Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa
File:                     99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa (raw, json)
Hash identifier:          ULVKv5TrnsW2emkop5iCaHnH+QfS/ULP8tlHGLPXJUI=
Subject key identifier:   A5:B1:5B:67:21:AD:41:C6:8B:AE:D6:D1:D7:DC:4A:49:7E:39:D8:B7
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584949FE8DE368161AB27AF9AE80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     13414
IP address blocks:        64.63.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:8d:e3:68:16:1a:b2:7a:f9:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=e7cfeb4a-1d65-4e0c-8d50-9a2ba2c20a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:3d:2e:da:2d:b3:6a:f3:64:b7:a0:f4:43:
                    03:7f:23:17:56:25:0e:d3:f2:8b:52:30:ce:00:6c:
                    b6:42:0a:1e:16:a5:09:7f:bc:b5:a2:72:fc:3a:9a:
                    94:1c:e4:b3:10:8e:7b:02:d3:39:2f:84:8e:3e:39:
                    20:f7:c4:7b:70:d2:b2:6f:97:3d:31:e8:8e:6a:8b:
                    9e:04:90:42:df:36:48:96:89:9c:dc:f5:fc:5c:0d:
                    89:bd:92:87:cd:59:8f:d2:b8:cd:81:e0:38:e3:97:
                    7f:53:10:16:fe:fc:38:9d:ca:bc:19:e9:a4:b9:00:
                    6f:85:c6:e2:b8:2d:ec:1d:ab:06:68:de:8f:2f:81:
                    2a:3a:e4:83:69:ce:9e:11:6a:69:0a:40:77:5e:6b:
                    6a:32:8c:2b:8c:9e:f4:a4:73:a9:69:21:2b:a6:48:
                    a8:81:66:28:53:27:74:83:08:2e:3a:c7:24:ff:de:
                    05:7c:94:2e:04:b7:29:c7:ae:1c:57:78:80:e8:c6:
                    b3:fe:7e:42:0a:32:65:9f:5d:4b:44:41:37:a6:7e:
                    ea:1c:3e:5f:b8:f2:b7:8b:f7:16:1e:61:7c:ff:66:
                    b5:6d:75:ac:8b:d8:46:01:f2:72:66:82:10:02:f4:
                    81:f5:68:d6:da:ed:6c:2a:33:02:8d:1d:1b:a7:66:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:5B:67:21:AD:41:C6:8B:AE:D6:D1:D7:DC:4A:49:7E:39:D8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/99cf3bf1-1b90-38a3-89a0-e0988ee8054a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:19:d1:17:d1:ee:54:02:d0:21:c9:c8:3b:d7:99:28:ba:3c:
         44:77:77:ac:b6:be:2c:12:8e:4b:87:99:1f:4d:d1:9e:a0:17:
         ae:1e:34:4c:d5:dc:7a:1e:9e:58:17:94:9a:86:90:8b:b0:fb:
         0f:e9:22:ca:5c:3a:d1:aa:06:41:e0:d2:0d:a7:4a:a0:7f:74:
         71:2a:4b:7f:28:d1:a2:ed:b7:15:50:32:39:8f:a9:38:01:af:
         1c:48:84:c5:9f:60:0d:eb:bf:33:45:fc:6a:5c:e4:1e:81:c6:
         e7:c9:be:23:95:d6:f3:16:e7:a3:01:46:8d:58:7f:be:87:f7:
         cf:39:85:2f:7a:55:39:ae:4b:cb:9a:d6:da:9e:28:da:cc:47:
         f4:c1:85:52:37:5d:d6:24:d7:f4:32:47:e2:c5:91:c6:f0:78:
         40:23:36:b6:b0:df:ba:65:97:ce:96:ab:43:d1:4d:60:f3:83:
         ff:01:8b:86:d7:ef:76:f5:34:5f:c7:0b:35:1a:d1:d4:24:4a:
         72:45:e5:74:5d:40:f2:fc:ff:a5:79:f7:cf:5c:a4:8e:fa:1d:
         94:78:e8:01:22:f0:2a:ff:5e:42:f8:9d:4f:b0:d1:64:dc:54:
         e1:b9:00:92:a8:2b:9d:df:c2:11:14:71:6e:ef:90:19:88:d1:
         3a:ba:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:19:09 2025 by rpki-client