Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3986c84a-8621-3dc2-9503-62bec70c5631.roa
File:                     3986c84a-8621-3dc2-9503-62bec70c5631.roa (raw, json)
Hash identifier:          led/xvpEKOcDKQSF2+vdJ+MaEkWH76Dg6enbfmLXpQY=
Subject key identifier:   F1:EA:C5:3E:AD:61:51:FE:1C:A0:87:78:16:7C:FD:9A:1F:EA:4D:18
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858491D717DA969CE3C046B2293D8
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3986c84a-8621-3dc2-9503-62bec70c5631.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     23520
IP address blocks:        63.245.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7d:a9:69:ce:3c:04:6b:22:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=8be50c28-cf94-4a8d-b0b3-80de618a27f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:fb:ed:b3:be:97:26:33:9b:2a:ea:60:2c:
                    7d:c8:ed:42:59:52:3c:90:25:30:10:bf:79:5f:93:
                    8d:8b:00:1c:f1:6c:78:ef:ad:e8:42:b5:3e:64:50:
                    61:b9:3f:6a:a4:c4:fd:47:95:64:81:4d:cf:03:28:
                    5c:2d:12:7d:69:3d:4d:94:be:2c:92:3d:a8:99:a1:
                    ef:d5:06:14:45:b6:72:d5:c9:96:aa:6f:41:e2:38:
                    d0:26:01:d5:92:eb:e6:16:b3:1a:60:6a:4e:1c:b8:
                    76:59:59:18:0a:a0:58:76:30:2d:0d:10:ab:cd:0a:
                    9b:f6:37:7f:f0:de:4d:c5:f8:42:33:e8:93:4a:00:
                    38:46:2b:b9:b3:ce:3a:09:b5:23:8d:0e:2d:f8:4f:
                    b6:9c:3a:58:5b:b9:ed:20:03:f9:f3:3e:de:4e:4b:
                    87:21:e8:fa:4b:e1:1b:e2:72:be:db:95:11:3d:c3:
                    b0:46:b6:4d:3e:49:ea:5d:0a:6c:8a:a5:5b:2e:89:
                    c1:2c:13:72:4f:e7:1c:23:69:1e:e6:08:cb:6b:85:
                    26:8b:55:91:9a:ca:7b:16:69:24:49:79:23:52:8e:
                    23:2a:e4:fe:58:21:0b:dc:c1:9e:22:66:31:6e:fa:
                    eb:c3:aa:14:f9:a8:fd:e8:ff:47:70:b5:f0:9e:40:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EA:C5:3E:AD:61:51:FE:1C:A0:87:78:16:7C:FD:9A:1F:EA:4D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3986c84a-8621-3dc2-9503-62bec70c5631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:56:96:94:8d:62:10:94:c9:c1:d2:54:04:eb:26:42:06:ab:
         3d:7f:30:85:3c:fd:d4:28:a5:e4:0a:15:c8:9f:0c:b6:b6:ad:
         55:76:31:ce:be:8f:69:67:34:70:7c:a1:08:0d:31:e6:7a:a2:
         42:4d:ca:43:da:63:27:db:59:e7:a3:f7:e0:f5:ee:4e:be:b2:
         01:06:5a:db:a1:03:2d:33:eb:1c:f8:f3:5d:49:af:b2:0d:46:
         01:86:94:dc:74:f6:4d:29:dd:78:35:2e:18:60:e4:92:fe:86:
         00:7d:c0:16:22:cb:0b:30:63:e4:74:cf:bb:a0:ed:4f:77:93:
         84:1c:6b:e7:4b:0b:18:11:17:3f:01:64:8d:07:a9:f5:0e:f4:
         19:ed:c6:30:2c:6c:61:46:b2:c7:d1:bc:cf:0a:f7:a1:03:62:
         6a:7b:cb:94:69:e4:d6:9c:6f:06:41:0e:07:7c:cc:9c:c6:5c:
         da:1a:cf:fb:94:3a:1e:13:af:05:a0:62:6e:57:00:37:95:7f:
         6c:ad:71:b9:cb:3d:e1:19:0c:99:8e:f8:64:78:d1:a1:cd:92:
         46:66:af:c2:f6:2b:93:82:ac:b6:b2:7e:81:6e:69:e0:03:fb:
         d0:de:1e:3c:8e:0a:d4:7e:f9:fe:6e:5e:03:d7:76:86:3a:cc:
         08:e2:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:05 2025 by rpki-client