Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9f8b34ed-f91a-31e4-8e7c-46952fdf1bbb.roa
File:                     9f8b34ed-f91a-31e4-8e7c-46952fdf1bbb.roa (raw, json)
Hash identifier:          KPgXO9XrgQ5uuJeovCkHhtq8iBO44o2xzcr+f0hp930=
Subject key identifier:   F9:AE:B2:DC:56:98:2B:54:73:EF:64:A6:3E:FB:29:25:75:1B:EE:A6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584919417EAD04A1A6A86FA0BF40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9f8b34ed-f91a-31e4-8e7c-46952fdf1bbb.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     53989
IP address blocks:        64.184.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7e:ad:04:a1:a6:a8:6f:a0:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=27f14376-af13-4cde-9d8a-868932e48af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:b6:37:f8:a6:e6:9b:36:72:16:2a:22:80:
                    86:4f:aa:56:89:db:45:ae:d5:19:83:86:b9:c2:06:
                    5d:37:07:98:89:f4:5b:14:f8:94:75:a4:19:bf:fb:
                    35:e0:42:91:35:2a:79:ca:d2:7a:48:87:5b:ec:c5:
                    b4:b3:3e:69:aa:d3:ec:5a:94:f5:8b:dd:b2:80:79:
                    8a:9a:99:ed:1f:17:b3:e3:28:ef:4e:7a:2f:a7:ad:
                    7c:4c:ef:29:53:44:cc:c0:21:7b:a9:a2:be:f6:59:
                    d7:cc:bd:7b:10:09:85:d2:c2:ba:0e:48:ff:10:7c:
                    b7:c2:48:1b:f8:22:d1:33:86:6f:f5:12:18:3d:51:
                    24:9d:e2:a3:f1:24:79:10:48:74:7a:98:92:c2:61:
                    a3:2e:c8:48:50:be:c3:8d:40:ad:d1:56:6e:37:4e:
                    3b:a6:d9:0a:4e:82:0f:a6:3e:19:aa:2c:04:6c:84:
                    53:4f:40:3f:a5:73:01:93:ad:be:5f:75:f1:ed:a8:
                    a8:35:38:3d:51:d8:68:4d:79:23:f6:23:51:31:6a:
                    5a:7f:20:e2:5c:90:a4:38:88:c7:ce:5a:6a:ee:03:
                    01:24:df:60:70:3c:91:66:e7:a4:ff:24:45:41:08:
                    92:35:e5:0b:5a:08:95:4c:63:5e:2f:67:bd:44:a2:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:B2:DC:56:98:2B:54:73:EF:64:A6:3E:FB:29:25:75:1B:EE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9f8b34ed-f91a-31e4-8e7c-46952fdf1bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:6c:2d:3c:32:1f:b6:85:52:0b:9b:ec:c2:3d:d8:28:e9:
         1c:27:14:93:36:f2:3f:05:08:e6:0c:99:40:66:bf:03:e4:dd:
         da:e6:98:60:ec:87:ca:12:2b:20:fa:57:56:0a:78:77:c5:1e:
         ae:15:4b:34:74:b3:82:73:cc:bb:63:5c:37:0c:50:a8:c0:05:
         02:6a:f0:c3:8d:08:9c:1a:4b:0d:51:09:f5:1c:80:84:76:7c:
         53:15:8c:c1:be:3c:19:e0:c8:3a:4b:9d:ef:8a:ef:08:6a:27:
         39:17:cf:bf:61:9e:8d:5e:b1:ee:55:08:fe:57:70:80:7c:fd:
         08:a6:c5:d6:37:43:e1:a6:58:f1:28:fe:a6:62:ec:bf:1f:7b:
         05:96:77:5b:ff:2b:7d:b0:da:02:ee:c1:a9:cf:34:33:0c:bb:
         64:cb:9c:c5:8c:54:8a:5c:f4:f1:5a:00:fa:58:f4:2a:3d:14:
         64:f0:f4:99:e4:c9:11:e6:b2:e5:d3:72:88:81:85:8d:9e:39:
         9e:7f:d5:a0:b3:da:8c:01:d4:01:04:86:78:6f:de:f0:60:a0:
         60:38:d5:b0:ea:08:d8:9c:3d:02:2a:50:8e:14:c7:f3:b1:2a:
         b9:f7:29:4e:4b:14:02:2b:a5:27:7f:ab:c0:2b:4b:f5:e0:26:
         b5:97:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:32 2025 by rpki-client