Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa
File:                     0ee37803-d3ff-3096-9238-75e7b75f8601.roa (raw, json)
Hash identifier:          IF+ChsiuMErRSN+4XvfaENVneC3g8sgCmVuGpnJxGqU=
Subject key identifier:   2D:9F:61:02:28:A3:72:DF:64:19:D8:B2:6F:F2:1A:5F:02:D7:07:96
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584812D53559C85D9C153CBD8C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     30419
IP address blocks:        64.125.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:35:59:c8:5d:9c:15:3c:bd:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=43a0581a-8e5d-46e5-bf7d-69bd71e8a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:5e:22:1d:a5:e7:5b:55:b5:6f:d8:c4:dd:
                    50:18:74:f3:07:23:4e:2d:f7:46:cd:33:cb:51:11:
                    85:6b:d1:42:3a:83:6f:b2:1e:c9:e2:91:8b:9a:d6:
                    d6:68:14:17:b0:1c:c3:45:c8:ca:5b:95:98:5a:84:
                    eb:de:ec:c7:7b:25:6c:95:ac:6c:1e:96:57:6a:2a:
                    f2:51:71:a9:01:f0:7f:ba:68:71:a6:0a:f2:dd:0b:
                    41:06:f1:81:b3:95:68:29:91:e9:84:0a:93:78:9f:
                    1f:8a:2e:8e:05:c4:c5:46:7f:80:0e:75:51:f1:ac:
                    4a:00:d2:95:26:40:7d:8e:29:0f:34:c5:a2:0c:6a:
                    fb:52:e7:28:24:28:c5:4a:3e:38:c9:c8:67:c9:af:
                    ad:a7:e3:22:46:eb:85:a2:89:21:e3:c9:49:46:e4:
                    3c:59:71:5d:ac:d1:ec:48:c5:8f:a6:59:9e:91:fa:
                    eb:22:e8:4d:48:e7:03:0c:26:db:d4:91:25:be:75:
                    e3:70:c3:87:cd:42:13:f4:a1:aa:f3:91:f7:6d:53:
                    6e:e8:c2:19:ee:3b:ab:0d:74:b7:5c:3f:96:d8:f5:
                    d5:86:be:bd:bf:7d:3d:31:ee:61:6c:e6:5e:32:44:
                    97:43:3c:1b:e9:af:3e:b2:c6:5a:33:f0:c6:f0:75:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9F:61:02:28:A3:72:DF:64:19:D8:B2:6F:F2:1A:5F:02:D7:07:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:89:0f:1d:f1:03:71:41:3f:9e:66:47:31:39:8c:b5:8b:
         58:4f:00:db:69:53:2b:2e:b1:68:83:dc:4c:22:ac:d2:58:d1:
         90:5d:eb:70:54:5a:53:be:db:de:43:1a:50:06:7b:6d:7a:a4:
         d2:52:b4:90:b7:41:82:1a:19:51:ba:52:f0:49:aa:5f:65:ae:
         07:52:27:eb:19:85:f8:0e:12:05:02:27:93:e8:1c:6d:b2:5c:
         b3:06:55:d7:06:01:e2:81:09:b5:96:4d:87:6e:d4:09:bf:cd:
         58:14:41:57:0c:f6:f3:4d:c5:37:d9:76:69:2f:ed:be:0a:df:
         93:93:96:f7:b7:41:36:6d:f4:d2:90:a2:5f:aa:25:f7:35:37:
         1b:5e:b7:e4:99:88:56:c5:37:26:ee:91:18:b3:f5:66:0c:a8:
         68:a4:4e:c8:63:2d:52:4d:3c:90:90:dd:1f:d3:a7:d4:14:ce:
         bc:a9:49:8f:d9:d0:6c:e8:37:33:56:54:1f:e7:ca:d8:2d:f9:
         d1:47:c1:ae:83:d5:d3:3d:63:fb:b6:93:32:7f:de:5a:4c:1e:
         48:c8:36:5f:47:e5:b7:14:d5:aa:ba:7c:6e:7b:7c:3a:e3:ec:
         f3:25:4e:36:23:f9:be:fb:a1:ba:d4:45:c8:a8:27:2e:6d:62:
         54:59:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:16 2025 by rpki-client