Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
File:                     fa603d7b-627f-38af-83f9-1ffef126c099.roa (raw, json)
Hash identifier:          Zlc74A6uP9bRl2lEKH29CxMjGNLBt0jvF9GUNILdeUs=
Subject key identifier:   EE:30:63:F4:A7:B7:54:01:A1:CF:2B:10:85:A2:74:21:B0:C3:57:54
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F432858483B500B45BFFACF9A788C8690
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     19201
IP address blocks:        64.127.160.0/19 maxlen: 24
                          66.171.0.0/20 maxlen: 24
                          170.62.0.0/19 maxlen: 24
                          198.183.172.0/24 maxlen: 24
                          199.30.120.0/21 maxlen: 24
                          199.127.220.0/22 maxlen: 24
                          199.187.248.0/21 maxlen: 24
                          199.201.76.0/22 maxlen: 24
                          208.54.160.0/20 maxlen: 24
                          2605:27c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0b:45:bf:fa:cf:9a:78:8c:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=2ba3a10c-3bea-4919-b1f7-f2b7aaa58e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:8d:48:e0:b2:33:f1:57:c8:fe:9c:37:fd:
                    26:5c:6c:4b:5a:20:8b:b0:04:94:2a:4d:f6:bb:6f:
                    17:7d:11:47:96:6a:96:f0:aa:7f:ba:ef:5e:0c:3a:
                    d2:b0:e0:1b:22:85:ed:e2:0e:6c:08:73:c3:c2:02:
                    03:b4:e8:51:d3:5b:7f:3e:01:c5:56:a7:7d:3b:d0:
                    80:23:eb:8b:b2:d2:67:20:14:69:27:d6:87:47:af:
                    bb:46:ab:15:cb:d4:9f:56:7d:5d:93:30:2a:14:33:
                    6d:26:00:40:95:62:72:65:b9:4d:0f:66:b4:c1:e4:
                    da:cd:79:2f:54:16:64:a0:10:95:11:eb:10:a1:21:
                    aa:86:36:32:b5:db:64:52:6f:4a:22:00:e1:7f:77:
                    9f:bb:11:83:9d:d7:b4:4b:c5:88:9a:75:06:28:4b:
                    5f:27:e6:d5:02:dc:d6:f7:16:fb:03:d3:06:f7:5c:
                    30:b6:f2:1e:6a:fb:c2:59:27:d6:d5:65:a1:7a:82:
                    2e:7a:23:0e:cb:1d:66:69:c8:ec:65:52:bb:1f:4d:
                    6f:4c:b6:20:e7:c3:b6:7a:df:5a:67:aa:f6:e9:8d:
                    ad:f1:f3:ee:33:90:92:d5:37:02:c2:64:2e:d9:0c:
                    c9:63:72:6f:fe:73:f5:96:46:08:19:3c:26:63:19:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:30:63:F4:A7:B7:54:01:A1:CF:2B:10:85:A2:74:21:B0:C3:57:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.160.0/19
                  66.171.0.0/20
                  170.62.0.0/19
                  198.183.172.0/24
                  199.30.120.0/21
                  199.127.220.0/22
                  199.187.248.0/21
                  199.201.76.0/22
                  208.54.160.0/20
                IPv6:
                  2605:27c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:04:4e:ac:6b:66:9e:0d:11:8f:3a:92:8e:09:fb:94:3b:18:
         9e:e0:6e:5d:51:ca:f4:a9:ab:78:60:70:fa:4a:ab:38:34:07:
         46:82:b9:ae:26:db:da:10:e3:99:a3:83:02:81:46:4f:e3:dc:
         5a:06:76:12:ea:73:38:3d:89:20:7a:b5:e5:6e:4e:62:87:55:
         a2:cf:8b:7d:56:42:6d:a2:a4:11:19:65:b6:97:3f:09:74:8c:
         e7:6f:d7:0c:7b:28:9b:74:05:73:d6:44:9c:dc:73:b7:90:c7:
         c1:c9:55:66:66:d5:05:c4:84:33:ff:2e:06:91:35:89:45:0a:
         27:49:81:f1:aa:48:db:b8:68:b6:3e:6b:c9:c5:01:7a:eb:3e:
         24:ba:f0:45:cb:e5:51:ec:6e:f1:5b:45:8a:3b:cb:03:6c:ec:
         06:b4:cf:1e:3e:43:d9:9a:ff:89:58:d2:8e:93:36:90:2b:55:
         78:9e:36:f7:e7:e2:38:a7:0b:3f:a1:5e:c6:fd:ba:2e:7d:36:
         d0:8f:81:88:e6:b3:66:5f:22:8f:52:10:bc:b4:08:09:3f:bb:
         f3:15:ef:74:bc:7c:90:6d:91:91:19:28:a9:d6:f3:96:3a:e1:
         49:c6:96:06:3d:a5:f4:53:41:88:13:f8:95:81:c3:7e:70:ba:
         f1:58:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:31:50 2025 by rpki-client