Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2f293f31-1549-3ad8-8bca-4207f1a62be4.roa
File:                     2f293f31-1549-3ad8-8bca-4207f1a62be4.roa (raw, json)
Hash identifier:          cJ5SZP03uIe6Nvlz2n8fC5cwrq/nQD8xnw2yopo4mA4=
Subject key identifier:   DE:DB:5F:0C:71:8B:3A:CD:4C:B2:B7:57:F9:13:8F:42:CF:93:58:93
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848EF616B1DF9C142E5DEBE5900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2f293f31-1549-3ad8-8bca-4207f1a62be4.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     393780
IP address blocks:        64.124.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:6b:1d:f9:c1:42:e5:de:be:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=36b6aae7-6ed3-4d6b-b6ef-54a50c05aa41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:cd:e7:82:d5:cf:fd:bc:17:01:59:36:0c:
                    f2:12:5b:f9:68:07:2d:c5:6d:99:93:f2:38:44:e0:
                    5e:3b:fa:35:09:81:bb:ae:2e:66:27:1c:f4:ec:9a:
                    ab:1a:83:0c:d2:41:3d:3e:18:21:7f:d5:d1:91:63:
                    00:26:11:39:0b:92:ce:39:03:c0:6f:cc:99:25:c4:
                    9c:f2:c2:5b:65:47:20:96:17:ad:a0:69:8b:38:ed:
                    3b:43:55:85:b5:7c:94:c5:b6:a6:75:4c:28:a3:df:
                    a7:39:66:3b:67:61:e3:0d:6b:28:a6:55:24:ef:6f:
                    81:3f:7d:86:a6:1a:25:44:6f:2e:16:27:d5:9a:29:
                    eb:c9:7c:71:5f:14:55:26:6e:40:33:58:47:30:91:
                    e1:17:0e:7a:a3:e6:ac:d7:95:da:69:ea:2a:cb:6f:
                    50:dc:5a:47:0a:7d:ac:5c:3f:05:6c:b6:33:62:7e:
                    e4:9b:d3:54:ce:53:ad:26:22:1b:c8:63:5e:66:6c:
                    87:73:d7:c4:67:b8:e1:9a:5d:04:81:bf:30:d3:af:
                    5f:9f:9a:a1:9c:13:b4:80:92:97:5c:96:e3:2d:bc:
                    22:36:b6:11:ca:3d:8d:0e:68:84:b7:03:cf:b7:ee:
                    84:f8:5c:1e:20:dd:f6:80:c2:52:54:b1:b3:bd:1b:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DB:5F:0C:71:8B:3A:CD:4C:B2:B7:57:F9:13:8F:42:CF:93:58:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2f293f31-1549-3ad8-8bca-4207f1a62be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:81:f6:3c:ed:37:1d:fe:a0:1f:16:6d:57:3d:17:bb:7d:02:
         21:90:42:40:c3:91:c7:cd:20:91:25:dd:68:70:fa:9c:c5:71:
         bf:30:8c:0b:cc:cd:da:e0:fa:ae:e7:28:6d:2b:f8:73:88:cc:
         16:70:8a:6a:d1:66:89:66:79:82:04:99:1e:f0:2c:14:26:11:
         5e:57:ed:50:ee:6f:49:fd:0c:31:4d:d8:3b:ee:36:59:b9:e6:
         23:d2:b9:6a:54:a0:d1:f4:a3:25:30:a7:fa:02:d1:a0:c1:7b:
         7e:b9:94:d9:cd:5b:82:5a:22:1d:70:b1:42:e0:bd:0f:32:50:
         c2:2f:f5:dc:f4:44:d1:6c:65:5b:0a:16:09:ef:c0:d1:64:eb:
         9a:15:6f:b8:23:57:86:7b:ce:0e:33:ae:a8:5f:f0:36:53:cb:
         ec:49:8f:04:a5:e9:62:f1:d8:a4:04:30:4b:68:46:77:75:66:
         d0:9d:ec:45:ee:a4:0f:6e:b1:06:35:18:ab:88:f5:f1:9c:56:
         80:a4:65:70:f6:d1:3a:7b:bf:da:f9:a2:ae:b0:ab:29:61:c8:
         18:73:91:f7:7e:11:10:c4:a6:36:82:b0:d6:8e:39:4e:e0:a6:
         d3:82:e4:e4:73:9f:32:56:fd:2c:93:4a:0d:e4:82:7e:8f:e0:
         fe:05:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:28 2025 by rpki-client