Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/409a3f9a-448e-30a4-951e-9fd76c92a86d.roa
File:                     409a3f9a-448e-30a4-951e-9fd76c92a86d.roa (raw, json)
Hash identifier:          l/ynjU4YlQHRDbBpgYzHAm6IYRVyR4JCUXbDNk6JB68=
Subject key identifier:   FF:43:A7:B6:26:7C:23:DC:67:92:AE:6F:03:BD:65:D8:D1:F4:10:1E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584812D534DC0795AB87AEE59400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/409a3f9a-448e-30a4-951e-9fd76c92a86d.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     395365
IP address blocks:        64.125.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:34:dc:07:95:ab:87:ae:e5:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=52d365a3-a6a8-43d6-ae44-0bb253a3901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:b8:50:f0:b6:17:d8:4c:27:71:3e:19:0f:
                    92:2c:56:dc:02:c7:75:f1:9e:cc:e0:6e:31:01:12:
                    08:64:cb:e7:fa:e6:4c:28:53:ef:c5:84:5f:57:3c:
                    0d:e8:83:f8:dd:2b:ae:9b:91:dd:59:26:dc:b2:89:
                    5f:ff:9d:db:1c:ef:58:23:a3:5c:9e:1c:6c:c5:1a:
                    65:00:e4:ad:53:b0:ae:70:0f:33:a0:90:e3:8c:79:
                    56:4a:32:98:f2:2e:f8:7c:69:89:7e:60:94:6d:12:
                    9f:7e:9d:90:ef:78:26:d9:38:96:25:f1:8f:cf:8b:
                    01:8d:f4:d0:74:97:21:90:e7:a9:49:86:e3:05:a4:
                    1c:a8:4d:2c:de:c2:b1:1b:5c:86:bf:ea:2b:49:4e:
                    c5:c8:be:43:34:5d:2d:3d:a1:9e:9d:64:d6:5d:87:
                    25:9e:bb:f2:13:1f:ff:5f:72:51:bd:e7:dc:73:ac:
                    c8:51:9e:8a:15:ea:93:f9:ff:05:30:3c:e5:a1:d5:
                    aa:0d:bc:48:68:6e:e1:9f:2e:ef:bd:2f:d0:be:a0:
                    dc:90:ad:67:f3:a7:3d:92:78:7d:46:75:2f:af:6f:
                    21:09:64:db:ab:51:a4:d8:5e:1d:11:e1:75:ad:69:
                    0c:b0:ca:d8:39:01:a1:77:7e:a8:a2:f1:88:de:60:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:A7:B6:26:7C:23:DC:67:92:AE:6F:03:BD:65:D8:D1:F4:10:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/409a3f9a-448e-30a4-951e-9fd76c92a86d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:55:93:63:6e:49:d2:f4:ce:48:f8:c9:47:88:22:7f:dd:ed:
         e6:16:8d:26:2e:58:bc:0b:1e:88:d8:33:be:a2:94:35:4c:75:
         00:58:d2:a1:2a:5d:06:04:80:5c:77:4c:83:6f:9b:23:7c:b0:
         82:72:51:58:b4:b5:06:9d:87:4c:9b:79:1b:83:d5:5b:c3:35:
         8f:31:42:46:2b:ae:86:b4:cd:7f:94:89:ae:ed:a1:8a:8d:c8:
         c7:23:f7:b4:7c:ba:d9:13:ef:8c:af:15:05:77:1f:ed:f7:c7:
         4e:96:78:37:a2:74:d5:8b:54:54:6c:83:b1:13:5e:35:29:bd:
         57:34:63:76:ef:fb:1b:2e:27:b1:7f:3e:57:c7:a8:b4:31:f2:
         a7:37:d1:41:00:4d:f2:7c:94:4d:21:bd:32:32:fb:95:6a:d4:
         41:ff:78:30:d2:b7:4a:02:7e:f9:34:16:da:8c:24:94:9b:71:
         35:ef:52:87:87:f5:e8:93:85:35:da:99:99:37:bd:3a:60:07:
         56:b5:dc:e7:c2:13:d4:0f:82:e7:9a:65:9d:66:19:ca:3d:0e:
         eb:3f:7b:5b:0c:49:2e:88:ab:52:9e:00:13:9e:40:6c:8c:f4:
         44:d3:2a:13:7f:59:e2:3d:51:a3:99:33:c4:df:37:c7:85:e2:
         9c:d3:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:37:51 2025 by rpki-client