Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/55b92d70-321c-32fd-ab55-c65683599ddc.roa
File:                     55b92d70-321c-32fd-ab55-c65683599ddc.roa (raw, json)
Hash identifier:          5gLhsRY2y6wOrf6rGvVhHsHFgw8ASO5sCCEoYaN3ROQ=
Subject key identifier:   1B:3B:45:7B:10:A5:CC:0E:13:8B:B6:87:23:A1:65:E5:2A:8F:F1:62
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584957F418E3D594AA00F0086780
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/55b92d70-321c-32fd-ab55-c65683599ddc.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        64.17.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:18:e3:d5:94:aa:00:f0:08:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=7f37c9c6-5bab-46d7-a9de-e690849d503e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:20:a6:a6:97:fd:85:9f:91:af:ee:c6:30:
                    b2:58:1e:13:7f:61:60:0c:aa:d2:88:65:cf:05:3e:
                    3d:27:22:e4:e9:08:13:4c:a2:68:55:7f:bd:bc:fc:
                    59:f8:fc:c2:52:aa:2e:b3:a4:35:1b:1c:79:4b:82:
                    2d:14:c5:a0:ae:4a:8d:3d:68:ce:f5:1e:7f:0c:f5:
                    58:c0:df:a2:67:fa:18:3a:ad:b4:64:75:d9:59:fa:
                    7f:c1:3f:bf:be:f3:69:d5:a0:3b:23:e3:b1:ac:ec:
                    4c:34:da:9e:a3:9d:2f:3f:93:62:09:73:07:3c:0c:
                    3a:88:fa:d1:b0:d5:75:6a:3c:55:6f:48:86:dd:11:
                    e7:a5:fb:56:8f:8f:a1:19:fa:ce:1f:1a:f6:68:cd:
                    81:df:e8:6e:4d:d5:42:21:97:de:17:fd:1d:a4:f5:
                    3a:9b:19:5a:ff:4f:0e:7f:16:30:d3:64:05:34:59:
                    2d:27:74:d8:24:5a:2b:48:b1:f0:e3:0e:cf:34:96:
                    26:50:1f:55:99:96:64:67:33:58:b1:ed:31:5f:8b:
                    5b:80:0a:30:a0:15:db:8c:a1:c6:c7:f7:1c:ee:2d:
                    63:5f:27:67:f4:b2:0a:b1:be:01:4b:8f:55:2c:a6:
                    03:88:f0:d0:d4:4a:e7:cb:88:73:3c:23:79:03:93:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:45:7B:10:A5:CC:0E:13:8B:B6:87:23:A1:65:E5:2A:8F:F1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/55b92d70-321c-32fd-ab55-c65683599ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:da:ca:e2:ec:52:39:3e:e5:49:8b:59:f1:64:3e:50:c7:c2:
         b1:5a:79:23:aa:f1:a6:85:25:04:d8:d9:d0:2b:1a:ea:b9:ce:
         e1:97:d8:69:2a:db:ef:06:7a:61:4e:8d:bc:26:65:ce:0c:ef:
         0c:c4:d0:a4:e4:58:1d:4e:c2:11:93:a2:6e:72:a0:4b:1d:3c:
         e1:2d:71:17:3d:87:ae:d1:c8:9d:c8:b0:c2:8e:ad:fc:ff:58:
         1e:b6:4e:f6:e0:30:fe:76:ec:2f:e1:d6:23:79:e0:51:f8:50:
         3e:8a:f0:6f:4a:fa:08:84:3f:17:40:1e:97:26:7a:35:b6:3a:
         da:23:75:29:f5:32:a3:00:42:9d:8f:01:73:2d:2b:d8:65:a0:
         71:52:02:3a:11:97:09:58:70:ab:74:53:eb:22:ed:a2:0c:83:
         0e:b9:d3:fa:1a:28:b4:0c:74:cf:e9:22:1d:e7:1c:2a:2c:11:
         d8:f1:65:42:81:b5:05:5e:03:92:5f:6c:83:c2:19:45:2c:ba:
         49:39:71:62:78:a1:8f:9e:fd:b4:24:9a:c5:2d:09:c2:cf:93:
         06:73:37:bc:53:f3:ae:ac:be:a6:14:35:32:32:25:9c:99:8e:
         52:34:f5:c5:62:aa:22:2a:5c:07:d0:eb:2c:2d:30:fd:5c:36:
         be:88:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:55 2025 by rpki-client