Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/87c41cb4-14de-3903-b463-5762562f6dd6.roa
File:                     87c41cb4-14de-3903-b463-5762562f6dd6.roa (raw, json)
Hash identifier:          yt3FW+FUaH1r8UT/dn9g77nO8hLQjPx6oNxfvvB+qn0=
Subject key identifier:   61:C0:78:32:AB:6F:6F:3F:1B:AF:58:E1:95:55:BB:50:15:54:3A:B7
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858491D717D9D81B525BF138B7800
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/87c41cb4-14de-3903-b463-5762562f6dd6.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     23520
IP address blocks:        63.245.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7d:9d:81:b5:25:bf:13:8b:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=baa7641b-e99a-43d3-aad6-aa48576e9fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:9e:c4:ba:db:db:3e:dc:28:1f:5e:4e:55:
                    04:da:70:da:1f:77:58:7b:38:4d:1a:1c:d2:92:b5:
                    75:66:a5:f7:df:13:f1:8a:f1:dd:b5:1a:2b:f7:1f:
                    37:8b:8b:dd:e4:4b:30:e8:55:20:2c:a1:65:ac:bf:
                    f7:13:56:77:fb:30:80:97:2c:ce:9f:43:56:63:ae:
                    89:16:eb:ae:a0:69:d0:b1:a1:32:16:7f:70:0a:2e:
                    82:42:ef:70:91:85:62:4d:9e:5c:33:65:8f:98:92:
                    14:10:de:0f:0d:a2:d9:f1:ff:aa:5e:bf:33:c4:87:
                    c2:78:b3:63:2b:b2:92:23:a2:5c:c7:d3:0d:8f:6f:
                    00:2a:f1:ae:28:3d:fd:5f:b7:11:fb:0a:f1:41:f3:
                    9e:8b:38:8a:e2:b6:96:1c:74:3a:d9:94:a1:67:7d:
                    2d:d5:19:92:ea:7e:ad:27:ad:bf:98:5f:1c:09:26:
                    0b:0c:61:75:5a:a7:c5:be:13:80:a2:24:d2:5a:a5:
                    a1:0d:70:84:06:11:63:2c:9b:a2:f3:06:e3:be:45:
                    cc:0d:ad:31:df:41:6a:8c:f3:99:52:10:4b:29:39:
                    8c:3f:cc:36:d5:e4:58:e7:3d:2d:52:e7:69:20:7d:
                    f2:c7:62:b7:b8:50:76:99:8e:b1:2e:dc:5f:3c:e2:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:78:32:AB:6F:6F:3F:1B:AF:58:E1:95:55:BB:50:15:54:3A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/87c41cb4-14de-3903-b463-5762562f6dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:49:e3:2f:1b:66:5d:ce:3d:f5:d1:94:bd:45:02:77:31:63:
         95:84:43:23:cb:70:a1:36:fa:cb:d1:be:90:f7:41:f1:20:65:
         7e:87:16:54:2e:fb:dc:80:78:65:d8:40:9f:71:d2:d6:8d:1d:
         7d:6e:c8:67:f0:c6:b5:4a:00:ae:e9:cc:57:21:67:25:b3:bd:
         bc:a1:70:19:d2:e9:27:b4:7f:71:1f:5f:d5:a5:e0:a7:17:6e:
         15:3b:e5:f0:9f:a2:50:b9:33:d4:81:83:16:08:ae:c1:e8:19:
         e0:7c:06:b6:9d:30:4c:77:bd:f2:08:39:66:51:9f:69:56:82:
         ad:bf:7f:33:29:47:77:89:13:1b:ed:6f:dc:79:cd:a6:7f:3e:
         be:42:70:b6:fc:cc:85:3b:6a:5b:ba:5d:c7:0b:f7:07:04:a4:
         6c:db:13:f9:5b:0b:24:a7:08:77:b8:41:df:5d:22:04:c1:ec:
         f3:d8:22:fc:02:f3:82:22:35:d9:96:44:19:df:29:bf:87:05:
         bd:c7:3a:03:3f:98:ac:1d:df:de:b5:da:65:1c:28:39:7f:85:
         32:5a:03:4e:74:db:17:73:7a:91:4f:07:97:5d:10:76:2e:00:
         22:18:fa:51:a4:10:fb:dd:7c:2d:d9:72:de:3d:ef:63:31:da:
         fb:a4:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:08 2025 by rpki-client