Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa
File:                     4b9b1710-12bf-3899-8a1f-3116005d14f1.roa (raw, json)
Hash identifier:          7MD/xgGY0SM2YMxXepescxiAK0AKQeou6PSSnRgumvY=
Subject key identifier:   A1:03:69:E1:34:49:B0:0B:5B:78:FB:D0:EE:DE:12:6B:7F:AE:80:14
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285848CB1659B107E441A21C60B440
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     16713
IP address blocks:        64.113.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:59:b1:07:e4:41:a2:1c:60:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=f98afcbc-2b02-4cd1-a709-3ef944cd989c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:cc:b8:27:73:0b:c4:2d:2e:f4:4c:f3:aa:
                    ad:63:69:bd:a6:c1:8b:5d:b8:c4:51:9e:9d:19:57:
                    a1:14:51:b9:31:15:d7:59:33:b9:b4:bc:2a:ed:cd:
                    1a:e6:55:70:10:90:cf:42:c8:12:fc:21:0f:8b:69:
                    2d:51:69:9f:03:a8:03:52:4a:1f:a6:58:79:2c:06:
                    d6:2b:13:5d:c5:5c:b7:60:b6:c6:ce:b6:85:e0:9f:
                    84:4f:b6:0e:0c:50:ef:1b:c0:4f:ca:c9:97:b6:18:
                    63:3c:74:3f:f3:0e:e6:bf:24:9e:03:86:57:35:b8:
                    7c:4d:e1:d9:a9:32:2d:b4:19:34:b3:95:0a:50:20:
                    c3:4b:6f:f2:37:4d:3e:c8:d8:e7:84:1c:d7:4f:be:
                    88:b8:e7:59:5c:8d:20:33:70:1d:e4:92:ba:37:04:
                    22:fa:3c:9c:69:43:cd:37:d4:97:4c:e0:98:1a:d0:
                    32:c4:5e:07:36:88:2b:8b:2b:65:aa:14:3b:d4:4c:
                    48:ba:b9:c6:5a:0c:58:3e:f7:20:bc:f4:7b:8d:e4:
                    a1:e4:13:17:43:f3:60:40:e2:b7:c6:2e:60:32:62:
                    bc:19:6e:3d:10:22:fa:e6:10:a8:17:eb:74:70:9e:
                    64:a7:39:69:e0:9b:f1:b0:4a:a4:b8:a3:c0:cd:4d:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:69:E1:34:49:B0:0B:5B:78:FB:D0:EE:DE:12:6B:7F:AE:80:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:ba:19:64:b5:a7:7c:08:b2:9c:00:ba:e2:ab:70:e9:4f:
         33:3f:58:fa:08:15:46:33:36:11:e8:3b:44:0e:7f:0a:15:d3:
         39:71:c5:35:26:ad:0e:73:ab:8f:d0:84:8f:03:04:ba:d9:30:
         39:f3:74:a9:da:be:5b:af:aa:83:f5:ba:fd:c7:c8:57:63:f7:
         c5:1b:9f:60:f3:ef:79:9a:24:06:68:be:45:43:67:b3:c8:bc:
         5c:c8:b6:04:ba:af:91:23:53:ce:88:ba:41:27:44:ff:10:7d:
         40:2c:14:20:9a:62:1e:dc:d0:f5:d1:4d:16:7a:1e:03:97:03:
         ff:85:42:42:8c:5d:35:91:64:45:83:9c:d2:48:0d:79:ab:e9:
         d2:53:8a:00:bb:a7:50:21:ef:5a:fc:e4:07:26:b0:0b:3e:0a:
         81:ae:ae:a0:c0:b3:29:90:3a:87:23:bd:ed:4b:f5:2f:78:11:
         78:66:f1:c9:3e:44:1e:c2:f9:26:03:98:f6:08:f9:5d:9e:b3:
         79:70:e7:84:12:27:ff:c5:53:8a:28:60:f3:5f:e1:9d:5b:36:
         7c:24:01:f0:dc:8c:7d:69:14:59:4b:d5:76:81:1b:b1:42:9d:
         ac:7d:cd:3b:05:84:e6:20:27:96:91:bb:76:6b:b7:70:e9:e8:
         f8:14:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:48 2025 by rpki-client