Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/9b0b320c-0a78-3900-8b5b-765bc4d18bc6.roa
File:                     9b0b320c-0a78-3900-8b5b-765bc4d18bc6.roa (raw, json)
Hash identifier:          Kgbu0HX3Bk/nhIGXx/i5OKq8WvilkQI+uBQm1AHekUE=
Subject key identifier:   2F:80:EB:8B:E3:B4:65:08:93:2B:15:8F:9B:54:76:5F:E6:CA:4A:BA
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858494733E4F8488203EAB5C5A4C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/9b0b320c-0a78-3900-8b5b-765bc4d18bc6.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     13414
IP address blocks:        64.63.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e4:f8:48:82:03:ea:b5:c5:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=1ff71b25-e5c3-4a36-b90c-1fd717ce3bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:e8:11:06:cf:db:63:94:8a:d2:16:fa:e0:
                    c7:0a:1a:ae:82:f5:a0:6b:73:38:85:4a:cb:ee:b0:
                    78:6f:db:f5:60:94:ea:75:e7:be:db:9c:3c:f5:99:
                    d9:9c:cc:49:28:e2:d8:f6:4b:06:f4:a2:d8:50:bc:
                    5d:b1:ae:9d:dc:fe:24:a3:e3:39:c7:6e:86:46:d2:
                    ba:39:bc:63:73:50:f7:97:a5:75:47:c0:9a:6e:f0:
                    73:6c:b4:70:73:61:97:01:87:80:f0:30:f8:a1:8f:
                    ef:11:df:e2:50:d7:35:6d:30:7a:54:cd:45:25:e2:
                    c1:27:de:53:3d:6d:98:81:a5:30:40:ed:cd:84:a0:
                    66:22:e6:53:ee:2a:ae:96:8e:0e:c5:a5:44:e7:db:
                    a3:cf:ec:3e:c1:07:5d:66:de:f7:b1:d1:85:1e:62:
                    71:61:e0:4f:69:4e:f5:6f:d4:7d:87:8c:74:63:28:
                    b9:20:8d:06:3b:ff:c3:cb:a6:bd:b1:9b:87:6c:64:
                    5e:6e:b9:8b:a5:da:45:7d:58:51:cc:aa:a9:09:83:
                    c1:02:35:65:85:e6:00:bf:8f:9a:85:c1:74:2d:0a:
                    a1:9c:e4:cd:75:93:0e:8b:de:5d:3d:f3:e0:6f:2e:
                    cc:6c:8f:b1:de:ae:d8:6e:65:7c:b1:86:c4:50:44:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:EB:8B:E3:B4:65:08:93:2B:15:8F:9B:54:76:5F:E6:CA:4A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/9b0b320c-0a78-3900-8b5b-765bc4d18bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:a8:24:ca:b2:60:9c:32:01:6f:ca:3e:19:3a:0e:54:9a:
         04:39:3f:89:da:63:8e:9e:7e:88:4e:23:bf:fd:f3:10:cc:3a:
         b0:46:ae:e2:ea:18:79:44:bd:3d:1c:e2:b4:c6:72:be:cf:32:
         18:99:ec:31:17:29:61:08:52:81:1e:05:80:d9:17:03:c3:2f:
         a5:86:3b:db:bb:de:ff:bf:f6:d0:c1:c5:a9:b0:f0:fd:91:c5:
         38:81:1c:14:8d:dd:44:94:2a:2f:98:39:ee:c3:55:0f:f6:b9:
         ca:9d:31:2c:d6:75:90:eb:7b:42:f5:b9:b7:cc:fe:9c:3d:f6:
         62:1c:b5:ef:f9:43:3a:b1:9a:36:b2:38:57:fd:a3:52:a2:a4:
         e9:7f:40:80:13:cb:f6:8c:c9:b4:13:d7:50:73:6c:d7:b2:16:
         f2:8a:08:26:4d:a2:ba:6e:71:39:15:1d:5c:46:3f:9e:3f:59:
         ec:52:13:03:f2:30:d9:d6:28:2d:92:e7:ea:c4:73:ec:e0:f5:
         56:53:e3:14:2c:d2:c3:3d:e4:75:42:1e:2b:0a:86:c9:35:2f:
         59:c2:89:41:5e:8f:cb:40:d2:a5:15:51:1f:81:1f:69:48:58:
         ce:59:75:f5:e2:ff:b3:23:1b:a1:8c:5e:cb:55:83:4f:18:24:
         43:29:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:26 2025 by rpki-client