Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa
File:                     9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa (raw, json)
Hash identifier:          pumnpgQUSHK32FelXslJhu6Zr9pGFQJHbm7g3RHBIis=
Subject key identifier:   59:E5:A3:FC:7B:AA:43:EF:21:F1:A7:6D:41:4A:25:27:54:03:AE:31
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584812D5362CA828A7C1D6B34E00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     17025
IP address blocks:        64.125.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:36:2c:a8:28:a7:c1:d6:b3:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=3efd6002-2bad-4058-bc08-67285a8bcc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:2a:51:03:cf:7d:1e:11:3d:32:11:7f:29:
                    a0:b1:ca:ae:75:39:8a:4c:ff:34:7b:3b:93:f3:2c:
                    ee:dd:61:71:d2:f1:e0:4e:45:bb:87:cb:da:45:56:
                    ae:a6:81:45:50:c1:56:0f:1b:b8:be:01:de:3d:64:
                    5b:d7:e1:41:63:ee:1e:53:64:10:3b:99:f8:9c:8f:
                    e1:8c:28:10:50:8a:fe:5c:ce:d7:29:3c:e6:31:50:
                    79:2e:46:f4:8d:81:a1:a6:19:8f:d1:4c:6b:ff:ca:
                    91:71:85:7e:c2:81:2c:8d:e4:c1:58:33:39:ca:65:
                    08:5c:91:fa:58:ba:8b:99:db:07:06:62:00:ab:a0:
                    81:4a:9b:22:df:81:f2:49:1b:69:16:94:dc:2d:b1:
                    ed:4d:0d:89:2d:ae:8c:cd:80:83:f6:de:e9:d0:35:
                    2f:68:41:90:fb:21:ac:01:9d:2f:53:37:7e:1f:7c:
                    0f:3b:f7:42:a0:a1:63:92:e1:1a:04:d0:19:0d:60:
                    65:d7:b1:31:6f:19:3f:08:2e:21:38:0a:31:08:81:
                    be:eb:90:79:2d:56:a0:30:33:99:00:1f:c2:d7:99:
                    42:4b:72:ea:0d:63:32:f2:d5:e4:37:d4:25:50:5f:
                    c6:69:68:b1:eb:3f:2c:d3:0c:41:47:a5:9f:85:3d:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:A3:FC:7B:AA:43:EF:21:F1:A7:6D:41:4A:25:27:54:03:AE:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:51:6c:2b:39:00:3f:9d:2b:c7:11:a7:b0:3b:28:a2:1a:98:
         5b:7b:ea:fa:82:a0:03:0b:ab:9f:30:2e:95:0e:13:05:53:6f:
         51:06:d0:45:c3:2b:9c:93:39:79:d8:47:fe:aa:71:bb:b8:0d:
         90:ba:e2:46:45:44:81:36:92:6a:9a:bb:ee:6e:6c:94:1a:fd:
         30:a9:93:a6:24:6e:3f:1b:22:a8:b6:2e:50:f6:05:80:ee:b2:
         66:b9:3c:23:9b:10:0b:6a:1d:63:af:bc:4d:1f:08:5c:23:c1:
         e8:c4:70:3c:ea:a9:87:2d:4f:3a:f5:4e:cd:5d:67:04:f0:df:
         85:82:3e:39:a4:47:84:43:2e:54:39:93:da:60:78:fe:22:04:
         49:8c:33:c7:64:03:e3:19:6b:7e:b2:ae:77:21:21:77:f6:5b:
         6b:b9:47:cc:34:ce:a3:96:e7:6b:d5:c4:d8:19:d4:54:14:ab:
         e5:54:f1:fa:1c:7a:e0:7a:2e:57:c7:a3:12:98:f8:d8:94:b2:
         dd:7e:2f:a2:bd:5a:12:4d:69:79:23:e3:e1:d0:fe:24:9e:99:
         33:c9:e9:57:b0:a4:fc:02:ff:4e:f9:02:32:8a:50:91:2c:81:
         45:cb:70:5e:47:81:03:53:2e:66:e9:1c:53:78:aa:02:23:39:
         93:24:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:04:26 2025 by rpki-client