Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/fd2c30e5-9c10-3797-b315-03c72157f94f.roa
File:                     fd2c30e5-9c10-3797-b315-03c72157f94f.roa (raw, json)
Hash identifier:          JGwI1IpIPqzydFacvW13a85tXrA6QHbX198Hi5Wk1vA=
Subject key identifier:   59:C0:AA:2D:28:44:90:E5:8C:BA:62:74:55:29:36:6B:D0:49:8E:3E
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858493C0926DEE86C74504F519700
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/fd2c30e5-9c10-3797-b315-03c72157f94f.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     133585
IP address blocks:        63.222.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:26:de:e8:6c:74:50:4f:51:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=21d8d75a-68b3-45f5-88f1-d1cefafdb981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:c1:76:0e:fb:62:0a:7c:e3:81:1c:5e:5c:
                    40:19:8f:50:98:8a:65:45:71:b3:a6:13:34:fc:2f:
                    98:21:f8:52:07:2c:57:86:a3:db:f5:40:be:29:a7:
                    d1:e6:51:af:33:f3:97:19:c8:8c:f0:5c:cc:9d:cb:
                    0a:61:57:06:ee:ee:38:a4:7c:39:7e:a7:9f:a7:18:
                    81:21:ad:ad:06:be:16:7b:0b:5e:87:2f:41:08:0e:
                    7f:71:88:69:ff:b7:a9:86:71:e9:0d:4c:28:b9:31:
                    de:65:27:00:ba:e0:68:8e:29:af:b6:03:10:3b:76:
                    a0:f0:cf:ec:74:17:65:8d:22:65:a9:2a:67:cd:69:
                    b1:e7:06:43:41:1b:52:66:35:b5:bc:2f:bd:d3:8c:
                    46:ae:53:73:ee:b1:66:2f:83:8c:d7:59:0a:48:17:
                    e9:d2:e7:00:23:11:f4:98:fe:df:88:dd:c9:18:e7:
                    f9:56:3a:8b:e2:7a:b9:b5:ba:e2:60:84:3f:55:1c:
                    31:70:0f:47:db:df:69:41:e9:42:53:8a:67:3a:bf:
                    78:75:2e:3b:65:d2:91:d4:e2:53:2a:dd:2a:1d:39:
                    b7:6c:3d:c0:7e:65:38:e2:f5:91:f5:cc:92:71:6e:
                    be:de:92:c8:a4:50:44:9b:e3:6b:f5:1e:39:62:4e:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:AA:2D:28:44:90:E5:8C:BA:62:74:55:29:36:6B:D0:49:8E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/fd2c30e5-9c10-3797-b315-03c72157f94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:0c:bc:8a:fc:c6:bc:2f:e0:e4:52:e8:24:27:f1:3a:73:
         5b:d8:c6:c5:36:8b:68:62:23:eb:0b:2a:6e:55:1c:15:16:54:
         8a:b7:9d:63:7a:d8:35:2d:1b:9e:e9:7e:09:8d:23:ab:23:1b:
         4b:f9:f4:d6:82:98:67:96:f4:ae:97:b2:58:b3:42:0c:41:2b:
         3f:9a:5d:c0:fc:29:7a:2a:58:67:b5:93:3c:64:62:1c:00:7e:
         5e:3f:75:bd:99:18:e1:73:57:7f:01:24:23:f1:f0:5d:59:5a:
         a1:0b:f4:bb:fc:57:85:c0:5a:17:02:a6:60:42:3e:d8:5c:2c:
         2b:6d:ef:99:bd:a0:61:8a:0d:7b:de:40:42:7d:5e:5c:ae:e3:
         d7:30:f0:1d:1b:3d:eb:56:28:c6:6a:c4:d5:6b:0e:30:f2:a7:
         62:36:a9:15:0b:64:ba:40:c3:cd:c6:c2:9b:62:b9:12:91:82:
         7e:4a:d4:37:a1:07:93:8d:e0:a7:57:21:2a:91:74:26:96:be:
         8a:b1:a0:84:32:7d:c6:ee:0d:28:9d:8d:48:66:82:8d:8f:81:
         86:6c:01:75:ba:00:6f:32:bd:3d:a5:27:ac:b5:a1:61:80:42:
         ca:0c:bd:9e:ca:49:29:22:36:dc:07:5f:3b:46:64:1b:82:1f:
         a9:fd:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:58 2025 by rpki-client