Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa
File:                     9e0430f2-a68a-3dcc-a04c-296c574cb422.roa (raw, json)
Hash identifier:          AOx4Pw2mCTBcsYg8Eo/fz6S0n7IB0tShGHfn3u4WALc=
Subject key identifier:   CB:7E:1B:78:6D:82:A4:67:6A:C0:69:AD:64:88:9D:F2:A9:BF:D9:3C
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584882808EA92A7E3841198D1380
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     396032
IP address blocks:        64.38.173.0/24 maxlen: 24
                          64.38.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8e:a9:2a:7e:38:41:19:8d:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=6223e81a-a3de-4ed2-bc4e-3d2afe7cc268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6d:5e:85:13:75:e8:3a:b2:a5:14:f9:d7:6b:
                    0e:65:1d:6a:75:82:f9:ac:a1:93:97:cb:b9:ab:c5:
                    0c:8d:36:1f:25:c1:01:ae:b9:ac:84:e1:dc:76:5e:
                    7f:d9:31:2f:bb:b6:22:11:0f:4a:e7:55:84:e8:87:
                    33:b9:68:d4:76:bc:8d:4b:45:b6:42:16:f0:7e:a5:
                    b7:af:4a:42:fc:79:d7:45:d3:8e:08:e3:f2:2a:f0:
                    12:e3:80:29:94:fc:8c:00:9e:ca:38:24:1e:e1:f1:
                    06:62:e7:7c:2c:03:81:2f:40:b1:48:4e:a4:d6:bb:
                    dd:95:a8:57:18:2f:47:ea:95:b4:36:ea:ea:e1:60:
                    2c:a2:f9:08:04:95:67:2a:48:2d:26:52:bd:cc:99:
                    30:f4:51:b7:1c:18:c9:04:83:6d:41:6f:5e:04:6e:
                    32:0c:65:ff:ec:68:f9:95:64:2a:c2:2a:f9:81:53:
                    63:8a:bf:26:18:a9:3b:8a:ce:d1:37:bf:1d:4a:d4:
                    e1:37:ce:4f:a2:ae:17:6f:d2:fa:40:fc:cb:1a:1f:
                    da:95:ef:96:88:e3:25:74:00:f1:93:0b:59:06:c5:
                    27:30:73:38:41:28:24:28:93:a6:95:3a:f2:bd:ba:
                    a2:d1:d0:41:87:5d:5f:d2:a5:be:14:c5:15:4a:ef:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7E:1B:78:6D:82:A4:67:6A:C0:69:AD:64:88:9D:F2:A9:BF:D9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/9e0430f2-a68a-3dcc-a04c-296c574cb422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.173.0/24
                  64.38.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:5d:78:09:bf:d2:44:9a:98:03:2d:8b:6b:53:f2:6b:d7:
         d2:9e:8c:7b:9f:d8:65:c2:07:51:40:3b:18:0e:a1:ec:bb:de:
         a1:83:72:2e:1a:02:e1:94:e0:e8:1e:5d:78:83:dd:56:86:7a:
         3f:13:f5:0b:10:19:79:fd:9a:f3:7f:58:f8:71:6e:fc:52:a3:
         e8:64:17:9e:97:52:0d:9a:c7:e4:a6:5a:fe:24:c8:08:0a:be:
         59:b7:cc:b5:a2:6b:68:ea:b6:14:e2:79:cd:0f:d2:5c:35:bc:
         99:c8:34:e5:eb:63:27:db:2f:fb:87:2c:2c:2a:2b:0f:45:90:
         c3:97:32:dc:e8:fb:28:76:0d:c8:0e:ce:00:c3:d3:50:b4:3b:
         e5:54:9e:15:bc:d0:84:da:e1:29:e5:2e:82:6e:eb:66:17:46:
         26:d6:f7:af:11:57:9d:8e:4d:7e:17:af:eb:de:28:20:91:75:
         cc:69:3a:2f:22:99:47:cd:59:50:09:2f:b3:fd:b6:bc:2b:38:
         4c:8c:bf:d4:55:88:33:cc:33:51:04:c9:a2:49:8d:30:13:95:
         03:8d:be:b3:9f:e3:43:9c:56:41:3e:ae:79:f2:24:a1:d6:41:
         d7:b7:5b:77:df:c5:ca:ad:c6:09:c1:fc:aa:ee:e2:10:ae:1d:
         12:7b:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:12 2025 by rpki-client