Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa
File:                     37bfb549-e50c-3d21-94d6-f38459157fbc.roa (raw, json)
Hash identifier:          kjndbS9xuvtgP/KBBZeffHSwN4tqacN/kWNQp/0Y7oE=
Subject key identifier:   90:5F:F2:E5:57:B2:9E:B2:69:CC:36:F0:3F:77:96:EA:E4:84:72:38
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F432858487FB5E03F4B9D791355C7DA80
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     23274
IP address blocks:        64.6.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e0:3f:4b:9d:79:13:55:c7:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=4d877c43-605b-4d7d-b45b-bcd9eeef9d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:78:5a:59:b9:ba:d9:39:30:db:08:a5:a7:
                    2d:92:a6:c9:e2:7f:6f:52:24:e1:03:26:46:90:51:
                    17:22:60:86:9d:b4:5c:03:16:88:d1:02:ba:29:2c:
                    6f:43:c4:34:f8:c1:b3:d7:11:a3:d8:44:d9:b8:ad:
                    de:52:c6:7e:c0:e2:0b:60:32:ce:53:c5:02:c3:9a:
                    6e:ce:a8:62:bb:e5:2f:9c:a2:a7:1c:f5:ac:76:6f:
                    f9:90:44:d9:b7:7c:c0:54:d4:53:b6:f0:24:d0:46:
                    ce:31:04:68:a6:e1:c1:15:a6:9b:34:6d:e3:28:3c:
                    5d:a4:55:8a:21:b4:68:d1:55:45:60:b1:58:e6:83:
                    35:e2:8a:c7:2f:5a:92:88:cd:0b:1e:f1:80:cf:92:
                    f5:81:05:08:30:c4:ab:66:96:93:a7:11:1f:41:59:
                    14:ae:b7:71:a8:de:15:45:ed:98:11:25:bd:11:db:
                    be:88:64:91:29:b3:50:f7:04:33:c4:a7:5f:83:f7:
                    e5:bb:ea:0f:80:6f:2b:5c:a3:2b:d9:d5:4d:48:36:
                    7c:b6:a5:46:df:ed:50:2b:75:74:33:66:f2:fa:3e:
                    21:08:2c:5d:ab:87:18:69:1a:1b:1c:3d:97:3e:db:
                    75:1c:98:31:31:bd:f7:15:67:f7:10:89:2d:a2:3d:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5F:F2:E5:57:B2:9E:B2:69:CC:36:F0:3F:77:96:EA:E4:84:72:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/37bfb549-e50c-3d21-94d6-f38459157fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:df:7d:02:cd:d3:1e:8a:d7:16:0b:9e:38:63:7c:28:91:
         36:d4:ce:ce:d7:37:04:31:67:96:5a:aa:e8:43:95:4f:ba:02:
         b1:7c:5d:0f:ec:3f:3f:13:f7:e0:82:9a:52:83:3b:ac:4c:f7:
         ff:49:5e:8d:d0:6e:56:df:15:00:84:ad:64:56:4e:25:2d:50:
         b2:4c:18:87:1a:c2:49:0c:0e:ec:22:fa:22:2e:de:1c:6c:f3:
         72:1d:37:ad:7a:33:09:da:1f:89:93:b3:05:61:8d:ee:8e:e4:
         f6:e9:d0:08:dd:ab:b2:6c:7f:b0:ea:b3:b4:23:2d:b8:83:93:
         75:c1:12:11:52:c9:15:93:42:f0:7d:21:3d:d3:95:0c:2e:18:
         36:aa:40:81:a8:70:83:91:a5:47:8c:fb:9e:9b:2c:69:e1:c9:
         ee:c2:77:5a:8a:21:47:f7:93:f2:f1:ca:ed:e3:0b:60:93:10:
         b6:98:9b:43:2d:b4:55:46:73:89:72:2a:80:64:a2:20:37:73:
         85:20:b2:2f:62:93:cd:76:7d:d8:a8:07:20:8e:30:e5:83:0d:
         51:35:96:21:54:79:16:53:02:e4:74:a4:7b:6a:35:2f:2f:3d:
         18:20:fd:c7:a6:45:d1:f6:9c:9c:02:27:c1:cd:37:81:9b:2b:
         33:b2:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----