Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6140dcb5-8b3c-3b6f-8d66-bb2f57d1a49d.roa
File:                     6140dcb5-8b3c-3b6f-8d66-bb2f57d1a49d.roa (raw, json)
Hash identifier:          7ykyUmP9kk+T86d4u4kFFBEeFypSdeG7uZ0lCet0WvQ=
Subject key identifier:   A3:0B:97:06:92:74:20:07:C3:BB:30:AD:6D:84:BE:E2:20:DE:1D:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926D39E667D73DA95022480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6140dcb5-8b3c-3b6f-8d66-bb2f57d1a49d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     394330
IP address blocks:        64.62.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:d3:9e:66:7d:73:da:95:02:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=ca3cf776-f8c3-4440-93bd-c4a87abbe245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:7d:3c:a8:ce:f1:2c:01:8d:b5:84:b2:4f:
                    87:f2:26:65:d8:b5:86:12:49:d1:7e:87:19:93:b1:
                    8f:a9:e4:3f:b3:f6:48:16:42:a7:fb:3c:ba:be:b3:
                    2e:02:6d:2e:da:06:76:e0:78:2c:0e:58:31:7e:ab:
                    c4:9c:62:b9:bb:45:10:8a:ed:6a:f9:d2:45:2d:b5:
                    6b:8e:20:b4:5b:05:b2:8c:de:32:dc:cf:3f:83:48:
                    d0:d2:62:83:73:ea:0b:a1:0a:00:68:e0:87:d9:42:
                    2e:8f:d1:f6:9e:82:4e:1e:9e:d6:82:87:f4:a2:1f:
                    f6:b2:0f:62:c5:bf:91:7b:87:f0:d1:16:b3:7c:ad:
                    3e:32:64:0f:54:a7:5b:57:c9:4e:dd:30:e8:61:ac:
                    fe:ba:23:b6:27:c7:69:04:01:97:1d:c4:26:fe:52:
                    ef:6b:0b:22:78:53:d4:d9:5c:98:a2:33:7a:75:03:
                    41:96:97:06:78:1b:b1:16:a7:1a:fb:e0:d5:b4:88:
                    c1:1f:bd:34:9c:26:bf:41:5e:b3:cc:cf:d3:94:ec:
                    41:68:3d:f5:47:b4:d5:48:89:92:c9:e3:ff:41:6c:
                    af:21:db:fe:89:bc:b5:6e:cf:9e:eb:89:80:6a:67:
                    99:df:96:80:b9:97:15:75:51:ae:66:f7:ad:a3:32:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:97:06:92:74:20:07:C3:BB:30:AD:6D:84:BE:E2:20:DE:1D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6140dcb5-8b3c-3b6f-8d66-bb2f57d1a49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:89:a0:ca:21:b5:8d:44:5b:5f:af:8b:aa:e3:67:58:6b:
         56:3c:7c:0d:e3:04:ab:d4:02:6a:8a:c9:f5:6f:ae:d4:89:1e:
         33:c9:11:5d:44:32:fd:84:18:93:7e:91:45:81:f1:d0:a2:5d:
         a5:30:49:b5:72:03:6a:cf:08:bf:cb:e8:4d:e0:ba:67:e0:b5:
         b3:3c:67:bd:34:d0:36:67:9c:74:76:8f:e4:45:93:f2:30:91:
         3a:93:d9:39:57:90:a6:df:16:00:81:c3:4b:86:b2:85:99:3b:
         8e:1f:5a:75:f9:ff:f1:fb:4e:43:b0:76:77:fc:87:3a:9e:e6:
         24:5c:db:9c:85:73:4a:db:b7:73:f5:da:c4:4d:f3:73:5d:64:
         1f:17:9f:e6:4f:58:b8:73:54:a5:30:16:8e:ed:b6:0c:03:42:
         90:91:dc:32:96:ad:8a:14:cd:27:41:09:d1:a2:44:9e:26:04:
         8a:7a:b0:a7:eb:ca:3b:48:74:24:55:e7:cd:27:c4:7b:98:75:
         19:6a:75:b3:ca:9c:4c:0d:35:f4:ac:23:b9:08:69:8c:fd:c0:
         61:db:e7:0e:5d:b6:8c:ad:a1:fa:d6:f2:1f:ea:4e:b3:91:32:
         12:31:31:9a:1c:c4:b1:8d:00:c3:42:61:6e:19:b7:2f:07:64:
         c2:70:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:14 2025 by rpki-client