Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/544eddf0-0b9e-33be-83c1-5dfc2e210d86.roa
File:                     544eddf0-0b9e-33be-83c1-5dfc2e210d86.roa (raw, json)
Hash identifier:          vm4QsUwGTC4fO1vOxwOC0NeThbfgl2DxDb0XESI7/BY=
Subject key identifier:   76:BB:07:A6:CB:3C:53:80:5F:A5:5F:88:9D:14:7A:15:3A:DA:60:09
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858483E1AB3791DCF8CD1F8866940
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/544eddf0-0b9e-33be-83c1-5dfc2e210d86.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     16503
IP address blocks:        64.20.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b3:79:1d:cf:8c:d1:f8:86:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=cea2ff0f-1753-49f8-9864-3e6ac4f11b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:3f:ff:a9:b1:af:03:4f:02:85:b7:20:2d:
                    0a:6b:61:b8:62:03:92:d6:84:ca:54:11:cf:13:0b:
                    51:95:bc:ff:c8:26:57:64:7c:be:00:07:2b:24:a4:
                    2d:24:a7:5e:e8:7a:2a:e0:ad:c7:51:7f:0b:a3:24:
                    df:40:8e:cf:d0:e3:e6:8e:42:cd:96:de:19:9b:7f:
                    d2:f1:d7:c6:4a:51:0f:37:1d:a7:39:d3:35:5e:24:
                    33:bd:40:f8:62:4e:44:e4:ee:3c:a6:38:12:ba:46:
                    15:05:06:20:1a:85:a2:64:f0:b2:56:0b:69:61:38:
                    b6:93:6c:44:6b:84:10:f0:49:c7:3e:8a:24:17:1b:
                    12:47:a0:36:6f:e6:8d:ba:9a:93:6f:eb:64:db:5f:
                    fa:69:55:3c:7a:9f:e9:8c:62:6f:74:e4:8b:6b:ec:
                    38:c8:f9:47:a3:7b:d5:c2:eb:c5:8d:82:5c:ab:ec:
                    67:25:b1:fc:6d:25:9a:07:a8:e3:d2:90:99:89:d4:
                    40:05:fb:01:c6:e1:a6:57:22:32:a4:14:2c:a0:06:
                    ac:62:20:d6:21:22:8e:81:61:b4:cd:64:f2:9d:25:
                    6a:b6:7d:12:db:b6:51:13:d1:41:3c:e7:70:5a:1a:
                    d4:46:b0:e8:df:11:74:fa:82:76:7b:35:59:21:f8:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:07:A6:CB:3C:53:80:5F:A5:5F:88:9D:14:7A:15:3A:DA:60:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/544eddf0-0b9e-33be-83c1-5dfc2e210d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:56:3d:1a:f2:d6:89:84:9d:e3:d1:5b:3a:94:11:c7:24:
         cd:e0:79:f4:8c:71:a5:a6:93:bc:58:b9:40:72:d9:6d:05:12:
         da:a0:b3:74:2e:60:a3:bf:ad:6c:df:f1:93:2f:60:42:f1:c0:
         68:db:2f:d6:44:b8:f0:17:59:90:b7:55:fe:d1:64:44:4e:17:
         36:ed:81:fb:bc:56:12:db:14:d3:b2:31:4a:09:e6:72:24:20:
         7e:58:39:4d:40:d4:d1:eb:1e:73:75:64:d6:69:22:ae:b4:92:
         7a:77:f6:07:d7:6c:9c:1f:bf:9d:a0:cf:47:8c:ad:d4:c6:90:
         dd:4e:df:d7:52:8c:b4:67:7e:20:42:4a:ec:55:61:fc:6d:f7:
         04:65:c0:97:aa:6c:b7:c7:37:91:f2:f6:38:52:23:f2:38:6d:
         93:99:c7:a1:9f:92:37:c2:1e:ab:13:87:52:9f:25:69:34:f1:
         48:9d:75:c1:2f:1c:c5:be:12:27:8d:79:19:99:b4:19:59:30:
         61:74:f5:19:7a:e3:71:2a:98:45:cf:06:ba:7e:cd:69:1e:e0:
         ff:65:fb:de:b9:87:3d:dd:c8:e8:d0:25:f6:26:c2:1e:a4:fe:
         82:fb:de:b3:a9:e5:5d:fe:e7:b8:95:bf:a2:78:4f:80:75:0e:
         01:86:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:17 2025 by rpki-client