Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa
File:                     f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa (raw, json)
Hash identifier:          BLtRZiQT5EO/eU6f/GnZgiB3HB/0X/tTRZfBINSo+eI=
Subject key identifier:   1F:67:CB:21:59:43:09:9B:C6:9F:49:4C:06:DB:6D:27:D3:30:0F:25
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285848CB1659A2F6D6484876B95380
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     16713
IP address blocks:        64.113.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:59:a2:f6:d6:48:48:76:b9:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=5a576b88-58a5-4df5-abb9-901d64bd1eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:4b:17:ed:36:06:2b:28:cb:14:76:e9:db:
                    c4:c3:d4:7e:13:60:d4:9f:99:ae:13:09:97:a8:92:
                    ce:24:f1:ab:06:80:b3:f0:65:2c:d2:95:6e:c3:69:
                    fe:a5:89:18:61:9e:fb:d0:4f:e3:5c:25:3d:16:c0:
                    79:4e:d8:15:55:48:87:af:08:e9:e9:30:64:1a:a4:
                    99:6e:bc:37:ed:3a:d8:2b:3f:dc:e4:be:90:e3:38:
                    83:f0:85:20:24:f2:61:e9:ef:00:94:6b:eb:f8:89:
                    e6:82:0c:9f:76:73:6c:e7:85:9a:aa:8a:82:06:ac:
                    d1:84:21:2d:16:1c:13:c3:bb:76:e5:d5:d2:1d:e9:
                    42:07:e8:e8:6e:01:fc:f9:9e:1f:86:10:96:ed:3a:
                    43:48:ce:96:b4:b0:ae:e5:da:17:f3:5c:34:60:a5:
                    ac:eb:ab:6c:e5:26:1b:13:9c:39:d1:c6:01:97:48:
                    e5:1d:ec:d5:ba:72:b6:2d:87:60:a5:f0:e5:61:ee:
                    14:97:03:eb:b0:f9:ad:83:94:c7:22:93:88:34:b4:
                    b3:e7:1d:1d:a3:c0:d4:a4:76:36:82:4f:12:ab:26:
                    51:65:0f:e9:e0:e4:9d:6f:06:fd:c8:42:5f:a8:29:
                    5c:18:ea:c3:33:82:1b:8d:b4:3d:cb:5b:a5:76:23:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:CB:21:59:43:09:9B:C6:9F:49:4C:06:DB:6D:27:D3:30:0F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:f7:d7:22:c2:a1:61:5d:fd:73:4c:21:09:b4:f0:c3:db:
         e5:57:f9:ba:56:64:62:57:69:7f:73:48:48:ca:df:b3:48:f6:
         28:53:1b:ac:ec:36:f5:63:19:82:65:48:cd:b6:6f:3b:4d:ad:
         5d:94:f0:ec:40:0c:b6:b7:a6:a6:76:f4:42:de:6b:7a:ac:9e:
         84:8b:11:17:f3:d4:cd:15:1f:ad:d5:92:b0:98:75:e3:c4:3d:
         6e:c8:f9:a9:41:0b:28:35:01:96:d9:6b:6c:79:ae:04:1d:3e:
         73:1f:87:eb:e4:55:9b:09:d2:b4:9f:56:42:a3:0c:d3:ef:7f:
         ff:0b:ff:a2:56:ee:43:d4:81:ca:1c:fa:da:38:e4:60:b6:a6:
         2a:d0:ed:2a:ce:ff:b6:91:5c:6b:38:13:72:30:99:da:36:3b:
         73:11:66:50:0d:0c:3a:14:70:f4:b0:53:62:fb:a4:b8:1c:73:
         17:9a:89:a0:c2:83:f6:47:f7:cd:ec:bc:1d:1a:28:f2:25:52:
         13:0f:a3:1c:81:55:7d:49:07:a8:c1:2c:09:38:c2:95:0c:c6:
         a5:59:17:aa:0e:6e:96:e3:30:f1:66:16:42:76:b4:8a:e8:f6:
         47:24:03:f8:99:30:d9:dc:f0:46:46:44:72:e6:d5:db:0b:97:
         62:d6:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:28 2025 by rpki-client