Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa
File:                     5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa (raw, json)
Hash identifier:          O8beR0+mIQGaZEVpDBll/DGH8kKZ432FtFst3wbDcjg=
Subject key identifier:   FE:C0:E9:95:E0:93:0A:18:25:E0:08:B9:EA:9A:91:B6:58:CF:34:24
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F43285848E16BD3E407997DB1B2CFB200
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     6653
IP address blocks:        64.17.16.0/20 maxlen: 24
                          66.118.192.0/19 maxlen: 24
                          68.64.208.0/20 maxlen: 24
                          74.112.16.0/22 maxlen: 24
                          199.7.152.0/22 maxlen: 24
                          204.10.24.0/22 maxlen: 24
                          205.201.192.0/19 maxlen: 24
                          206.124.0.0/19 maxlen: 24
                          208.72.80.0/22 maxlen: 24
                          216.98.192.0/20 maxlen: 24
                          216.241.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d3:e4:07:99:7d:b1:b2:cf:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=f941c435-a78a-43b1-9d6d-41df2d1604b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:eb:ad:36:48:49:93:58:88:23:74:b6:c6:
                    02:dc:b4:6d:d1:c2:ba:3f:b0:dc:ad:cf:c4:0e:1a:
                    51:2e:31:6f:e2:ee:de:f5:57:80:c5:d5:53:57:b0:
                    be:2a:20:42:5d:60:ac:99:21:62:d2:7c:6f:57:ea:
                    cf:c0:06:02:18:c2:b8:41:c2:ce:16:46:cd:fb:b2:
                    0a:50:23:eb:37:57:57:2a:b8:e3:b8:e3:59:63:d2:
                    43:1c:7d:98:71:f9:36:60:78:ec:ec:2b:18:92:b3:
                    ff:b5:78:01:ad:fb:7f:66:5e:95:79:9c:4c:4a:60:
                    37:2e:26:6b:37:95:6b:63:f1:6c:0b:34:fa:e5:48:
                    3c:73:18:cf:5e:ce:30:7d:56:e5:80:24:53:9b:48:
                    f2:37:b6:ae:f8:40:4c:bd:96:9f:3d:ed:69:e6:18:
                    7c:a7:8a:27:e6:df:f9:d3:3b:ad:c7:f8:ee:c7:a3:
                    7f:f5:01:cf:ad:8f:8a:d6:16:67:6a:f7:99:40:8e:
                    54:37:32:6d:26:d1:ae:9f:83:4a:5b:59:b4:8a:32:
                    29:df:27:f1:77:34:e5:dc:7d:5b:09:d2:a4:5d:ba:
                    5a:ea:9e:38:c5:f1:fd:34:a0:01:fd:fe:08:76:cf:
                    98:fc:5c:5c:3d:79:02:4a:35:66:f9:b8:dd:96:e6:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C0:E9:95:E0:93:0A:18:25:E0:08:B9:EA:9A:91:B6:58:CF:34:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.16.0/20
                  66.118.192.0/19
                  68.64.208.0/20
                  74.112.16.0/22
                  199.7.152.0/22
                  204.10.24.0/22
                  205.201.192.0/19
                  206.124.0.0/19
                  208.72.80.0/22
                  216.98.192.0/20
                  216.241.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:f8:56:8a:11:e5:31:4d:ad:f7:27:2b:fe:f9:90:82:86:
         20:07:11:ee:2e:97:0d:9f:9f:21:dd:db:91:23:b4:09:76:2d:
         24:69:78:b5:5a:49:06:b1:34:ea:9e:79:8e:59:e1:48:62:cd:
         25:2b:7f:09:cf:bf:2e:52:8a:e2:03:b3:5d:e8:6a:a5:f7:91:
         a4:0f:6c:c8:88:7e:67:fc:de:c5:3f:80:00:55:1a:d7:f3:49:
         ec:1d:e4:95:af:a3:af:b0:fa:16:2d:ca:21:fa:57:04:f2:57:
         59:44:a4:34:2f:57:d1:2a:75:05:2f:27:ce:24:d7:6a:d6:e0:
         d9:55:5a:cd:a3:4f:54:ac:d5:bd:9c:65:cb:ca:eb:72:fe:a5:
         01:82:f0:73:89:07:cc:37:db:6d:79:d8:35:85:d6:34:8a:8b:
         6a:6c:e9:5f:0d:3f:a8:bf:8b:82:dc:1a:c3:cb:1a:5d:77:61:
         bd:09:30:7e:bf:5f:98:2d:26:ca:30:f5:de:aa:2d:a6:8a:aa:
         b0:5d:dc:71:49:dd:08:71:60:c9:73:9f:eb:68:63:3d:0c:4a:
         b5:24:5a:61:e0:58:ab:fc:93:20:f2:b1:c2:da:ae:b0:ed:99:
         11:c5:3f:c6:1f:11:63:7a:b0:cb:b1:91:d7:2b:7b:a4:aa:62:
         00:7f:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:21:14 2025 by rpki-client