Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa
File:                     860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa (raw, json)
Hash identifier:          S8d+bTcjOoEsYfItXC5jsawaOSKu3MAiOUeKvMjeGFA=
Subject key identifier:   44:E7:A4:62:D4:EE:32:08:9F:FF:67:39:DD:D8:AF:51:41:85:69:31
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584949FE88E5ABDFA2611C229440
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     13414
IP address blocks:        64.63.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:88:e5:ab:df:a2:61:1c:22:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=7349169e-2339-4540-9d70-70e1e81005cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:93:26:9b:91:49:1d:29:55:74:a9:bf:00:
                    ec:64:f2:47:6a:6f:ec:21:8e:ef:38:4b:db:43:64:
                    40:ed:97:cd:b7:86:05:7a:73:64:19:ac:a5:75:6b:
                    01:56:c1:8f:4c:b6:04:b7:bc:59:06:b8:a6:9d:9e:
                    03:e7:61:f1:5f:79:10:da:d1:e3:9f:a1:2e:8b:bb:
                    cd:4d:2f:df:03:30:14:a1:99:1f:bf:71:52:23:aa:
                    0d:71:77:86:44:d8:68:3e:52:ff:8e:d2:c4:79:62:
                    7c:81:8f:4c:c5:1b:50:45:ce:9b:12:06:68:3e:13:
                    f3:70:a1:cc:b2:1a:61:bd:0b:29:f0:d2:fe:56:d4:
                    97:63:78:ed:22:60:65:01:63:6c:4f:44:4e:ca:92:
                    6a:ba:8d:9e:03:0e:5e:3d:5e:14:bf:79:e5:cd:70:
                    fe:34:d9:26:e6:e8:06:58:94:6c:78:97:bf:a3:a9:
                    bd:5c:88:4f:73:15:c6:fe:69:3f:8f:4f:4f:c3:4f:
                    60:0c:f9:ad:67:54:45:a0:70:49:c2:7c:4a:56:20:
                    e9:7f:a2:54:9c:5b:23:e8:8c:ac:40:b6:bd:98:ff:
                    45:ab:6d:9f:97:f5:fd:02:72:fd:4b:79:09:55:99:
                    fc:92:2e:c6:b0:64:37:b9:ef:82:34:ca:a9:17:9c:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:A4:62:D4:EE:32:08:9F:FF:67:39:DD:D8:AF:51:41:85:69:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/860afd41-d4a8-3fc2-b4b8-4adf1829ea92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:39:dd:e8:03:6b:3d:81:4c:81:63:66:77:c6:d6:80:19:be:
         9d:2e:62:b4:fe:0b:59:43:43:72:b2:4b:e3:aa:43:b3:94:6c:
         2a:95:1e:25:de:1b:45:66:ab:28:4f:50:b5:98:44:0c:75:5b:
         68:a7:7f:c1:6f:61:17:05:6c:15:23:bc:f4:71:60:ae:7a:63:
         81:9d:b6:3a:ef:8c:52:bd:5a:4f:a0:32:6a:b9:11:5a:a3:5f:
         5f:c2:3e:3b:82:6b:0c:c2:c9:b3:f0:32:7e:b3:d8:05:96:cd:
         ad:40:02:bd:76:a0:15:7f:b7:a7:0c:14:cc:05:42:68:f7:23:
         2d:ad:d4:7b:8a:db:7e:38:23:d9:22:26:1d:02:e5:f5:29:a3:
         49:7f:df:4a:4a:36:fa:2f:59:8d:dd:96:0b:58:0a:50:10:d3:
         90:03:8c:84:74:7c:3d:31:93:9d:26:95:13:cc:db:53:57:82:
         be:cc:c5:29:5b:7b:f5:ee:55:74:a0:cc:cb:e5:42:c2:84:6b:
         21:97:cd:e8:52:53:40:66:6c:8e:d4:cd:ad:77:0b:5c:4a:38:
         c1:b5:32:a0:52:d4:3f:63:65:5a:48:a3:1f:e9:d0:8b:d3:f6:
         97:06:b4:73:bb:88:51:33:01:6c:22:6e:82:09:f7:32:9f:ee:
         9d:61:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----