Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3c07b9b4-2403-3942-a366-3c3fb81220ec.roa
File:                     3c07b9b4-2403-3942-a366-3c3fb81220ec.roa (raw, json)
Hash identifier:          omFp/HFRdTYt+xyO79j9qTurCSMRHX9Ce5fdvQUptV8=
Subject key identifier:   09:F5:FE:D8:F9:F8:C7:41:20:8D:37:41:E2:74:94:E1:D2:29:11:E0
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858494733DF069EAA1EA3D895E180
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3c07b9b4-2403-3942-a366-3c3fb81220ec.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     13414
IP address blocks:        64.63.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:df:06:9e:aa:1e:a3:d8:95:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=d3bfdaa2-efb0-4d83-b4c3-1b94f37319f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:fb:a4:ae:94:4c:6e:f0:b3:c4:1e:f2:3e:
                    8d:23:f7:82:90:a2:74:21:a7:19:26:e2:bb:80:e7:
                    d3:8e:82:42:41:de:58:28:cc:3f:c2:a9:68:92:e7:
                    b3:02:20:23:b2:7b:4e:5b:f4:d6:c6:4f:a6:9f:7b:
                    f1:a7:03:5f:60:50:61:97:b0:80:13:df:0f:a7:23:
                    38:a6:6b:ee:c9:60:e8:99:d0:5f:a3:69:c7:9f:7a:
                    9f:c4:38:8f:e7:97:e2:ec:08:51:74:3b:fa:75:cd:
                    9a:52:cf:fb:e0:c6:57:e6:8d:64:0c:a1:0c:6d:48:
                    1b:ee:b2:6b:1d:88:fc:f9:97:a8:60:ce:59:fc:43:
                    82:ad:7b:45:07:34:65:50:73:1d:fc:77:28:4f:e2:
                    e4:0d:14:e2:90:1d:c7:7d:69:a5:2c:2b:33:14:5d:
                    55:64:09:bd:3b:c7:0f:53:84:a1:fa:35:14:bc:71:
                    3c:eb:cb:bb:e9:cd:b3:dd:47:82:02:a2:97:bc:81:
                    2b:35:15:80:5b:6c:f3:c1:30:d7:88:fc:00:b9:3d:
                    46:df:c8:16:d3:39:ef:df:da:9a:ee:c0:5c:44:5f:
                    3d:07:04:3a:be:c3:d2:c1:da:ef:83:9a:9d:4f:94:
                    12:ef:2f:e1:4b:87:a8:4e:44:06:df:23:74:25:ba:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:FE:D8:F9:F8:C7:41:20:8D:37:41:E2:74:94:E1:D2:29:11:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3c07b9b4-2403-3942-a366-3c3fb81220ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:cd:1f:11:c7:05:50:bc:5b:cb:af:5a:ee:7c:17:21:21:
         80:3e:21:22:7b:6e:b2:f6:28:0e:95:46:85:e2:0e:61:58:ea:
         38:ad:b2:b7:34:89:f1:1a:cd:de:82:4b:be:3e:40:85:50:5b:
         b5:b1:c7:19:0f:83:8c:64:60:f8:7f:9e:27:f4:7e:7b:9c:8d:
         1c:a6:20:23:e5:d5:f5:13:de:d4:97:86:0a:65:6d:15:4e:90:
         98:8d:b6:b1:1d:35:4f:c0:e2:3a:b3:cf:fc:9d:d6:56:6e:0c:
         cc:b0:95:70:12:23:96:3a:ae:29:c2:30:31:fd:2b:40:e4:ab:
         dd:b9:b5:06:a4:f1:5f:d5:19:fe:44:be:70:9c:a1:41:cb:17:
         f1:80:49:f8:cb:4f:d1:42:0d:e3:9e:9d:08:6e:82:0b:06:5a:
         17:11:5b:82:a8:ea:7b:be:00:7f:99:62:89:b0:d8:1a:c0:b2:
         0f:98:97:1d:a3:21:ec:4e:3f:ee:48:53:aa:20:01:5d:4c:fa:
         99:98:d8:b1:13:fc:ca:c3:0d:70:d9:a6:e6:9a:62:ec:f0:f3:
         7e:8f:d4:6f:36:bd:41:b7:db:56:9e:ef:4d:9f:10:8e:1a:55:
         0f:ce:c9:d1:1e:69:63:c7:1c:a6:9e:3d:fc:29:13:0e:80:f2:
         4f:6f:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:24:48 2025 by rpki-client