Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa
File:                     e121129d-58f0-3ca0-b388-f88902b0d991.roa (raw, json)
Hash identifier:          VDObrzNG+CH1bVXaLetp7g6qs6f1I9WBC6+gj6NNjSk=
Subject key identifier:   4B:0A:4C:8A:11:27:84:C1:C2:4C:F6:DB:3E:87:4F:5F:3A:B5:13:8D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848CDE11845DC1DA5224388A180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7029
IP address blocks:        64.206.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:18:45:dc:1d:a5:22:43:88:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=e61e688f-9b29-4ef0-b2da-021737edaec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:c0:dd:4f:4f:0f:c3:b3:91:25:4a:9a:2f:
                    61:65:bc:c6:ca:17:1c:66:33:8b:76:f0:ff:5c:87:
                    10:45:b3:62:dc:40:86:60:77:4b:a4:da:96:d0:61:
                    36:5f:d7:2f:e7:0e:3d:1d:07:80:d6:06:87:8e:00:
                    7e:d5:c6:e8:44:98:cb:26:7e:c7:83:14:73:57:2b:
                    ec:25:ca:8c:88:b0:e0:80:13:d9:44:20:4b:fe:84:
                    68:70:e6:5e:13:c0:05:7a:45:9d:68:50:70:2c:24:
                    92:3a:7b:5b:1e:89:b6:bc:b0:39:d1:26:8b:2c:dd:
                    ab:2d:22:54:21:7c:ab:4f:e6:dc:6a:be:50:33:54:
                    e5:4f:7e:e0:89:7c:1c:89:b4:e9:47:24:32:08:f3:
                    e3:47:44:25:83:3e:5a:06:5a:21:92:fd:4c:65:ac:
                    bb:e3:e2:44:52:cb:94:3a:6a:57:3b:e1:43:82:36:
                    44:20:07:5f:7d:b2:03:71:51:b5:4f:8b:cf:05:06:
                    eb:3f:8f:d6:6c:40:85:c7:f5:3b:bb:ee:91:f7:1a:
                    12:d3:3a:94:f6:10:4c:34:ce:71:7f:ca:20:a9:04:
                    c1:cf:d2:7a:01:3f:bb:d0:00:88:59:63:cd:88:97:
                    4f:1a:54:bb:47:d2:8c:e8:bb:3c:2e:53:9f:9f:59:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:4C:8A:11:27:84:C1:C2:4C:F6:DB:3E:87:4F:5F:3A:B5:13:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.206.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:b0:7c:35:75:3f:3c:ac:a4:be:3d:13:c0:39:37:db:c8:
         17:e0:ca:74:a8:6a:45:97:bd:ee:40:f7:d8:3f:47:c8:81:24:
         8e:6e:9b:4b:8e:9e:fa:96:90:7d:60:b3:14:88:a6:73:7a:98:
         5a:12:df:47:81:0f:28:21:c0:85:1b:6d:b4:e7:af:f1:54:03:
         ff:d8:d6:b2:52:f1:2b:38:e2:cf:3b:83:0e:92:3b:83:73:43:
         4e:5b:e6:04:79:64:c7:f9:8d:99:63:ad:1e:d6:36:7f:c2:2a:
         71:dd:7c:35:74:8d:f8:2e:a9:65:40:35:44:97:5b:59:f9:f8:
         b6:67:1a:95:d1:2e:c8:07:0c:53:f6:93:6f:8c:a9:04:d9:30:
         80:f6:b7:98:10:dd:83:b0:75:fc:e5:46:47:0a:71:0a:64:40:
         05:a5:c3:b4:dc:97:8a:d7:f4:28:8b:1c:a9:ff:09:cf:75:ff:
         76:0a:97:f7:fc:58:a3:cf:10:08:ce:8c:8a:a4:5c:62:97:a0:
         5e:7a:57:d0:a9:db:28:a1:29:9b:72:4c:ee:28:2a:03:cb:a7:
         4f:71:96:dd:d6:84:86:a4:c4:3d:d0:5f:60:80:be:f1:17:62:
         3b:39:a1:9d:d9:60:70:26:a4:0b:c5:c1:cc:4c:70:79:42:16:
         85:54:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:37:31 2025 by rpki-client