Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/13982128-2714-36ec-82c7-9c556c9d884c.roa
File:                     13982128-2714-36ec-82c7-9c556c9d884c.roa (raw, json)
Hash identifier:          Lw/EvDJ6bbnHcKP4w7R39Ka0KbwJ9LL6+5slNOfjaBI=
Subject key identifier:   9C:25:A9:AF:6A:7D:62:6E:ED:BE:3D:9A:5A:8A:55:66:51:AD:F2:21
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584DAAE031B831C59D19D71E0780
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/13982128-2714-36ec-82c7-9c556c9d884c.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     398391
IP address blocks:        64.227.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:31:b8:31:c5:9d:19:d7:1e:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=fb74bfab-a263-4b46-b895-a8b7a6bd0e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b2:e3:77:bf:34:21:a9:63:1d:1b:a1:16:93:
                    89:cb:4c:c9:1e:e8:df:a0:86:6b:9e:c7:ad:30:7c:
                    4b:b6:2a:b9:7e:bb:0f:3d:90:f9:bd:d0:58:4c:e6:
                    cb:ce:dc:8e:40:39:6d:12:aa:36:24:bc:f6:9f:02:
                    eb:47:61:e6:d6:37:d5:a4:d8:6c:c4:af:c8:57:46:
                    91:bb:9f:33:e9:88:04:cb:55:89:11:9c:04:26:4c:
                    c9:37:b2:8b:00:1b:aa:19:85:c4:8d:eb:16:55:0c:
                    23:1a:97:44:51:23:92:61:2e:4a:96:c9:3c:b7:8d:
                    6c:d1:af:f5:bd:bb:11:c5:ea:c3:47:48:77:f8:c8:
                    49:f4:e8:9e:97:f1:2f:cf:ea:23:67:0a:b2:dc:f3:
                    73:cd:9b:62:3a:6b:2b:18:ad:19:94:af:e9:2c:93:
                    ad:3c:99:5e:02:17:0c:e6:bf:b9:59:95:d6:1c:63:
                    56:e2:93:62:98:f2:2c:11:df:a3:26:6a:86:7a:ae:
                    a3:a0:ef:4f:37:3e:75:56:f7:eb:f7:d6:99:b1:43:
                    ef:ee:0b:c9:75:fd:3c:34:f1:4b:28:e7:46:46:32:
                    25:34:91:b2:31:12:c0:96:c8:31:61:0b:d5:16:ad:
                    7e:89:b7:d6:53:0e:2c:12:fa:e8:a8:14:89:a5:09:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:A9:AF:6A:7D:62:6E:ED:BE:3D:9A:5A:8A:55:66:51:AD:F2:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/13982128-2714-36ec-82c7-9c556c9d884c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:bd:57:a9:42:d8:87:e1:a4:50:65:94:c1:df:08:11:be:
         f2:1b:c2:a9:4a:3a:d7:3f:16:0f:ec:6d:4c:59:c3:78:23:94:
         89:2a:54:a9:c8:9f:e1:6f:f3:fb:d5:01:ce:54:37:4e:63:b7:
         20:d9:97:08:a1:94:ca:4f:d3:5f:e3:e0:e4:8b:b6:9d:12:fb:
         1e:d9:cb:0d:a4:9b:eb:62:8b:77:3b:ff:d6:03:fd:d4:d1:01:
         bd:24:70:2f:68:95:33:df:14:16:e2:e3:e8:ef:d9:30:c8:72:
         9f:65:37:e3:59:ba:18:01:01:05:9e:a8:71:82:1f:2c:bb:42:
         39:1a:b9:c4:8b:08:dd:a5:62:c2:1f:04:48:d1:2c:ad:0c:b4:
         cb:3a:82:9b:13:13:3f:ec:ff:26:23:47:5c:0e:57:a1:7d:e6:
         dc:8c:92:0d:17:20:8c:41:2b:42:06:e4:9b:6e:1d:fe:4c:86:
         57:04:99:c3:4e:ea:ab:dc:e0:10:a7:2e:d1:d1:17:bc:a2:32:
         81:04:15:2d:70:9a:c6:18:fe:3e:08:80:c0:27:cc:47:c0:32:
         f4:f5:08:5b:c1:c8:c7:13:9c:fe:8a:ad:13:ff:99:8b:3c:6f:
         86:b8:3a:20:cb:01:2f:69:95:15:6e:bd:2f:05:e2:43:92:31:
         bb:92:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----