Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/69ec17af-8684-3f36-8ab8-61fd2481a2df.roa
File:                     69ec17af-8684-3f36-8ab8-61fd2481a2df.roa (raw, json)
Hash identifier:          L8ez+n0cH3shD3LWSvuE6W9MjcmcFYFGgHnIFzeDsHI=
Subject key identifier:   30:DA:2B:F9:1F:AB:E5:0E:5E:93:4D:2F:33:D0:6F:91:D9:B8:2E:E3
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584827C53FA1878ADA9A0F921200
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/69ec17af-8684-3f36-8ab8-61fd2481a2df.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     396998
IP address blocks:        64.52.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:3f:a1:87:8a:da:9a:0f:92:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=2eca99d2-4912-4a15-a1ee-d94de8d8a384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2a:ca:36:0a:d8:a2:ca:31:2e:31:cf:8d:80:
                    d8:4e:6d:a4:1b:52:ba:54:2e:09:79:b2:48:11:90:
                    1f:69:f0:10:0b:b5:f0:a8:79:6c:9f:b1:f6:18:7b:
                    a6:a6:06:4b:8e:d4:7a:d7:93:d4:27:2b:fd:2c:fb:
                    d7:57:29:b3:fb:68:38:a0:8d:83:fd:94:49:30:9a:
                    15:a7:7d:b7:a7:cf:5e:f6:8b:a8:d7:86:9d:2d:f1:
                    75:3a:12:91:58:05:1a:97:41:e0:28:6a:c0:4c:5d:
                    37:43:07:38:f7:ed:45:0b:7f:be:fd:5d:9a:80:3e:
                    e9:63:42:50:1a:8d:a1:8e:fa:4a:02:43:c5:81:8d:
                    4e:31:4b:96:3e:d7:e0:44:25:65:c5:9b:ff:60:a4:
                    e4:00:1a:08:42:5b:e5:ea:5e:3c:48:55:20:25:15:
                    b4:8c:61:5d:c4:e6:aa:c3:5c:a4:7c:b8:5e:63:87:
                    c4:21:2e:f9:1a:37:eb:26:15:f8:82:ea:72:ed:b7:
                    2b:1a:d7:f7:e9:50:72:e7:aa:81:69:78:da:04:74:
                    1b:3e:6f:5a:f5:3f:e5:58:9b:c1:6d:95:8a:bc:81:
                    01:60:c1:cb:df:bb:82:5c:58:c5:0a:0d:99:be:cc:
                    ac:f5:fc:0a:8a:16:f8:b4:83:bf:47:cf:86:de:73:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:2B:F9:1F:AB:E5:0E:5E:93:4D:2F:33:D0:6F:91:D9:B8:2E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/69ec17af-8684-3f36-8ab8-61fd2481a2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:33:4a:ce:18:8d:8c:05:43:16:58:4a:ae:91:60:a3:5b:
         81:5a:eb:4e:e8:8b:f2:40:4f:da:d1:a8:23:dc:1b:58:7e:8b:
         c6:b7:52:58:3a:23:5c:9d:4c:94:d5:c6:54:b6:ad:cc:31:28:
         cc:8a:c8:4e:62:81:db:d9:5b:c7:e1:2d:78:10:54:8b:97:6d:
         66:6e:bb:c8:76:d2:cc:f2:ba:49:4c:cc:23:ea:02:9c:73:72:
         6b:e4:29:c7:d9:30:72:81:7e:03:e0:2c:94:a8:f8:e3:b6:c2:
         00:2d:5e:6a:b3:95:69:11:09:17:c6:9c:12:4e:c9:d1:76:36:
         b5:51:11:0e:f2:ac:ba:20:bb:44:e5:ba:2d:54:69:4c:82:1b:
         b8:d4:35:b7:17:cf:70:bb:20:41:3b:2c:cd:66:86:b0:99:39:
         3c:ad:fa:c0:38:b6:35:fa:de:31:c2:2e:c8:19:98:62:61:55:
         f5:7b:bd:94:1e:65:1b:87:0c:d0:19:81:d9:0c:25:50:db:e2:
         12:a9:7d:81:10:41:59:25:97:7a:45:a9:cc:ef:ca:72:91:38:
         c9:48:06:96:b3:a9:d8:0f:d3:96:78:1e:ee:54:18:10:06:89:
         8f:1c:aa:47:3a:55:89:62:dd:f4:d5:09:b5:e6:a7:e2:57:35:
         05:c4:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:25:27 2025 by rpki-client