Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/74657fe3-5fb7-3d26-9f68-00597b22ca6f.roa
File:                     74657fe3-5fb7-3d26-9f68-00597b22ca6f.roa (raw, json)
Hash identifier:          8mXghdy+ncCLzc8el47r0UOLJE0mHnRKoxROD52Jy24=
Subject key identifier:   12:B4:D9:E6:A8:4A:FC:78:31:A6:CB:95:71:41:38:6F:01:A3:D7:DA
Certificate issuer:       /CN=3923a777-f0da-4edf-8bcc-42b47f48310a
Certificate serial:       010D0C9F4328584819CFD438297F309293478200
Authority key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/74657fe3-5fb7-3d26-9f68-00597b22ca6f.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     7944
IP address blocks:        64.45.128.0/19 maxlen: 24
                          64.238.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d4:38:29:7f:30:92:93:47:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3923a777-f0da-4edf-8bcc-42b47f48310a
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=9b90509c-77b2-4886-a182-78eb60683a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:51:27:71:0a:1c:e9:b0:b9:56:a2:8f:74:
                    f7:47:a9:22:53:b6:f3:04:60:a8:bd:26:0a:34:68:
                    78:33:de:15:a0:4a:cf:7b:fc:37:f2:78:39:20:3f:
                    76:1d:4b:87:de:b5:5f:ce:e3:b5:c2:56:88:90:75:
                    78:99:48:cb:8f:64:98:31:8e:71:ca:73:db:37:f6:
                    56:73:87:94:8b:62:62:13:1d:78:84:c0:c7:1e:cb:
                    7a:0a:57:0e:d7:ab:bd:07:30:4b:c1:46:b8:2b:89:
                    b5:64:5b:bd:c3:79:f4:11:03:52:0e:f1:74:58:a1:
                    4f:61:46:ca:4d:d0:c6:e7:df:0a:89:76:d6:58:2e:
                    df:1f:1a:9f:9a:65:67:9f:42:e7:a5:fe:02:28:88:
                    ac:b4:49:29:73:41:a6:76:d2:ed:ff:9a:bc:5a:f3:
                    58:35:b6:2c:24:da:5d:b2:80:ef:31:f7:e4:05:31:
                    65:54:f2:31:38:93:4a:fd:e9:e2:4b:cd:25:03:47:
                    13:d4:bc:35:3a:1c:75:33:f5:12:f3:5c:6d:12:49:
                    66:d2:6f:58:cd:ff:25:5e:49:a5:32:42:23:e1:f8:
                    c3:85:ba:fc:6c:ba:72:ff:75:f4:42:8a:b8:d9:64:
                    44:32:60:f7:87:34:9c:fa:7a:15:eb:6c:97:a0:0c:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B4:D9:E6:A8:4A:FC:78:31:A6:CB:95:71:41:38:6F:01:A3:D7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/74657fe3-5fb7-3d26-9f68-00597b22ca6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.128.0/19
                  64.238.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:0a:6f:d8:95:22:47:24:36:10:b8:64:d7:c9:25:1e:54:
         c1:86:18:c0:1d:6a:a0:75:21:9b:9b:ec:ff:83:06:96:0a:9b:
         90:59:98:14:27:45:4e:f1:b4:9b:9b:5b:99:94:f4:72:6b:a6:
         12:30:8f:6f:a8:9a:f5:5c:14:cb:0a:0c:40:90:63:82:56:b4:
         8e:d9:36:bf:25:e6:2a:d5:25:80:6a:ce:c0:7f:7e:c7:5d:14:
         fa:a7:78:ac:b2:f3:22:ff:06:29:85:0c:87:5e:15:a8:98:99:
         40:31:99:f0:60:66:cc:24:6b:b7:8d:cd:0d:58:cb:55:d6:1b:
         54:de:18:18:b7:18:4e:36:fc:f5:92:df:83:7d:f4:59:11:5d:
         24:6b:f5:0c:9b:53:48:41:f8:0f:c5:ff:af:34:88:1d:3e:32:
         32:a4:c2:76:95:56:45:ba:cb:cc:c6:c4:39:88:61:ad:82:89:
         18:9d:c9:74:6f:ea:24:d9:bd:74:a6:ba:89:b4:81:50:03:fe:
         1e:0f:50:1f:2e:9f:7b:9e:d9:73:e2:fd:ba:67:93:7c:1e:b4:
         9a:c5:d7:39:12:e3:9b:b3:21:54:80:72:07:fe:f0:ff:a7:f8:
         39:e1:55:28:9c:56:c2:bb:24:69:70:b6:cc:0a:dd:c5:1a:bb:
         1b:76:bd:ca
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgZz9Q4KX8wkpNHggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkyM2E3NzctZjBkYS00ZWRmLThiY2MtNDJiNDdmNDgz
MTBhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
OWI5MDUwOWMtNzdiMi00ODg2LWExODItNzhlYjYwNjgzYTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRJRJ3EKHOmwuVaij3T3R6kiU7bzBGCovSYK
NGh4M94VoErPe/w38ng5ID92HUuH3rVfzuO1wlaIkHV4mUjLj2SYMY5xynPbN/ZW
c4eUi2JiEx14hMDHHst6ClcO16u9BzBLwUa4K4m1ZFu9w3n0EQNSDvF0WKFPYUbK
TdDG598KiXbWWC7fHxqfmmVnn0Lnpf4CKIistEkpc0GmdtLt/5q8WvNYNbYsJNpd
soDvMffkBTFlVPIxOJNK/eniS80lA0cT1Lw1Ohx1M/US81xtEklm0m9Yzf8lXkml
MkIj4fjDhbr8bLpy/3X0Qoq42WREMmD3hzSc+noV62yXoAy8fwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBK02eaoSvx4MabLlXFBOG8Bo9faMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOTIz
YTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0ODMxMGEvNzQ2NTdmZTMtNWZiNy0z
ZDI2LTlmNjgtMDA1OTdiMjJjYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzkyM2E3NzctZjBkYS00ZWRmLThi
Y2MtNDJiNDdmNDgzMTBhLzM5MjNhNzc3LWYwZGEtNGVkZi04YmNjLTQyYjQ3ZjQ4
MzEwYS5jcmwwHwYDVR0jBBgwFoAU4qmiGRwAkBodfc738kAtPmeJINkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0
N2Y0ODMxMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFQC2AAwQE
QO4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALYWCm/YlSJHJDYQuGTXySUeVMGGGMAdaqB1IZub7P+DBpYK
m5BZmBQnRU7xtJubW5mU9HJrphIwj2+omvVcFMsKDECQY4JWtI7ZNr8l5irVJYBq
zsB/fsddFPqneKyy8yL/BimFDIdeFaiYmUAxmfBgZswka7eNzQ1Yy1XWG1TeGBi3
GE42/PWS34N99FkRXSRr9QybU0hB+A/F/680iB0+MjKkwnaVVkW6y8zGxDmIYa2C
iRidyXRv6iTZvXSmuom0gVAD/h4PUB8un3ue2XPi/bpnk3wetJrF1zkS45uzIVSA
cgf+8P+n+DnhVSicVsK7JGlwtswK3cUauxt2vco=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:17 2025 by rpki-client