Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa
File:                     ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa (raw, json)
Hash identifier:          ltM4cJaiDR/xkmfVQI5yrOCm0f8J6exTU1bDYQ69OCM=
Subject key identifier:   BC:18:42:2A:2C:AB:83:FC:1E:0B:49:40:95:24:1C:27:E5:CB:00:99
Certificate issuer:       /CN=9e246efa-84c5-416a-bc6c-a7163432845f
Certificate serial:       010D0C9F43285848222FEB9F1A218F854A5A8A80
Authority key identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     2914
IP address blocks:        64.93.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:eb:9f:1a:21:8f:85:4a:5a:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e246efa-84c5-416a-bc6c-a7163432845f
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=ef0d76f2-2862-4a64-bb0f-893c62546964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:39:86:16:59:e9:15:b7:b2:8e:c3:b3:34:
                    1d:40:1f:ad:d5:da:ea:fa:e4:02:8a:63:45:6b:f1:
                    64:39:48:0a:71:45:66:8a:36:d9:15:f6:86:56:b8:
                    1c:dd:42:48:25:16:b4:bc:08:52:eb:17:1a:8b:7a:
                    5f:85:48:13:d9:2e:62:7e:e4:74:5b:73:60:c4:98:
                    c6:f4:9b:5a:7a:8b:20:40:65:dd:c0:c5:f9:a6:e9:
                    97:15:41:75:1d:ce:a2:6e:99:42:78:a2:ac:28:40:
                    87:bf:54:ab:32:9c:b7:6b:1e:28:33:fa:3f:a6:58:
                    3a:b3:ab:28:48:06:7b:70:db:60:13:0f:8a:9a:76:
                    67:bc:fb:82:81:be:2b:2b:0e:5b:ff:47:a0:3d:33:
                    64:b5:d4:8d:64:c1:86:8f:50:e4:3d:8c:fc:b5:5f:
                    d5:05:7d:e8:92:c6:0d:cc:b1:6d:93:a5:dd:e3:eb:
                    dc:24:dd:fc:69:68:e7:d6:ae:57:65:b7:f8:65:52:
                    62:b2:74:3b:a2:a4:3b:fd:fe:7e:fe:e3:8a:e2:5f:
                    fd:5c:2b:6c:ca:6f:3c:1c:d5:7a:bb:f8:0f:55:c6:
                    43:17:c5:b9:d9:11:5f:94:d3:92:5c:c5:3c:d0:d4:
                    cb:43:2a:b7:ff:41:63:23:1d:77:e8:29:af:b3:40:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:18:42:2A:2C:AB:83:FC:1E:0B:49:40:95:24:1C:27:E5:CB:00:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/ba1690c0-ccdd-31ed-a8d6-9fd805ea0c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:41:39:8c:2e:78:5d:bf:a4:65:fc:0f:7d:b9:40:ed:14:5d:
         ae:5f:61:c9:26:10:7e:84:e5:a5:49:0b:73:0c:d6:be:67:1b:
         64:b7:23:42:9a:8d:82:96:8b:99:bd:4e:7b:cc:b6:1f:60:82:
         54:dc:c4:e2:e4:75:07:09:a0:91:2a:42:3c:5a:e2:be:ac:1f:
         b5:ae:94:0a:50:36:12:d1:58:d4:4f:81:12:d9:c9:91:1b:93:
         d3:a3:56:93:eb:fc:ab:5b:3e:0e:36:c2:0d:35:93:2f:67:c0:
         cc:38:06:61:94:56:78:15:53:19:4e:34:2e:2b:29:5c:52:cc:
         9c:53:5c:9e:fe:b1:06:8a:df:8a:cb:e7:ad:44:63:65:f5:75:
         75:00:f3:99:bd:b5:87:ee:6a:75:ef:3b:57:2e:4f:6e:9e:a1:
         d8:55:bf:eb:c8:77:4c:a7:b7:2c:bb:24:52:71:5f:9a:6b:b2:
         2c:d9:e0:c0:e9:90:f0:74:06:ff:09:30:22:16:22:19:90:d4:
         5c:a4:7e:67:d6:46:06:2b:a8:5f:d7:8a:ca:6d:8b:6b:06:26:
         9d:37:cd:3c:10:fc:14:29:f1:92:3b:04:91:6d:79:a7:2d:34:
         11:61:43:a7:12:13:60:fe:8f:18:c6:ec:31:2f:8e:31:bb:c3:
         40:e5:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:38 2025 by rpki-client