Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
File:                     e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa (raw, json)
Hash identifier:          PXcgu47bshm0v0AGTtbpjyeH773r3C9gLQaK1QXaOH4=
Subject key identifier:   11:E8:85:32:CD:D7:2C:D7:E2:62:56:4B:3C:6F:E7:B6:71:5D:1F:94
Certificate issuer:       /CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
Certificate serial:       010D0C9F432858487755E0226847FB102FFD7280
Authority key identifier: 68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     398461
IP address blocks:        69.64.113.0/24 maxlen: 24
                          2602:fd47::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e0:22:68:47:fb:10:2f:fd:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=80def3cb-a7ea-4382-b549-3facb46e60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:5f:03:c7:f2:cd:43:fd:65:07:43:62:48:
                    e9:9f:d8:61:b7:4a:3c:88:bc:c5:c9:56:0c:16:e0:
                    9e:31:cd:a6:7d:29:52:07:a6:33:35:1c:40:fe:4d:
                    c0:1c:01:ab:eb:31:fe:24:a9:be:62:9c:f8:be:8d:
                    8b:c5:5b:1a:bf:35:3c:49:97:1a:2d:1f:bf:81:8a:
                    60:df:46:fa:60:b4:17:03:de:7f:bb:c2:c7:04:14:
                    2f:a7:0a:a4:ee:4d:a7:56:24:52:8f:9a:8a:fd:01:
                    54:75:7c:34:6e:1b:7f:7c:9b:e0:0a:ca:50:bf:23:
                    10:94:fa:c9:95:d1:5d:b3:43:2b:5f:ef:20:4a:b7:
                    6c:19:d1:6d:00:b2:a1:9d:96:40:a7:fe:9f:b5:ea:
                    9a:7c:7b:03:1c:54:ab:53:05:df:45:b4:08:15:e7:
                    57:ce:9e:04:b1:7f:1a:f6:1e:d0:8e:1c:28:83:58:
                    12:ab:bf:76:f7:6e:51:ca:93:b1:b3:e6:95:67:1e:
                    7d:a6:f9:cd:27:d9:60:05:32:e5:c8:bf:4e:f8:92:
                    ad:fe:15:07:9f:6d:05:02:f1:9b:12:f4:cd:2b:48:
                    d1:f0:19:c2:18:05:cd:86:23:62:90:c8:e2:31:34:
                    ce:86:4f:a0:0f:d8:ed:62:82:0d:2a:8a:ad:95:2a:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:85:32:CD:D7:2C:D7:E2:62:56:4B:3C:6F:E7:B6:71:5D:1F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl

            X509v3 Authority Key Identifier:
                keyid:68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.113.0/24
                IPv6:
                  2602:fd47::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:c8:66:08:07:4a:b7:21:d6:28:91:1a:26:8b:36:7a:e7:
         56:19:9d:8f:d2:3c:a3:b2:80:1d:8b:26:12:fa:75:b2:a1:da:
         fa:48:cb:e5:14:75:ee:1c:3c:5d:4d:27:61:cc:bc:84:41:76:
         f1:a5:93:d6:41:0e:6f:5d:78:b7:26:d2:1f:36:81:1a:97:47:
         d5:cc:d6:f4:df:fd:79:ac:16:e0:84:21:6b:48:ba:6b:ca:38:
         9b:ad:ae:96:34:03:cd:70:ac:a3:36:0c:07:39:da:12:e1:1b:
         71:d2:24:ba:f5:ea:a1:1c:b0:d7:ab:4a:91:ae:3c:bc:3c:51:
         4e:5b:13:ce:fb:1d:4f:9c:cd:24:53:b5:e2:4d:84:0d:cc:32:
         c6:cd:08:9a:1f:f3:fe:b5:fe:01:ba:4b:7c:ca:b5:d7:80:55:
         e8:93:0b:80:ba:6c:07:84:7c:34:f7:f0:f9:b3:67:86:54:81:
         dc:b1:ec:6a:0e:60:e8:a0:5b:57:29:14:0b:08:db:fc:6f:83:
         8e:92:72:40:4e:44:7f:29:58:aa:c5:3f:48:f7:6c:25:67:ad:
         28:9f:81:a8:18:da:56:33:de:9e:2d:5b:9f:4b:6a:7b:68:49:
         bb:01:93:22:70:f4:dc:59:c1:bf:76:19:41:c7:be:59:42:58:
         c6:bd:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:31:10 2025 by rpki-client