Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
File:                     d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa (raw, json)
Hash identifier:          cd5nIW5JYJDJxaX7TGEH38E42q0xL53/azDLZAv3KH0=
Subject key identifier:   FA:4C:60:21:89:31:CF:5D:8C:31:89:1B:1C:42:46:C7:76:93:B1:3E
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858484515919E06C36B205A47D240
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     63363
IP address blocks:        64.96.5.0/24 maxlen: 24
                          2620:57:4005::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:91:9e:06:c3:6b:20:5a:47:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=d921f2eb-8ede-46d5-a662-476df5d0e66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:e9:c0:aa:d7:03:52:dc:9a:1a:c1:c8:9e:
                    b2:7f:ae:14:5e:99:7e:9a:ef:ea:66:b6:83:ab:4f:
                    d5:15:d1:d9:07:b3:5c:84:94:18:b6:02:a6:d1:b2:
                    4a:fd:8e:b1:ce:27:4e:9e:44:e7:91:ab:78:93:25:
                    b9:52:2e:34:79:dd:b7:cf:45:ce:2c:20:06:ba:a7:
                    b6:ac:bb:2c:e1:23:45:0a:05:61:8c:90:e6:27:19:
                    53:b8:75:7e:91:86:d6:d5:b9:d3:ed:b0:70:98:f2:
                    7a:c4:cf:04:40:ea:09:67:3b:02:f1:93:36:3d:26:
                    5a:7e:e2:29:b9:7b:fd:4e:ef:c8:79:37:ab:c8:fe:
                    2c:dd:a8:40:88:fd:43:0f:83:00:00:ec:84:63:a9:
                    ae:2f:35:76:16:84:82:20:4b:1b:02:7b:b6:6c:36:
                    06:91:f5:fc:57:2d:c3:ec:4d:0a:6a:7b:b0:f5:15:
                    49:2c:42:37:3e:c9:28:d4:d0:80:d4:27:66:7c:cb:
                    88:0d:7e:ab:37:30:30:a4:a1:7a:6e:95:a0:fe:a5:
                    f6:2d:39:70:1f:21:1e:e7:ee:e9:ac:d5:de:5d:2a:
                    bb:d5:6d:bb:b8:76:0e:9c:61:e0:b9:55:c0:21:41:
                    d8:5b:10:2c:21:cd:68:df:d3:a5:63:31:d2:24:fd:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:60:21:89:31:CF:5D:8C:31:89:1B:1C:42:46:C7:76:93:B1:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.5.0/24
                IPv6:
                  2620:57:4005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:bc:1e:0b:77:79:aa:85:8c:68:48:b8:70:9d:59:8c:f3:
         16:89:97:13:17:7d:81:9a:a3:42:80:4c:e4:f2:bf:d7:53:e6:
         b3:39:28:bd:b5:81:01:9e:4b:2c:1b:60:02:0a:3d:c9:31:72:
         3a:50:a1:c4:5e:03:24:47:28:3a:13:55:18:af:81:89:8b:5f:
         d9:42:c9:ea:ce:db:34:cf:2f:a0:75:20:6b:c6:22:a0:1b:3d:
         8b:93:19:87:47:1e:81:cf:d9:c2:81:41:76:b5:ae:ca:23:28:
         9b:7e:ac:4f:2e:97:ae:0b:d9:c6:e0:6c:ce:ce:5c:c7:41:f2:
         ee:24:ea:72:12:0b:4f:c1:14:e8:5d:56:9f:17:0b:b2:65:13:
         48:1b:e6:62:91:89:cb:3c:58:2c:00:05:6c:1f:88:47:d3:e5:
         6f:b7:30:27:6b:0c:6b:35:69:c8:9a:a4:8e:3b:19:af:4e:65:
         89:5d:c8:71:70:75:3a:53:5f:15:4b:51:fd:a7:62:8b:04:e0:
         24:e5:55:9f:e8:df:59:5c:37:c3:e0:58:48:6c:ee:b4:1a:f5:
         d4:1c:22:1a:e9:a2:84:56:b1:03:a8:44:32:b1:d7:f9:58:df:
         db:47:9b:4b:96:48:c8:9d:e4:9b:55:7a:73:e7:47:79:96:72:
         98:f4:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:14 2025 by rpki-client