Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa
File:                     f7377074-79a9-3c65-893e-e173c83478cf.roa (raw, json)
Hash identifier:          c2SzyPA/l14JyOeQMzrijpl1eYn5zD1ls+DVKJRc+20=
Subject key identifier:   63:45:14:0E:EC:B6:FD:C6:F0:7B:6C:43:11:C3:CD:89:FC:66:80:65
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F43285849393E7D934C57D0CF02294C40
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     13213
IP address blocks:        209.236.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7d:93:4c:57:d0:cf:02:29:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=1539bc17-eed0-4301-a991-73a8e44a5306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:99:be:c2:be:b2:67:ee:46:5f:f2:67:f9:
                    6e:5b:63:8c:33:36:ea:2a:22:ed:de:d4:5a:48:88:
                    69:00:9a:79:cd:9f:84:f7:ba:1f:6f:22:f5:a3:aa:
                    6f:09:d0:bf:af:1b:60:83:12:b7:9a:3a:35:ca:63:
                    3d:2e:04:fd:82:41:ed:11:bf:18:80:32:53:72:13:
                    37:3b:20:0e:c1:30:a9:f6:a5:cc:c0:39:d6:de:21:
                    43:af:5e:ff:4f:51:e7:c2:80:df:95:e7:57:79:b4:
                    04:91:d3:bc:7a:71:b8:5c:27:c0:98:a8:4b:80:9d:
                    e0:f1:e0:78:74:46:da:80:b0:7d:24:ee:b4:36:bf:
                    ab:cc:37:0a:eb:e8:9b:23:98:d4:82:97:b3:21:48:
                    00:b3:56:4a:6a:af:21:20:9f:10:93:44:49:10:b9:
                    ef:71:a1:4a:a7:db:25:33:12:12:aa:bc:ee:eb:b5:
                    a7:c1:39:66:9a:a7:6c:3f:8c:85:43:c9:98:37:dd:
                    bd:c1:f2:aa:c5:ad:1a:06:66:90:13:d7:87:b1:93:
                    13:b4:da:5b:55:16:d0:36:cf:e5:fb:07:2a:43:0c:
                    31:95:8f:3d:df:b0:73:8e:7e:51:48:00:d8:cf:0c:
                    af:00:79:50:5f:ee:6b:3f:cb:dd:d6:9d:fc:86:a4:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:45:14:0E:EC:B6:FD:C6:F0:7B:6C:43:11:C3:CD:89:FC:66:80:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f7377074-79a9-3c65-893e-e173c83478cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:13:04:09:32:49:e3:fb:7a:9d:b1:a3:d6:d3:66:24:4e:
         1c:b8:a5:73:25:40:bb:15:8a:09:b6:84:f0:89:78:98:a5:89:
         b1:a9:74:7c:be:c9:92:84:df:ef:a7:83:5d:54:18:8c:46:60:
         fd:e1:70:68:19:15:58:dd:2e:c0:ef:b5:ef:7b:93:80:20:3b:
         1f:3c:ba:da:52:98:c4:a3:93:e9:69:15:78:d3:0e:fa:84:f7:
         50:68:70:36:fe:ed:7f:60:53:6e:c2:cb:a2:a2:60:c8:0a:6f:
         70:0e:b3:86:c9:63:23:52:a8:3b:2a:8a:28:56:f9:60:a4:a7:
         d1:c7:8a:6d:99:e4:85:90:09:c5:a3:c2:a3:c1:99:0b:77:f2:
         54:d6:29:53:eb:8f:f5:d6:33:c2:84:39:d9:08:9d:df:4e:52:
         5e:67:f8:1e:ac:27:c7:66:c5:c1:3b:c7:f5:29:14:34:d8:2d:
         cc:8c:3b:59:e3:50:ec:32:15:67:26:32:9f:8b:00:10:71:48:
         87:26:6b:fe:d0:e1:5d:a2:aa:b0:89:80:b6:5e:45:fb:ac:c9:
         6f:85:0b:30:6c:48:7f:ad:04:2d:07:17:6e:33:b6:45:df:a8:
         3c:b2:60:9a:74:ec:c3:04:62:e2:57:2b:c2:35:c6:18:ea:d7:
         4f:59:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:39:52 2025 by rpki-client