ca:8c:a7:c7:
         23:4b:4f:cb:ff:d8:dc:bf:42:f2:88:41:e0:94:0d:a4:9b:56:
         07:1f:74:c5:b0:a7:0b:0c:ab:b4:e9:ec:de:25:f9:c2:a4:39:
         ea:10:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:58 2025 by rpki-client