Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa
File:                     9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa (raw, json)
Hash identifier:          yZFCPzi3Hp1QIbtnOWHGUkvw0ZLCJurl7VeJrrZgjZU=
Subject key identifier:   25:86:36:E3:11:66:2E:00:47:79:0A:13:6A:93:2A:8E:5B:4F:A1:2D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F22C6A28DFE8E28AE0BB1120
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     17025
IP address blocks:        64.125.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6a:28:df:e8:e2:8a:e0:bb:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=2287c5f7-c3a5-44fa-a6f4-a2f8d9e6a6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:ce:1b:dd:1f:35:f6:2f:4b:62:7e:cb:d7:
                    5d:55:ad:a4:ef:c7:50:17:7e:39:57:b1:01:90:09:
                    15:b3:b6:d7:d4:f1:3a:02:9f:90:bb:b8:5e:37:fa:
                    fa:b4:70:23:b3:0c:3e:64:e1:3b:3a:1d:fc:b0:72:
                    e7:27:ff:0a:e6:8e:fe:d2:49:b1:d2:35:84:1d:7b:
                    ca:71:f0:d9:83:bc:1d:fb:29:22:62:0e:94:b8:a3:
                    07:e6:6b:78:9b:01:b8:17:6c:ff:f7:93:5d:b6:61:
                    0f:1c:94:74:a0:ef:0c:96:26:dc:3e:e1:3a:c3:ae:
                    52:51:fd:bc:d1:66:d4:09:a8:27:5f:40:f5:3c:91:
                    31:6e:90:d1:98:e1:d5:51:ac:23:19:75:81:57:76:
                    b3:c0:c1:ac:8b:10:e5:49:3f:08:bd:31:aa:99:3a:
                    61:e3:a7:90:25:9e:e7:ce:13:45:19:1c:dd:e0:9a:
                    28:c7:76:f3:43:ab:54:fb:6a:82:6d:dc:50:9f:41:
                    4d:53:5c:15:ab:50:c7:05:cb:48:bc:65:2d:d3:af:
                    cd:45:35:e8:b7:7a:e1:92:24:8e:4f:9f:63:36:b5:
                    86:39:d0:3d:f7:1d:d5:47:8b:b9:58:d2:14:a8:c7:
                    44:4a:53:8b:48:ed:d9:dc:7b:7e:2b:25:4e:f8:78:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:36:E3:11:66:2E:00:47:79:0A:13:6A:93:2A:8E:5B:4F:A1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:72:0e:9b:e5:e0:c5:91:a4:84:8b:7b:2d:e1:70:64:75:
         5c:45:cf:40:c1:19:8f:62:dd:7d:06:0f:1d:23:a5:b5:41:c3:
         05:97:55:f4:0d:71:4d:e2:26:45:d8:2a:ac:e6:db:95:93:3f:
         4b:86:d5:d5:17:e9:84:b9:51:93:1f:d8:19:1f:2d:fb:60:91:
         36:59:17:f1:4e:a7:54:01:d5:2b:ed:40:1b:2e:88:ac:cd:bc:
         4b:c5:08:03:ba:bb:3e:30:8a:b7:30:a2:cd:5e:1f:81:03:d8:
         d3:fa:85:28:a8:ac:79:a0:f4:d4:7b:16:f2:22:58:5e:62:70:
         77:96:df:d7:97:bc:b8:f7:62:6c:7b:89:a9:29:20:a3:4c:c4:
         b1:1b:67:87:05:ad:18:50:d1:85:11:f3:c6:e7:23:f0:0d:31:
         2e:3b:12:c4:b7:ab:4a:9e:a1:82:6a:ae:2d:0e:7a:e0:97:4f:
         1d:02:65:21:86:b5:56:a2:04:db:df:12:c3:68:4c:2e:16:f9:
         1f:10:2b:f2:4d:55:3b:b6:26:d9:1d:66:6e:c6:a7:c0:44:e5:
         33:27:0f:8f:0b:35:56:a2:d2:66:51:9e:59:8e:f6:f6:a5:2f:
         69:ff:d9:d3:c2:d0:fd:c4:ec:19:34:7f:48:c1:16:d7:5c:cb:
         3d:f2:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:34 2025 by rpki-client