Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c5d45172-de46-338d-8466-e6580f1be25f.roa
File:                     c5d45172-de46-338d-8466-e6580f1be25f.roa (raw, json)
Hash identifier:          Dmy8QLADYtqPJzbwwXrqYsd+QzTrdZpGk5agGmliCOM=
Subject key identifier:   A8:69:7D:AC:73:3A:33:47:8E:9F:8D:EF:1D:10:3E:39:E5:BA:2F:AF
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848037B62BC2B3E2D3A40EC0900
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c5d45172-de46-338d-8466-e6580f1be25f.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11537
IP address blocks:        64.57.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:62:bc:2b:3e:2d:3a:40:ec:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=255a46ff-1396-4e46-9174-da3c0b0bff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bb:fb:44:cc:fb:ba:ae:40:6f:26:96:5a:25:
                    45:a8:2a:41:88:20:4b:86:7e:0e:96:e1:c3:ee:4c:
                    98:bc:c8:60:e8:5c:ae:45:2b:78:61:c5:b8:44:23:
                    77:94:8b:b9:b5:6f:df:99:0b:bb:5e:ef:e9:3e:ed:
                    cf:52:6c:b4:7f:8d:cc:79:aa:d8:47:53:23:b2:d6:
                    d2:1f:ea:10:b1:1d:77:1b:05:04:ac:03:ff:af:7d:
                    d7:04:93:95:82:ce:e2:46:61:f6:e3:88:cf:8a:38:
                    2d:33:67:af:51:06:cd:c9:7e:85:e8:ca:c2:08:9a:
                    ed:38:af:3c:97:8d:9c:71:ee:68:cf:31:eb:c4:ad:
                    32:1f:b1:05:36:4a:11:64:92:10:8c:1f:51:62:c0:
                    21:33:90:83:ee:68:ee:87:65:a2:28:43:49:22:99:
                    6f:74:9c:39:a6:9e:cf:fa:88:d7:40:61:a6:bb:cb:
                    67:f2:13:19:5e:fe:1d:2e:e5:21:b8:17:31:db:e5:
                    13:d0:b9:d8:cb:fe:6c:ea:ba:35:4d:63:41:47:17:
                    93:19:0b:e7:c7:9d:85:b6:0a:15:0a:06:0b:68:80:
                    99:98:68:57:61:f4:24:5a:fb:64:63:34:e4:17:2d:
                    dd:3b:94:67:5d:df:92:e1:ad:e8:67:02:4c:fe:a7:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:7D:AC:73:3A:33:47:8E:9F:8D:EF:1D:10:3E:39:E5:BA:2F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c5d45172-de46-338d-8466-e6580f1be25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:c6:89:9d:32:28:d5:d9:09:6b:23:5a:a5:4c:58:7d:47:
         89:64:aa:5a:76:40:c4:ee:67:dc:e3:44:1b:bf:6a:cb:7e:d4:
         4c:54:93:fb:ab:74:85:33:94:8a:7b:fe:85:9c:2c:30:5a:6c:
         3b:c5:b1:f0:45:01:65:b9:6b:d1:a5:95:f8:b7:68:fd:73:bf:
         50:72:64:b8:bc:e9:ca:0e:e2:85:f7:7d:bf:10:12:9c:23:59:
         68:6a:1b:24:0d:e4:ad:39:90:f4:d2:63:15:b4:90:e8:7a:5a:
         5c:86:b7:1d:3d:eb:a6:69:f7:b9:74:a5:ed:e2:83:20:b4:c9:
         20:dd:f5:b6:8c:73:d1:64:03:aa:75:cf:55:87:ea:ad:78:25:
         3a:29:b7:ab:29:49:7d:9a:eb:c0:94:45:3e:e5:be:51:75:48:
         f5:cd:2a:ea:07:22:6b:13:6b:94:16:a2:e7:de:4d:78:42:46:
         67:0e:e4:55:ce:40:1b:00:74:52:2f:d8:e7:1f:12:bc:87:6d:
         10:d4:1f:a7:4d:b4:87:01:a7:e2:ff:58:13:a7:7f:4b:8b:b3:
         98:27:d0:41:46:57:83:6f:a3:4f:50:99:59:a3:38:3c:f7:e0:
         1f:73:52:d8:e5:57:4e:bc:d3:7c:0e:a7:68:82:13:8a:d5:e9:
         ae:51:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:18:32 2025 by rpki-client