Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa
File:                     f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa (raw, json)
Hash identifier:          /qoRPly/5GELntZoE6oyaXY6I3Nw98H/raw5UbjvyJ0=
Subject key identifier:   6F:8B:57:6E:3C:C2:BB:80:10:73:3E:19:AC:43:12:6A:7B:C9:0A:AB
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858484D75941BAA85940B8FECCC80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     25645
IP address blocks:        64.92.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:94:1b:aa:85:94:0b:8f:ec:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=8afa3b3f-5e88-431a-a057-ef0bb0ff3ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:92:d9:e6:f5:56:18:18:47:dd:57:f0:0d:
                    cc:18:07:49:24:7c:15:62:48:58:55:d6:83:73:5a:
                    08:cd:4e:16:93:e2:67:a9:98:28:25:e5:59:81:8b:
                    90:2b:70:58:5a:08:e1:46:ce:76:cd:f5:6e:a8:f5:
                    b6:18:35:95:63:7f:4f:a2:b3:ad:fb:60:46:e6:ea:
                    0b:04:83:6e:66:6f:7a:70:56:d9:cf:f5:ba:e2:48:
                    14:96:aa:15:71:aa:4c:17:66:b3:ab:08:96:13:d2:
                    9c:c5:1d:77:be:68:41:9a:b6:b8:47:34:b7:46:e0:
                    4f:05:ec:38:82:fc:6c:ee:5f:9e:3e:00:ce:e0:b0:
                    d4:6f:c3:6b:cd:0c:62:f7:e6:76:e4:3f:ee:66:c1:
                    cf:47:7d:fb:f2:65:78:69:6c:c4:9e:5c:32:0e:60:
                    72:82:ea:24:80:37:4d:0d:2b:57:5f:d4:d3:4e:c4:
                    eb:f8:84:f6:74:89:9d:85:63:1a:11:78:57:d5:2a:
                    64:06:00:74:0e:b4:32:91:24:8b:82:a0:79:4e:4f:
                    f7:e3:0e:6b:13:18:39:37:d5:40:54:8e:d2:3c:29:
                    2c:f7:20:1b:af:1a:cb:36:55:6b:61:74:bb:41:7b:
                    b4:7d:55:44:83:4b:fb:c8:0f:0e:3a:83:90:3b:a3:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8B:57:6E:3C:C2:BB:80:10:73:3E:19:AC:43:12:6A:7B:C9:0A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:28:23:ab:12:cb:57:44:10:ff:1e:af:4f:80:10:30:4b:
         c8:8f:75:3b:f5:02:f7:0c:08:84:9b:17:59:c4:01:b7:15:27:
         ef:26:d7:f4:55:79:70:7a:2a:45:6d:db:6d:a7:a8:03:85:25:
         24:ed:3e:86:54:17:81:80:4b:00:37:9a:43:a9:d0:0b:ea:42:
         c9:77:82:98:48:42:d5:ce:5c:6b:bd:a3:8e:ac:d0:36:82:59:
         f9:79:89:90:39:e2:14:9b:26:ec:8d:00:cf:62:a5:55:c7:a6:
         3b:33:da:2a:ae:97:81:9e:19:f8:18:9d:62:35:66:8e:85:58:
         ed:c5:ae:45:52:5d:7a:c0:06:64:89:41:5c:2c:25:22:6c:31:
         db:e7:92:a3:9e:65:e7:d7:c7:85:a1:96:5f:f7:0f:8a:ad:95:
         42:f8:91:f7:7c:2e:f1:f1:e4:cd:82:93:10:b2:70:bd:12:52:
         78:23:32:bb:96:19:32:3d:04:7e:1d:dc:43:76:7a:df:ba:9a:
         c9:38:1b:cb:87:37:4f:99:a9:f5:10:df:f6:21:12:73:8e:1e:
         a9:04:35:56:de:1f:67:cc:7b:5d:e1:b2:f8:c1:19:50:d6:96:
         54:32:c9:db:2e:bf:d3:96:99:61:ea:77:c0:10:45:fb:03:44:
         01:ef:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:13:31 2025 by rpki-client