Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e453e87f-2075-39a1-8d7e-b80cf54ae618.roa
File:                     e453e87f-2075-39a1-8d7e-b80cf54ae618.roa (raw, json)
Hash identifier:          Hr1zlvCcUW6wyqO7micfrC2AZmo4kNYxMP6Adn76IcM=
Subject key identifier:   AB:44:59:33:AC:6C:CC:A1:B1:1A:CD:88:0F:14:DC:AB:2E:BC:DA:EA
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584869605E249EE8C158A8197800
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e453e87f-2075-39a1-8d7e-b80cf54ae618.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        64.63.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:5e:24:9e:e8:c1:58:a8:19:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=c8f5c479-7489-4624-8b4f-26d0117d0842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:65:af:48:35:9b:4f:2c:98:0d:2a:0a:7d:
                    c5:71:6b:e1:37:c4:70:29:10:fb:ec:37:a9:e2:86:
                    31:e3:fb:4b:91:80:90:1a:3d:5b:5a:f1:ff:69:15:
                    b3:78:a2:b1:2e:94:8a:79:35:a9:cb:bc:ca:41:15:
                    63:03:99:7c:9c:d7:45:f1:e8:3b:6d:de:58:0d:bc:
                    57:74:d0:b1:4a:72:bd:a9:98:28:60:08:58:1b:a1:
                    8f:9a:ed:64:65:7b:cb:9f:69:b7:83:aa:9b:4a:50:
                    ea:a1:ac:a6:74:27:4a:d0:4d:19:c6:64:3d:e1:e8:
                    78:2c:d3:75:70:01:3e:4a:b7:de:ce:0f:a0:04:8a:
                    06:93:7d:ee:f1:29:85:52:65:86:7c:7d:0c:f5:ee:
                    fa:65:47:fa:3b:a4:11:e9:a4:de:32:72:69:5f:aa:
                    9e:97:fe:3c:35:d8:c5:ec:c8:8e:d5:7f:f5:89:bb:
                    33:17:61:a4:fb:d8:41:51:3b:d9:4c:36:34:14:5d:
                    55:9f:2c:eb:ad:ff:d9:87:8c:41:0f:0e:c9:5e:8e:
                    54:0c:c2:ad:57:0c:9d:12:13:dc:b1:58:77:60:b0:
                    d2:21:d5:ef:81:b6:7f:eb:6b:ef:f5:1c:fc:ce:08:
                    01:d3:1d:1e:24:6e:a4:a8:3b:d5:ed:e2:e2:57:e5:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:59:33:AC:6C:CC:A1:B1:1A:CD:88:0F:14:DC:AB:2E:BC:DA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e453e87f-2075-39a1-8d7e-b80cf54ae618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:be:59:8f:b3:1b:e7:0d:af:9d:ee:be:5a:5c:93:3c:ee:fa:
         66:f8:53:ef:3c:0f:a3:fd:28:1b:74:59:9c:16:5c:c3:a6:ca:
         3d:8e:bc:ef:d6:98:60:f5:ea:e8:6f:1e:2f:8e:7f:00:2f:0c:
         e3:ef:bd:59:68:78:1f:51:d2:e1:8a:8b:26:43:df:aa:ca:2e:
         a0:6a:c0:4f:c9:28:bd:02:65:d3:fc:c3:74:46:c6:9d:9d:e4:
         45:fc:1d:93:f5:59:f1:96:cf:49:1f:c7:11:3d:a9:6a:5a:35:
         ee:03:bb:b4:ec:1c:58:4c:1b:ee:7e:31:88:b4:01:1f:0c:10:
         0f:d9:38:c9:d8:41:dc:b3:d7:c5:57:08:ba:50:c5:de:56:0b:
         1d:e7:fa:5c:8f:e6:6d:db:70:95:88:01:b0:81:42:8e:b9:64:
         81:de:6d:65:63:f3:93:d0:f8:b6:e4:9d:88:20:4c:e5:2f:40:
         25:ae:51:db:e9:46:4d:40:7a:7a:d1:6f:d8:cf:86:58:73:5c:
         21:71:a7:f8:2e:bb:88:bd:f9:70:79:de:9b:08:79:dd:4f:47:
         02:f5:cf:d3:ab:f5:52:74:e2:bf:76:fe:06:ac:b1:dc:7b:1e:
         4b:9d:ba:92:c0:3d:21:70:77:28:8f:83:8b:b8:8b:75:8b:65:
         00:c6:fa:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYF4knujBWKgZeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YzhmNWM0NzktNzQ4OS00NjI0LThiNGYtMjZkMDExN2QwODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp51lr0g1m08smA0qCn3FcWvhN8RwKRD77Dep
4oYx4/tLkYCQGj1bWvH/aRWzeKKxLpSKeTWpy7zKQRVjA5l8nNdF8eg7bd5YDbxX
dNCxSnK9qZgoYAhYG6GPmu1kZXvLn2m3g6qbSlDqoaymdCdK0E0ZxmQ94eh4LNN1
cAE+Srfezg+gBIoGk33u8SmFUmWGfH0M9e76ZUf6O6QR6aTeMnJpX6qel/48NdjF
7MiO1X/1ibszF2Gk+9hBUTvZTDY0FF1Vnyzrrf/Zh4xBDw7JXo5UDMKtVwydEhPc
sVh3YLDSIdXvgbZ/62vv9Rz8zggB0x0eJG6kqDvV7eLiV+WkwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtEWTOsbMyhsRrNiA8U3KsuvNrqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZTQ1M2U4N2YtMjA3NS0z
OWExLThkN2UtYjgwY2Y1NGFlNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAES+WY+zG+cNr53uvlpckzzu+mb4U+88D6P9KBt0WZwWXMOmyj2OvO/W
mGD16uhvHi+OfwAvDOPvvVloeB9R0uGKiyZD36rKLqBqwE/JKL0CZdP8w3RGxp2d
5EX8HZP1WfGWz0kfxxE9qWpaNe4Du7TsHFhMG+5+MYi0AR8MEA/ZOMnYQdyz18VX
CLpQxd5WCx3n+lyP5m3bcJWIAbCBQo65ZIHebWVj85PQ+LbknYggTOUvQCWuUdvp
Rk1AenrRb9jPhlhzXCFxp/guu4i9+XB53psIed1PRwL1z9Or9VJ04r92/gassdx7
HkudupLAPSFwdyiPg4u4i3WLZQDG+g8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:14 2025 by rpki-client