Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a80849d-ba61-3aaf-a564-b874ed943f6d.roa
File:                     5a80849d-ba61-3aaf-a564-b874ed943f6d.roa (raw, json)
Hash identifier:          R4/8ZaZhp2N4+Ja3s+0DuGuY6XWKepQXE9ASudJ03Uc=
Subject key identifier:   B7:6F:8E:CE:62:46:93:90:64:4F:77:A4:A0:29:F2:16:24:63:B2:FB
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285848494566CE6FE5C0F5D6C59A00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a80849d-ba61-3aaf-a564-b874ed943f6d.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     36231
IP address blocks:        64.52.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:66:ce:6f:e5:c0:f5:d6:c5:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=9d281d13-977c-44ab-a260-cbcaae0834c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:21:76:0f:f8:b8:1b:5b:8b:46:8e:7a:8c:
                    d8:32:70:fe:3d:2c:d5:90:9e:52:7c:0b:63:ee:d3:
                    71:ae:88:b9:40:63:fd:45:3c:d4:ed:02:a9:7b:09:
                    23:ab:84:f7:c4:16:7e:1f:4c:09:51:a5:8e:a6:4b:
                    4f:c0:41:ba:10:bb:c1:77:d7:37:de:37:46:c1:96:
                    07:5d:6a:e5:2a:06:ff:41:a5:93:ac:e2:b3:41:5e:
                    85:fe:10:39:d2:94:fe:ed:3a:9e:e0:5b:04:7c:54:
                    5a:ce:1b:ac:da:10:c0:4b:c6:d5:08:71:92:91:25:
                    a6:18:aa:0f:ef:ad:0e:a5:98:4c:92:f3:b5:7a:67:
                    93:b1:19:86:de:39:85:28:a7:61:e4:40:07:cf:e7:
                    fc:ae:f9:b4:e8:44:bc:55:0d:9c:aa:e6:44:ea:53:
                    e1:a4:e8:f0:f4:86:65:50:48:90:74:21:77:2d:ca:
                    12:65:ce:6a:28:5e:95:42:02:5e:2b:8d:d9:58:00:
                    e8:c2:28:38:43:34:e3:d2:2a:3b:8f:21:57:b0:a1:
                    aa:bb:a0:28:65:98:f1:58:c3:39:95:a7:54:81:c5:
                    9e:cb:d5:b9:d2:69:ad:b8:d3:6c:fb:66:1a:4f:ab:
                    7e:1d:48:01:df:7b:39:86:d1:bf:35:be:e0:bd:27:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6F:8E:CE:62:46:93:90:64:4F:77:A4:A0:29:F2:16:24:63:B2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5a80849d-ba61-3aaf-a564-b874ed943f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:78:a4:9f:6a:9b:23:54:49:a7:d3:08:ea:6e:c7:ba:c4:
         f6:1c:0e:80:b9:94:95:fd:d7:a2:0b:93:eb:5e:b4:07:55:f1:
         0c:30:2c:ea:9f:91:63:43:69:f9:1d:ec:03:c1:a4:8a:9e:8b:
         6a:ea:6c:17:be:a0:33:4e:ec:8b:77:d0:6d:fa:93:ee:f1:2a:
         9d:8f:d7:39:57:62:bd:f2:69:8f:cc:06:52:bd:1e:8e:0b:15:
         b9:e1:03:dc:1b:5d:7d:2b:94:66:1e:d0:3a:41:95:73:7d:d1:
         80:23:bd:dd:c2:23:ae:a6:da:f7:ce:49:bf:f0:17:75:04:ef:
         5e:d0:dd:37:6c:d0:84:8e:ce:a1:40:2a:b7:a6:25:8e:9f:98:
         c5:bb:fc:8d:b9:cd:73:25:da:48:b5:38:94:57:c9:eb:a8:b5:
         04:fd:49:9f:b2:9e:5c:90:5d:f9:37:e4:80:45:4f:9e:af:b5:
         62:0e:62:ae:18:04:d9:14:a4:a0:0b:bd:a3:f7:92:2c:db:5d:
         df:bc:56:4a:4b:f8:cb:df:d9:d6:8d:f4:42:5c:cd:aa:d0:a4:
         d6:52:d1:f8:f0:34:57:1e:89:ac:4e:fb:6b:6e:2e:37:fa:c7:
         ec:e5:06:3c:6d:ea:72:d3:80:b9:89:25:65:75:15:3f:a4:b0:
         de:7c:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:09 2025 by rpki-client