Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/b726cafa-a689-3451-bbbc-0f202d128488.roa
File:                     b726cafa-a689-3451-bbbc-0f202d128488.roa (raw, json)
Hash identifier:          7MTQgaPVZYpAYgOyInkTVVpQDlHI9kkkmCE/kubjbz8=
Subject key identifier:   2B:D2:4B:DD:42:E7:BF:C2:31:3F:9E:36:FE:B2:35:E0:BB:ED:DB:AC
Certificate issuer:       /CN=4310aaf8-5883-47e5-8319-e5c9da9cc46d
Certificate serial:       010D0C9F43285849379C23A1BAFAB34F586A7C80
Authority key identifier: 54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/b726cafa-a689-3451-bbbc-0f202d128488.roa
Signing time:             Mon 17 Mar 2025 10:57:53 +0000
ROA not before:           Mon 17 Mar 2025 10:57:53 +0000
ROA not after:            Sun 15 Jun 2025 10:57:53 +0000
asID:                     329007
IP address blocks:        64.49.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:9c:23:a1:ba:fa:b3:4f:58:6a:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4310aaf8-5883-47e5-8319-e5c9da9cc46d
        Validity
            Not Before: Mar 17 10:57:53 2025 GMT
            Not After : Jun 15 10:57:53 2025 GMT
        Subject: CN=22621cee-066d-4bf9-8a69-f2bd76fc43d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:f4:1e:e6:58:a5:ec:7d:bf:a0:1a:fc:e7:
                    2b:70:50:a1:99:4b:e4:d0:f6:ed:f1:dc:5f:ef:d4:
                    19:a2:4f:4f:4a:ca:b0:d4:30:b0:74:0f:97:60:3e:
                    b5:dc:74:9a:5f:e9:63:23:8c:fc:9d:41:60:d1:fc:
                    5f:47:2a:9e:ce:5d:b7:b8:1c:37:6f:d3:dd:a4:5c:
                    97:d6:29:a7:36:00:71:46:53:3d:9f:e8:a3:34:5c:
                    27:e8:d5:c8:c4:46:b5:3f:7b:89:ec:32:88:de:fb:
                    f3:cf:59:f8:52:92:c7:62:aa:b4:f3:d3:44:6d:ce:
                    3d:1f:60:a9:e9:89:49:03:71:17:e4:c7:e3:70:85:
                    b7:b1:f0:fe:a4:e4:e1:38:18:61:7a:5d:f0:98:d4:
                    a5:d4:f7:4b:2f:84:6f:04:32:77:0a:1d:cb:cb:10:
                    ed:b0:9b:04:c6:51:e8:6e:32:e3:6b:5d:c4:88:39:
                    54:63:d3:40:c5:dd:e1:41:10:79:7a:4a:c8:72:4f:
                    2b:1c:ec:46:cf:e2:cd:ed:8f:e8:86:34:03:ae:f9:
                    cb:0d:fc:7e:6a:94:bd:c5:2e:ff:70:a7:f0:39:06:
                    2d:4d:42:e8:9d:62:38:5f:8c:5d:ce:87:14:fe:3e:
                    62:73:47:36:ad:e3:a8:5e:a8:4d:95:ef:32:3a:9a:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D2:4B:DD:42:E7:BF:C2:31:3F:9E:36:FE:B2:35:E0:BB:ED:DB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/b726cafa-a689-3451-bbbc-0f202d128488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.crl

            X509v3 Authority Key Identifier:
                keyid:54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a5:a8:73:f5:0d:85:55:ca:96:86:9d:a5:ac:e7:c1:12:3a:
         e9:35:7f:9b:25:d3:52:f4:9a:f8:c2:56:cb:4c:57:9f:7a:7a:
         04:94:65:b8:22:55:1d:1a:36:58:f3:7d:08:5c:70:db:41:f5:
         69:4d:03:f8:d6:ea:9e:a6:76:66:7f:fe:32:b9:ea:79:9f:93:
         e5:a7:d2:14:83:41:72:25:ab:92:ce:79:ab:2a:4c:07:2b:16:
         e2:25:c3:50:41:b7:2e:9c:8d:b4:77:71:f4:d1:fd:86:90:60:
         fc:a2:87:b2:fd:e2:aa:be:22:6d:9f:ec:62:ba:07:8f:e7:42:
         37:cd:5d:8b:b8:e2:a9:76:08:19:c9:f7:52:da:82:5c:40:ce:
         41:48:bb:5e:52:14:b0:2a:92:d2:3a:65:f0:58:0a:ff:1e:dc:
         6b:e0:4e:91:49:21:2d:de:eb:32:6b:f4:c4:ee:f1:d8:83:09:
         5a:2c:e8:46:a7:1e:54:ea:0e:77:4e:77:67:12:ba:cd:17:4d:
         48:55:ad:94:b5:5a:83:95:cc:2b:05:46:8d:55:70:47:9f:e8:
         e3:5b:dd:9e:21:e5:c4:67:6f:fc:33:72:1d:81:d1:8a:1c:b3:
         ae:9b:9d:2e:f4:7c:d0:7d:da:44:c4:29:0a:f0:a1:1c:5c:92:
         00:8d:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:29 2025 by rpki-client