Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b426ea03-3c11-3b19-897a-31fb85245e54.roa
File:                     b426ea03-3c11-3b19-897a-31fb85245e54.roa (raw, json)
Hash identifier:          C6Outqz4QfkPHKZkhs7W+8VN/jtGuVTc+IrNTkgn1z0=
Subject key identifier:   1F:CF:1E:E4:C0:F0:6A:B4:9E:D6:7A:43:43:8F:1C:20:1B:0D:60:CC
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858491691C0245276710699235880
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b426ea03-3c11-3b19-897a-31fb85245e54.roa
Signing time:             Wed 05 Mar 2025 14:55:17 +0000
ROA not before:           Wed 05 Mar 2025 14:55:17 +0000
ROA not after:            Tue 03 Jun 2025 13:55:17 +0000
asID:                     63025
IP address blocks:        64.22.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:16:91:c0:24:52:76:71:06:99:23:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar  5 14:55:17 2025 GMT
            Not After : Jun  3 13:55:17 2025 GMT
        Subject: CN=a686ccea-c5e0-4bf1-8909-f992210d02ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:76:15:bc:43:95:71:97:71:b3:3c:87:a0:
                    40:10:a1:5c:fb:d5:47:51:2b:60:cf:f1:8c:d2:d5:
                    2b:9a:3f:bb:df:8c:37:13:d4:f2:80:2e:6d:ce:2d:
                    09:e9:37:fe:26:3e:03:a4:bd:d5:51:c5:fa:86:ee:
                    8f:cf:8e:52:a0:a6:5f:9f:85:af:ff:e3:0e:9a:09:
                    24:20:b1:1f:98:b4:a2:81:37:cf:d1:f8:5a:3c:3e:
                    9b:65:11:14:ee:08:87:7e:f8:a0:83:1b:43:07:52:
                    ad:43:ce:ee:e4:64:4e:fd:04:e5:71:8e:41:7c:6d:
                    8b:0e:d4:52:44:f1:4b:01:65:f4:e0:49:c0:65:6c:
                    a4:6c:fa:66:46:d4:b3:a2:e0:e9:82:8d:3b:c0:bc:
                    92:10:12:bd:66:03:77:7e:e5:e7:95:b8:a6:15:98:
                    f2:35:01:35:99:8b:3e:86:f4:0c:4a:03:f2:38:ba:
                    0a:5b:69:72:70:d7:19:d9:31:c9:3c:d7:fc:20:77:
                    3c:57:1c:7d:a5:62:41:8b:03:e0:40:d9:67:84:39:
                    b9:1f:d3:72:63:07:78:45:25:00:9d:02:73:32:cc:
                    ab:ed:8a:7e:a2:db:25:7b:ae:e0:f5:2f:7b:a4:ad:
                    1e:5d:96:e4:eb:72:83:0a:ff:2e:ab:74:e6:cc:16:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:1E:E4:C0:F0:6A:B4:9E:D6:7A:43:43:8F:1C:20:1B:0D:60:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b426ea03-3c11-3b19-897a-31fb85245e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:81:9e:e6:bf:c5:cf:7a:40:f3:a4:90:26:4e:b0:2a:d6:
         5e:5c:de:5d:cb:d9:0e:33:83:53:af:10:a0:58:63:ad:8d:8e:
         e5:e1:d4:4f:e1:8c:e8:c0:b2:83:96:52:6d:d5:1b:2f:fe:f1:
         90:f1:29:35:c8:db:cc:7a:f3:1b:69:ca:44:54:5b:d4:99:55:
         2f:c1:84:ec:70:c6:5c:3c:a0:8a:38:23:b4:aa:39:98:0f:bb:
         66:b3:aa:50:64:fd:43:ed:6d:77:e5:37:69:31:79:9f:af:47:
         b4:42:a0:02:9c:61:ab:90:5c:14:79:c6:d2:b9:b7:b0:3c:2b:
         c2:2c:53:a7:27:4a:77:96:36:b4:cd:66:bc:56:95:93:c5:e5:
         60:11:f6:12:0c:60:a7:ff:99:b7:3b:69:30:0e:eb:af:c1:6a:
         62:a5:9c:f3:c5:06:41:78:88:9b:2b:90:c0:65:09:65:98:f6:
         f5:3e:3c:b4:e4:33:62:13:17:af:4c:ef:b5:32:ca:16:d3:52:
         23:f0:00:be:80:8a:b0:b2:da:a6:08:04:09:ba:d3:17:68:f6:
         f0:2c:10:df:a1:92:1b:83:ac:0c:b9:fb:9f:fd:9c:07:be:bd:
         89:26:82:ab:ee:db:23:50:e1:9b:8d:35:dc:77:a9:6f:d4:40:
         69:7f:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:05:09 2025 by rpki-client