Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
File:                     563e4146-93d5-346d-b331-7b58a7727771.roa (raw, json)
Hash identifier:          AF3nFfl0PQdcVnJTgZ4MRxF1vFdPkjikbKKyLrnnSn8=
Subject key identifier:   5C:C5:39:DF:83:F8:56:3F:28:AF:59:2C:BF:23:A9:7A:D3:24:37:AE
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F43285848EF616198B49535DC47814180
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     393238
IP address blocks:        162.253.44.0/22 maxlen: 24
                          192.154.14.0/23 maxlen: 24
                          192.199.180.0/22 maxlen: 24
                          192.236.0.0/24 maxlen: 24
                          199.10.4.0/22 maxlen: 24
                          199.188.64.0/22 maxlen: 24
                          199.189.228.0/22 maxlen: 24
                          205.143.47.0/24 maxlen: 24
                          207.191.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:61:98:b4:95:35:dc:47:81:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=a8417057-0927-43cf-b97d-2e880c8de8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:f7:ec:70:71:3c:a8:52:6f:87:f8:fd:92:
                    2b:71:39:ba:ac:d8:ea:48:a3:ff:b6:05:19:50:74:
                    f6:64:c3:f9:b9:31:43:05:0c:e8:e7:c5:f0:2c:0c:
                    54:2b:01:17:29:65:db:48:3b:ce:ce:36:25:9b:4c:
                    8b:a2:d6:b6:cb:9b:a3:c1:76:d6:d7:fa:67:75:96:
                    06:fd:b7:1f:a8:ae:25:46:66:87:3c:04:e8:b7:4e:
                    b5:17:bb:87:d3:9b:43:01:ea:5a:9e:c2:70:26:2d:
                    0b:4e:f2:5a:89:ac:f4:0d:42:6e:9f:bc:df:53:a9:
                    89:da:4c:e1:af:44:95:ed:20:e1:41:5a:3e:27:bd:
                    a6:be:5a:d6:9a:c6:d8:9b:ad:b4:fa:c3:0f:b1:dc:
                    41:4b:d7:e7:8d:da:ee:74:14:f5:76:b5:04:d2:fd:
                    c1:ec:46:93:56:e8:b7:5d:2f:5f:bb:cb:33:3d:53:
                    95:c4:94:40:1c:1f:b7:45:15:31:3d:c0:24:1e:e9:
                    3c:99:2e:82:6c:16:69:dd:d9:af:20:f2:f9:f3:1d:
                    24:26:bc:b6:10:c4:8e:13:8f:39:3f:87:b4:0d:ff:
                    16:e5:81:f3:3d:bb:45:1e:30:17:d1:35:e9:c1:d8:
                    8d:70:aa:c4:89:0f:c7:aa:93:86:9d:4c:1c:dd:85:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:39:DF:83:F8:56:3F:28:AF:59:2C:BF:23:A9:7A:D3:24:37:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.44.0/22
                  192.154.14.0/23
                  192.199.180.0/22
                  192.236.0.0/24
                  199.10.4.0/22
                  199.188.64.0/22
                  199.189.228.0/22
                  205.143.47.0/24
                  207.191.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:3f:ac:a7:06:87:c2:f6:b5:ca:16:36:5e:c7:81:96:6e:53:
         c4:7a:9c:0a:c2:a5:16:e9:7f:e4:fd:e1:11:77:82:3b:9c:1c:
         4b:df:e5:f4:75:a0:c7:ca:a7:41:4a:ff:ba:c9:d7:2b:67:c8:
         b5:46:57:28:90:ef:ba:97:55:da:a5:98:2f:46:3d:e0:7d:19:
         52:50:93:27:e4:4e:ac:6f:0a:1e:47:01:dc:fe:3e:44:51:bf:
         17:84:23:de:2a:74:46:b9:1d:6f:02:55:04:18:62:86:93:b8:
         34:f6:01:3f:e7:30:86:68:ac:84:3d:e6:fc:f1:d3:36:fa:55:
         1c:b4:97:e4:2b:39:3f:8a:09:b1:38:81:bc:9c:ea:2e:27:2b:
         67:12:a7:1a:53:14:a7:a6:52:ce:66:a8:0a:79:de:53:df:eb:
         20:b8:8e:43:ea:b3:2f:03:88:36:bf:24:2f:08:f6:39:df:9a:
         72:e3:be:7f:96:61:1e:64:7a:f9:cd:d2:b9:d9:b1:ee:6f:96:
         54:d5:3c:08:0e:77:38:04:4a:ca:3e:fd:4a:7f:d4:16:9f:7e:
         14:04:ff:71:05:74:88:96:6c:cd:6c:76:c0:6d:2d:00:fa:79:
         a4:5a:ef:8a:f7:7e:5a:f0:c2:90:41:36:26:43:5a:3e:9d:25:
         f2:c5:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:46 2025 by rpki-client