Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa
File:                     8a91177d-9b51-35ce-a8ab-be7377237223.roa (raw, json)
Hash identifier:          s2tf4LQRtABIDiCrEIm7E3ZX7I/mqhkm85K6MuhyQTQ=
Subject key identifier:   DE:57:59:69:79:0F:BF:89:F2:5E:7A:66:7A:D2:F1:CA:3C:B1:03:F0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D2113224BF6E15053A2A0F18
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     393775
IP address blocks:        64.199.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:32:24:bf:6e:15:05:3a:2a:0f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=ec3c919f-dc0b-4525-b274-36d172bcf922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:af:b9:f1:b2:86:b2:7e:49:80:b0:e0:88:
                    6a:8d:d3:5b:f5:07:d7:02:81:43:2f:d6:7e:b2:3e:
                    9e:2d:c6:03:5a:20:8b:f5:61:a8:7a:31:d8:29:28:
                    72:4e:11:d5:a9:f6:c9:37:33:43:b3:8b:86:6b:d5:
                    43:47:7d:87:7c:a5:65:e7:b1:62:d2:e4:03:33:ac:
                    17:29:f8:31:a0:cc:1c:cf:18:f9:be:4e:fa:fb:ed:
                    e7:5a:a6:b9:dd:72:24:38:50:c6:b2:b4:35:1f:29:
                    1a:ca:66:97:1d:d4:eb:dd:4c:bf:f0:a6:0e:8c:b4:
                    76:75:78:c1:97:ef:38:bc:0f:68:51:4a:ce:c8:57:
                    cb:1a:11:6c:a2:af:cd:f8:d8:a2:fc:f6:93:bd:89:
                    e2:83:29:d8:df:83:38:cd:0a:af:f1:dd:4e:f4:73:
                    e4:5f:b0:2e:75:21:41:af:a5:26:ca:40:52:b3:08:
                    d3:a3:9a:82:ee:7d:a5:3a:85:89:c5:c1:54:53:c0:
                    b3:86:43:d9:75:f1:18:91:2e:01:be:18:07:fb:1a:
                    06:ac:ea:e8:f2:a6:79:38:e0:7b:30:ad:27:5d:e4:
                    b9:2d:84:5a:39:cb:60:19:33:ac:62:e2:5d:2e:85:
                    24:82:0e:e2:52:54:a5:4b:1b:de:09:14:b0:a0:3c:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:59:69:79:0F:BF:89:F2:5E:7A:66:7A:D2:F1:CA:3C:B1:03:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a91177d-9b51-35ce-a8ab-be7377237223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.199.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:6c:8b:ba:1c:98:00:ff:78:f8:7c:4b:38:01:01:1a:41:
         8b:18:85:02:94:45:3b:ce:d9:d7:ec:9d:2c:63:de:e2:5f:68:
         1d:c7:5d:8e:dc:0b:2a:9e:14:07:3f:a4:97:7a:c7:6b:a4:27:
         f7:f8:e9:43:1a:d1:35:81:dc:2e:79:9e:b8:03:40:7f:37:bc:
         06:9c:d8:6b:4e:36:d3:e3:d7:06:44:79:71:e5:e9:dc:ed:1b:
         0c:c0:36:96:14:37:af:4a:3f:0b:23:0e:8b:96:7d:c5:19:6b:
         08:44:9e:7c:2f:77:3c:bd:0e:d9:38:b4:c8:b5:cb:b9:85:c8:
         75:b4:cd:50:d2:30:d0:06:d4:e6:25:e2:5a:75:b7:63:4f:75:
         95:0a:a5:9b:4e:2d:4a:96:74:29:e1:1f:a9:f0:0e:ca:e3:16:
         90:16:f7:0c:b9:d6:af:04:34:be:2f:5e:49:fb:b3:e2:be:0a:
         e1:68:e7:d8:dd:a3:18:53:0a:c1:95:8a:4e:b4:dd:0e:06:05:
         e1:5e:93:87:68:2b:9b:b9:66:54:b1:02:e6:52:d5:6f:00:a5:
         91:1a:cd:96:30:10:14:c7:37:dd:90:eb:7e:7c:c7:9f:5b:75:
         1b:eb:76:ea:db:0a:51:b8:d4:a0:56:ab:c8:47:69:c7:f0:2d:
         23:71:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:54 2025 by rpki-client