Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/09f2dcfb-7f07-3c16-87f6-8ed3e6bee3b7.roa
File:                     09f2dcfb-7f07-3c16-87f6-8ed3e6bee3b7.roa (raw, json)
Hash identifier:          Purv3rqxIOBlS6q8NbymW8Gn4ibB5Ic8915e0gdhqu8=
Subject key identifier:   B5:8A:51:88:67:A2:A1:47:8E:F2:B9:58:8D:35:65:B5:46:5A:0A:94
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858494733E4B0BDFE3370CE525000
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/09f2dcfb-7f07-3c16-87f6-8ed3e6bee3b7.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     13414
IP address blocks:        64.63.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e4:b0:bd:fe:33:70:ce:52:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=18c669c3-7ec1-49c9-9726-190293a38268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:85:be:e7:e5:bb:2a:62:2c:c5:eb:cb:98:
                    89:c2:ca:c4:0e:a9:99:4b:5a:28:9d:22:82:d2:83:
                    48:32:a4:df:12:26:2b:b3:f6:28:10:d8:f4:33:a6:
                    04:d2:2a:5d:dc:b9:a4:23:47:51:0f:2f:eb:12:77:
                    89:65:ce:4c:b9:9a:d3:51:69:6c:ea:7c:7a:a6:42:
                    e5:b4:f0:ea:89:a1:a7:1c:54:aa:02:52:8e:36:2c:
                    5a:b9:13:01:f0:70:48:2d:ca:2f:49:d6:15:4b:d9:
                    80:49:14:2c:0b:34:17:89:2f:02:6e:ee:ab:97:58:
                    9e:b2:4e:64:2e:d2:43:46:58:46:68:73:b0:9e:75:
                    9d:82:19:1c:b9:f1:9d:8c:f1:78:e6:40:7a:2a:b1:
                    49:67:25:73:70:a7:fa:bc:cb:02:84:3d:c3:f0:d7:
                    30:68:5c:d3:d4:43:01:0f:f6:79:be:a3:4b:7b:c9:
                    42:09:52:33:33:88:8a:cc:75:50:fe:0c:43:c3:e5:
                    53:d7:8b:c9:2f:05:55:f5:f9:ea:63:10:4d:9d:73:
                    f0:81:19:e2:51:f8:07:5c:66:e8:65:33:55:6e:5f:
                    3a:c0:f8:e1:16:c6:54:cb:22:dc:2a:12:71:7c:de:
                    c5:c3:a3:88:2b:0e:bb:3a:86:9c:79:34:7d:af:4c:
                    2f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8A:51:88:67:A2:A1:47:8E:F2:B9:58:8D:35:65:B5:46:5A:0A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/09f2dcfb-7f07-3c16-87f6-8ed3e6bee3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:01:3a:99:6f:e1:f5:8d:bd:5d:31:ca:53:94:dd:5d:1b:b1:
         82:a4:a9:24:68:2d:38:50:31:17:41:54:f0:5d:bf:82:70:61:
         9d:32:2a:ce:f7:52:7f:93:83:95:f4:7a:9b:f2:f1:0d:3d:a2:
         bc:21:5a:fa:19:ac:0d:0c:79:95:24:27:4a:4a:1c:c9:ec:18:
         d0:26:54:12:00:09:9c:11:88:f1:d7:34:0c:9f:c9:a4:40:d7:
         19:6c:e6:83:51:2c:00:fc:bd:d8:1f:43:4e:9c:a2:3c:39:72:
         fe:e5:0e:87:00:fa:89:de:c5:ac:9d:ce:6b:dc:30:87:54:87:
         3b:ce:d2:ce:4e:bd:d9:0d:0d:26:b9:75:c1:77:e3:70:70:5d:
         1e:25:05:06:87:99:f6:cb:a1:05:a0:11:96:a3:45:e8:34:1f:
         30:45:06:e0:1a:ee:8b:e7:ee:ae:22:cc:19:ed:79:2b:d4:1c:
         9e:b8:5d:fd:e3:03:9e:14:79:3f:11:cf:1a:0f:b9:6d:52:31:
         f2:65:66:89:66:e7:7f:3a:c6:ff:e1:e0:e3:ce:c0:50:eb:d8:
         fb:4d:f8:51:7d:30:da:21:0e:a6:a5:b7:69:37:4f:3d:77:ba:
         39:e4:63:43:8e:dc:60:8c:2b:7e:c5:67:ac:82:c1:8a:72:67:
         c8:81:a7:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+Swvf4zcM5SUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MThjNjY5YzMtN2VjMS00OWM5LTk3MjYtMTkwMjkzYTM4MjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF6FvufluypiLMXry5iJwsrEDqmZS1oonSKC
0oNIMqTfEiYrs/YoENj0M6YE0ipd3LmkI0dRDy/rEneJZc5MuZrTUWls6nx6pkLl
tPDqiaGnHFSqAlKONixauRMB8HBILcovSdYVS9mASRQsCzQXiS8Cbu6rl1iesk5k
LtJDRlhGaHOwnnWdghkcufGdjPF45kB6KrFJZyVzcKf6vMsChD3D8NcwaFzT1EMB
D/Z5vqNLe8lCCVIzM4iKzHVQ/gxDw+VT14vJLwVV9fnqYxBNnXPwgRniUfgHXGbo
ZTNVbl86wPjhFsZUyyLcKhJxfN7Fw6OIKw67OoaceTR9r0wvxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWKUYhnoqFHjvK5WI01ZbVGWgqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMDlmMmRjZmItN2YwNy0z
YzE2LTg3ZjYtOGVkM2U2YmVlM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcBOplv4fWNvV0xylOU3V0bsYKkqSRoLThQMRdBVPBdv4JwYZ0yKs73
Un+Tg5X0epvy8Q09orwhWvoZrA0MeZUkJ0pKHMnsGNAmVBIACZwRiPHXNAyfyaRA
1xls5oNRLAD8vdgfQ06cojw5cv7lDocA+onexaydzmvcMIdUhzvO0s5OvdkNDSa5
dcF343BwXR4lBQaHmfbLoQWgEZajReg0HzBFBuAa7ovn7q4izBnteSvUHJ64Xf3j
A54UeT8RzxoPuW1SMfJlZolm5386xv/h4OPOwFDr2PtN+FF9MNohDqalt2k3Tz13
ujnkY0OO3GCMK37FZ6yCwYpyZ8iBp7w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:54 2025 by rpki-client