Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/870fde2a-7d11-346d-9a74-4c067817eebd.roa
File:                     870fde2a-7d11-346d-9a74-4c067817eebd.roa (raw, json)
Hash identifier:          DQvtmkJ0FwBFYeleBbJWpRrfINY07huEMdd7ufRsu3w=
Subject key identifier:   41:E8:FC:01:BA:07:01:10:75:67:DC:53:BB:69:E9:07:6A:D6:1E:A6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858481C9A9092B1F3B833FD1BA900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/870fde2a-7d11-346d-9a74-4c067817eebd.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     6461
IP address blocks:        64.124.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:90:92:b1:f3:b8:33:fd:1b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=802f59e3-5894-4730-b82e-a64a5a501045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:09:de:a2:72:7d:c8:71:6d:30:0c:23:f1:
                    22:6f:4d:af:cb:e3:c7:f5:ba:47:9e:a0:78:22:cf:
                    54:8e:0c:05:b5:0a:58:a6:c8:a5:96:c5:ee:6f:11:
                    e4:3b:6f:21:79:ef:0a:56:50:57:5b:d2:90:77:09:
                    b2:79:af:5e:86:4b:95:f3:72:39:34:c9:fc:a4:d8:
                    fd:0d:ba:3b:1c:88:b1:f3:6f:3e:1d:fe:61:c7:7b:
                    60:16:ae:cc:bb:a8:be:17:9c:d2:de:31:d6:fc:b0:
                    36:c0:22:e1:2c:c5:ec:38:3b:43:38:72:ea:86:36:
                    bc:39:a3:16:a1:4f:ee:6e:04:11:68:02:7f:f4:35:
                    3f:ce:29:89:8c:94:91:5b:35:c3:e6:d1:89:aa:99:
                    12:8a:b8:f9:ee:ca:c5:5f:e3:63:f8:db:95:44:fb:
                    d5:5c:aa:60:68:b3:8a:be:dd:bd:2c:7b:2b:d9:28:
                    29:00:dd:47:4a:09:0f:64:3c:1c:2c:6d:51:d1:ac:
                    c0:8a:99:6f:e6:c2:8f:b8:a7:55:38:fe:17:5a:b2:
                    49:4f:a0:fc:ea:0e:ca:df:fc:7f:77:ed:97:19:45:
                    ec:80:37:85:54:17:17:ca:c3:c7:c7:44:fa:f8:8b:
                    d1:2d:2b:58:cc:25:26:0b:fa:98:58:f8:90:4e:e5:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:FC:01:BA:07:01:10:75:67:DC:53:BB:69:E9:07:6A:D6:1E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/870fde2a-7d11-346d-9a74-4c067817eebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:cb:62:f7:b7:d4:b7:56:5a:da:96:a5:97:07:c5:d5:29:73:
         6c:9e:63:80:34:d2:99:93:33:d9:48:fb:8e:d4:16:94:69:64:
         18:03:32:8c:38:0e:6f:01:a4:ea:94:77:e6:a6:a1:a1:3a:93:
         da:0d:9c:3b:37:37:04:cc:58:01:c1:e9:9b:c2:e9:52:74:2e:
         26:3f:58:10:88:fa:1e:33:a5:cb:0a:fa:78:3a:2b:e3:be:22:
         46:4f:08:29:71:ed:5d:c1:c2:30:94:d0:83:64:e8:c2:25:b9:
         88:b9:5b:73:21:ad:cf:9c:ce:1a:45:48:8d:d8:62:cd:52:bf:
         33:8b:4e:ef:45:ce:96:8f:8e:e9:6f:ab:71:a2:15:0b:77:4f:
         0a:a5:c7:ae:1b:4c:c8:7f:1d:4b:23:3a:bd:a3:d5:96:64:62:
         ec:d9:5c:0c:99:9a:e9:db:f1:c4:b5:43:bf:36:8d:be:cb:43:
         78:e5:ce:2d:ce:6a:07:28:ab:fa:ef:a4:84:96:6f:a3:0a:5a:
         19:1f:a3:34:7a:c8:de:26:a4:b7:52:fc:30:6d:fc:9c:bb:c7:
         2e:a7:00:5b:62:4f:13:f8:29:82:ec:22:b7:8e:65:09:6b:b1:
         21:d8:fc:0c:76:b1:71:63:28:10:25:e7:50:44:9c:51:1a:fd:
         91:49:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:08 2025 by rpki-client