Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/4e0d19f2-b666-315c-808a-6e29ef7683ec.roa
File:                     4e0d19f2-b666-315c-808a-6e29ef7683ec.roa (raw, json)
Hash identifier:          4xyDWKBwlKk71Ou69Irtvw14C9dKUmgWGV8mIAXniww=
Subject key identifier:   59:40:5B:31:BB:3B:CA:BD:A0:0B:69:A7:0C:34:B7:66:5C:F0:EE:E4
Certificate issuer:       /CN=3923a777-f0da-4edf-8bcc-42b47f48310a
Certificate serial:       010D0C9F43285848E59BC9DBA36A9F0964BC0A00
Authority key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/4e0d19f2-b666-315c-808a-6e29ef7683ec.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        64.45.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c9:db:a3:6a:9f:09:64:bc:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3923a777-f0da-4edf-8bcc-42b47f48310a
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=f26348c9-8751-4afc-9887-2f2a91dd92cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a4:d5:92:14:d3:75:0f:21:79:48:31:5b:09:
                    25:1a:d4:69:f0:2b:d2:e1:b8:1f:fc:fa:d8:bd:08:
                    07:23:4c:22:df:d3:6e:e7:15:c5:29:34:a3:6f:d2:
                    ec:47:17:87:a7:65:96:26:6a:ad:0a:61:ac:77:a5:
                    1f:1d:52:a1:36:89:5a:52:12:b2:cb:59:2d:01:33:
                    e7:70:57:b0:c8:e2:8d:5a:db:dc:02:97:0b:85:f2:
                    70:38:3b:10:d5:26:2a:27:9d:a2:85:bd:6d:77:39:
                    90:6e:20:48:f7:82:a3:96:f6:4b:4b:d9:da:16:63:
                    6a:ff:5b:83:0c:16:15:6b:ab:08:ed:eb:f9:b8:27:
                    2e:91:ec:70:6d:36:a0:45:d9:47:82:dc:fc:8e:af:
                    e4:8b:32:23:c0:35:32:c4:7f:45:21:34:13:6e:a5:
                    82:5f:3f:94:bf:e7:97:8d:b2:62:83:30:58:74:36:
                    27:29:be:27:6a:e4:2a:de:84:64:26:05:54:cb:82:
                    93:fe:b7:5e:fc:c2:9e:b0:21:82:2c:04:2e:20:16:
                    a2:77:8b:74:75:22:0d:ae:b3:32:e6:24:fb:34:94:
                    82:0a:3c:32:bd:c7:25:7d:7e:71:c4:12:43:d9:a5:
                    f9:f2:ad:9a:dd:92:89:c2:02:b0:bd:a3:1d:eb:8b:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:5B:31:BB:3B:CA:BD:A0:0B:69:A7:0C:34:B7:66:5C:F0:EE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/4e0d19f2-b666-315c-808a-6e29ef7683ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:f8:6c:17:c2:22:08:1a:b2:6f:98:c5:13:66:1a:ce:29:
         cf:91:c4:14:ab:2e:35:61:5f:2a:8a:94:cb:ec:57:c6:1c:9b:
         31:20:d5:16:84:9e:8b:dc:01:03:6d:ee:16:c5:9c:e7:b9:e0:
         73:c9:20:f9:35:0e:b7:e3:58:90:ee:51:6b:70:de:2b:a7:7a:
         d9:f9:b2:65:25:39:09:9d:32:f4:e5:d3:64:ee:77:89:3a:6a:
         86:4d:b9:03:f5:d9:3d:74:af:b4:a2:eb:d9:6c:93:49:55:40:
         e2:b9:51:5f:9a:0a:61:f8:d3:cc:76:b4:f0:a6:f1:ca:36:22:
         bb:bc:26:c6:95:8b:0a:fd:35:17:44:17:5a:9d:5d:7a:a1:87:
         d6:cf:a4:73:cc:62:29:bf:dc:ff:82:10:b6:4d:ed:35:fc:4c:
         dd:87:d5:ab:79:c0:28:59:d1:1b:36:7a:65:c5:e9:01:e7:5d:
         1e:92:70:aa:12:cd:b7:c0:b1:45:4c:3c:12:68:06:cf:ef:f1:
         dd:c2:ba:fc:6c:94:ff:8c:37:7f:f1:b4:6f:84:ad:d2:be:a4:
         35:89:a8:70:a2:66:7d:45:0d:a3:77:27:68:37:b7:3f:f5:f4:
         78:b5:1d:1d:57:c4:4f:5e:b3:0a:67:86:15:a4:ee:1b:6b:4e:
         13:04:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:48 2025 by rpki-client