Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bdcda369-a2ec-3717-806c-908ece67ed92.roa
File:                     bdcda369-a2ec-3717-806c-908ece67ed92.roa (raw, json)
Hash identifier:          axykKir/QX/kipdtTR5m0Ste+3aHLg9mf+qcjrtqfU8=
Subject key identifier:   9B:29:18:5C:3B:2E:9F:ED:DE:6D:A0:7A:3C:DD:D6:6A:6C:60:D6:DC
Certificate issuer:       /CN=bacde40d-2f28-483a-8cfd-628d470b87a7
Certificate serial:       010D0C9F432858485CD0307B0EE02583CD4A1700
Authority key identifier: 1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bdcda369-a2ec-3717-806c-908ece67ed92.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        64.112.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:30:7b:0e:e0:25:83:cd:4a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bacde40d-2f28-483a-8cfd-628d470b87a7
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=968fa70f-48b1-435d-a3cc-6678a506b1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:ee:03:e0:10:52:1e:c3:c4:eb:a7:fd:f8:
                    ee:27:03:9e:31:41:ed:c9:8e:ee:66:73:c0:21:ea:
                    9c:02:14:b7:0a:29:b3:5c:00:18:7f:c1:84:7d:c0:
                    bb:df:90:ad:05:7d:90:2a:0a:88:7d:28:b1:4f:59:
                    0e:82:b1:fb:ee:ed:fd:98:30:85:74:e1:4b:fb:74:
                    81:11:bc:0c:7a:23:d4:52:f7:61:36:26:e2:75:ef:
                    3b:4a:68:e2:f5:93:d5:17:55:5b:e2:ea:92:34:5f:
                    96:d8:d5:18:c9:50:58:0b:3c:0a:23:8e:08:05:c6:
                    30:89:f1:7a:4a:38:b6:9f:47:e7:0e:4c:3f:7f:a5:
                    c3:35:6a:06:f0:63:1b:92:31:ae:3b:8b:95:e9:14:
                    94:c5:56:d3:0d:b6:9b:7d:69:18:60:2b:85:38:db:
                    2c:d1:4a:f0:2c:1e:2a:ae:f5:78:31:8c:0f:67:2a:
                    a6:da:ee:89:bc:da:c4:21:0a:66:25:c8:2f:f4:e0:
                    f8:38:ee:dd:03:46:9c:42:6b:d7:78:99:7e:03:2d:
                    14:81:96:07:36:92:0a:ec:25:ea:f2:36:f4:f2:56:
                    68:97:da:61:59:a8:ee:d8:c9:5e:c0:0a:c1:9c:80:
                    3c:b3:d4:90:2c:fe:f8:8c:ea:ae:e3:09:07:a7:4d:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:29:18:5C:3B:2E:9F:ED:DE:6D:A0:7A:3C:DD:D6:6A:6C:60:D6:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bdcda369-a2ec-3717-806c-908ece67ed92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:2f:8d:89:7c:48:6f:ab:77:df:01:ec:64:cf:82:ce:6c:
         ac:9f:43:ec:88:cf:c1:31:bd:30:1c:13:e1:c6:45:e6:44:21:
         eb:3e:5c:14:f2:8a:c4:15:d3:3a:66:19:a8:a1:52:4a:a9:64:
         94:87:41:12:41:e8:36:9f:95:a0:33:e8:17:1b:ae:05:d4:86:
         77:42:ba:b2:3f:d1:9c:2b:42:f5:62:b9:5d:2f:e9:c5:d5:78:
         0a:c2:d2:ec:c5:9e:6b:83:21:4b:80:da:c9:e5:d6:3c:24:06:
         a3:09:42:d3:ee:98:5d:12:d8:95:49:54:02:d6:b1:d9:b8:66:
         cd:15:07:41:a7:c8:5f:7f:47:50:72:4e:a6:4b:cc:18:77:d5:
         ab:7c:90:b3:a0:49:bb:19:ed:79:44:38:11:42:bf:f4:e8:9c:
         b8:98:4c:03:88:ac:02:0a:0d:8c:d2:bd:5e:47:33:15:8c:79:
         5b:db:73:7b:7f:39:5a:79:4f:99:2e:ed:37:ae:1f:14:fd:73:
         80:c2:c7:7b:8c:8a:2e:44:8c:4a:d7:2f:6a:7f:f2:d6:49:be:
         1e:a6:35:61:b6:80:d8:5f:f5:54:f8:56:c9:86:cc:d5:6c:17:
         6b:75:f9:4f:69:db:84:3c:4c:83:62:50:7b:07:cc:01:e2:e2:
         a2:b3:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:16 2025 by rpki-client