Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
File:                     2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa (raw, json)
Hash identifier:          +Ip9varygcaXrG27/2jLaLip0Q4JqVruRd7VVfen8hE=
Subject key identifier:   51:46:31:34:C3:C3:2F:C2:48:9D:5B:DD:A2:0B:C8:B2:12:3E:54:5D
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285848696060094A8A62007C154600
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        64.63.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:60:09:4a:8a:62:00:7c:15:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=ca6f09d1-d590-43f8-a125-b59e564d211d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:52:ea:15:9b:4b:fb:b0:ba:6f:39:f3:63:
                    86:6d:23:c5:c5:fe:c0:9e:44:bc:36:fd:b3:74:fe:
                    6b:fa:49:6f:f1:4b:a0:d2:c1:61:2d:15:c4:7a:c8:
                    79:44:60:bf:95:d2:20:81:4b:b2:16:60:e1:f5:e2:
                    52:b2:b8:00:3e:79:e7:a3:7f:51:6b:82:69:f6:2b:
                    17:16:52:59:03:d5:b5:18:42:71:e7:27:6e:31:fc:
                    23:89:cf:7b:74:06:c0:1e:60:9d:2b:80:ee:79:9b:
                    78:28:f1:15:b3:3c:1e:4a:3f:a9:26:71:8e:c1:5f:
                    2d:fa:fc:09:86:f9:1a:38:eb:0b:62:d7:58:21:ce:
                    66:31:4b:37:66:e4:1b:8d:7a:d0:53:cf:29:32:52:
                    84:92:66:2e:c0:d3:0e:92:11:49:5e:a2:73:4c:a2:
                    ee:78:63:13:16:87:e2:40:87:59:fb:61:0a:b6:13:
                    6b:e2:fb:9e:c8:dc:bf:c0:4b:ba:16:25:b1:78:dd:
                    6c:08:09:be:b8:e6:e1:32:94:d4:9a:dc:ad:ba:08:
                    44:c8:e3:c6:3b:12:f8:60:46:60:20:b7:d3:11:52:
                    07:c5:f3:58:c6:e1:45:05:86:08:28:65:0a:0d:29:
                    54:62:c1:71:48:6b:7a:a1:b0:fd:c5:58:41:07:cc:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:31:34:C3:C3:2F:C2:48:9D:5B:DD:A2:0B:C8:B2:12:3E:54:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:32:27:49:f9:09:67:09:04:6e:94:fd:5f:2a:86:56:9e:
         d1:44:c9:70:19:d9:15:01:27:72:97:3d:46:cd:9d:44:f4:73:
         47:ca:c0:c8:11:72:6a:2a:46:2d:01:89:58:0a:db:06:32:93:
         03:19:06:95:c6:cc:bd:33:b7:25:5c:d9:66:14:2c:69:81:4b:
         3e:f7:c8:d9:71:dc:75:03:36:6e:7d:34:60:5d:e8:a1:9c:1f:
         9b:fd:04:f2:58:56:03:a8:6d:fb:28:e2:7a:0a:e5:d5:1f:8a:
         89:f6:f4:29:f8:e8:08:c5:e9:ce:df:20:6c:49:74:26:83:8c:
         06:84:ea:d8:1a:30:1f:99:bf:28:af:b2:84:44:19:83:62:7d:
         99:11:83:8a:ea:96:2e:5b:2c:ee:44:fb:c7:a9:92:4e:9d:0d:
         c2:04:54:67:82:a9:b8:5e:3b:ce:59:9d:cb:02:12:8c:3d:25:
         a8:a8:f0:04:1e:47:40:11:71:b8:53:20:33:4c:dd:50:6b:53:
         ad:45:4d:33:4c:fa:80:7d:82:85:1d:2a:83:48:f6:d3:98:5b:
         b7:17:dc:f8:35:b2:12:6d:e7:68:60:c3:b8:ae:48:20:f4:56:
         2f:48:1e:05:c0:a5:59:db:df:8b:ff:30:7f:3a:87:05:f4:ba:
         fe:63:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:41 2025 by rpki-client