Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa
File:                     141291a2-0ed7-3337-b072-e0411a6bdf5c.roa (raw, json)
Hash identifier:          f0k5PMhiiZaoMhBSFmz2470kP+wjpfNfkEMgJPcwIfE=
Subject key identifier:   C5:CA:A7:F3:33:49:F8:5B:1E:72:C4:8F:BF:2E:56:B5:75:50:44:F3
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F432858487FB5DC7BF32CFAEBDC26B860
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     30029
IP address blocks:        64.137.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:dc:7b:f3:2c:fa:eb:dc:26:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=d561a86a-9fa0-4c9f-8100-a32d36980348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:81:dd:fe:eb:0e:f7:bc:1f:4e:38:c3:c7:
                    51:05:e1:87:02:81:8a:da:84:22:a2:ea:b8:7a:12:
                    5a:25:df:b2:40:0c:41:8d:09:c1:cd:4c:4c:2a:5d:
                    d9:ac:be:ef:4b:b8:59:ac:9a:ae:bb:10:b6:8a:b2:
                    0f:26:2e:a9:aa:da:52:10:e7:a7:82:2a:f6:9e:36:
                    f8:c2:6e:1a:82:a7:52:b3:1b:89:83:0d:0e:1c:d6:
                    fa:9c:c6:ca:f6:a7:b0:8a:87:5d:05:ef:cb:fb:7b:
                    94:ba:0d:b5:7c:9d:5b:67:7f:6d:af:b0:d6:5c:b7:
                    b0:2a:db:02:e2:bf:f3:6f:af:9b:00:2d:b0:b1:d7:
                    16:8c:6c:85:cd:3c:2d:16:74:40:de:c4:db:40:29:
                    53:30:20:85:b4:67:fb:a4:2d:47:b3:03:e1:29:2b:
                    53:87:e2:ee:7b:1e:52:b0:30:bb:e9:a2:85:8d:8a:
                    4c:5a:f3:34:f6:5c:c5:b7:5b:25:9d:12:10:e1:1c:
                    29:25:cd:3d:98:0e:17:ad:dc:c7:e5:21:98:54:98:
                    6e:df:e2:8e:d7:8a:c6:dc:18:52:5a:94:01:63:e9:
                    a2:00:23:b8:2d:0b:6c:1b:04:89:6f:4e:bd:da:b0:
                    2d:37:4f:e1:f3:f3:7d:74:ab:82:d1:e4:ad:be:31:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CA:A7:F3:33:49:F8:5B:1E:72:C4:8F:BF:2E:56:B5:75:50:44:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.137.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:53:14:41:ad:ec:4c:4f:74:90:48:56:34:7f:47:9d:64:
         55:3e:45:3e:eb:3d:ee:46:76:b3:8a:00:62:a2:54:f4:7c:c3:
         5b:8b:0f:b8:3b:81:11:84:f8:25:b2:6b:09:60:e2:5e:53:59:
         f1:ec:5c:2c:3d:58:b9:9d:a3:e0:3d:4a:4f:bc:69:a9:1d:6f:
         27:e8:b4:19:dd:ae:4e:f4:47:a5:89:9a:cb:4e:0c:fa:2a:03:
         ed:9f:f5:73:77:a1:b9:a8:ae:68:c2:56:b2:cd:a6:9d:e8:78:
         56:dd:17:fe:19:c9:bc:35:28:ee:f3:59:61:c8:05:9e:9e:4e:
         69:67:cd:5e:f3:8f:84:7b:48:4e:8a:5d:b1:11:65:a0:db:5b:
         b3:94:68:a9:32:57:ba:e5:24:4d:a6:0b:81:be:4d:03:a2:69:
         dd:60:15:1a:28:a6:a5:57:73:e9:03:a1:e3:4a:34:82:7b:a5:
         f1:ac:fa:e7:c5:dc:79:08:52:06:59:f1:35:a7:57:05:86:bc:
         d2:67:66:cb:f0:8f:d5:c1:8f:8e:33:c9:67:3d:20:ba:df:af:
         5a:7b:58:93:52:48:c3:07:c9:a0:26:f6:b6:ed:3f:16:1c:55:
         35:19:33:80:9f:c2:c6:ef:27:2e:0f:d8:8d:00:3e:0c:71:f4:
         5a:6d:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:34 2025 by rpki-client