Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa
File:                     8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa (raw, json)
Hash identifier:          d7lbo+NZ2kJ7iRWFzIRWk/Ifx9drcLD2WqJcIbPCjkM=
Subject key identifier:   41:80:43:08:98:D0:93:6B:2F:0D:0E:B8:D9:DF:A9:FA:11:9A:7E:77
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858481C9A7B08FED15AC688222300
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     6453
IP address blocks:        64.86.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7b:08:fe:d1:5a:c6:88:22:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=fa613aa0-b93e-45be-a670-1b1275680c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:2d:a1:54:1b:b6:65:2f:a7:81:bf:62:6d:
                    09:79:fb:db:6e:f1:2b:49:e5:0b:52:ed:a1:22:ef:
                    24:79:b7:ca:48:0f:5a:fb:dd:7c:e7:13:15:25:67:
                    16:74:9c:73:32:a5:05:cf:8e:bb:da:38:59:26:5a:
                    b9:67:97:50:65:48:7f:9f:9f:7c:b7:c4:62:44:aa:
                    1f:eb:de:c6:63:10:15:66:89:d6:e3:a0:08:04:04:
                    0c:17:e1:0f:18:80:a6:b5:e5:4f:b8:7b:d1:91:62:
                    dd:76:70:cd:8a:60:e5:81:75:8d:5d:e1:81:e0:a1:
                    10:27:51:90:e7:25:0c:99:e9:5e:d9:fc:09:cc:6f:
                    9a:18:67:1e:96:51:27:d4:32:b6:51:e0:90:7c:59:
                    0b:33:63:7f:c5:66:60:2d:19:b5:45:85:a4:67:3c:
                    50:ba:2f:db:f2:88:c3:e0:2a:d0:ea:a0:3e:7f:6f:
                    10:5e:16:96:2c:da:cf:31:08:06:77:0f:df:ba:d3:
                    db:c1:91:7f:aa:d7:03:c6:63:47:eb:08:14:4a:fe:
                    34:60:1f:f1:36:3f:90:2c:69:0b:a5:ea:84:d5:bb:
                    55:7d:29:9f:e6:b2:9e:18:be:c3:bf:95:ba:f6:77:
                    8d:a0:3e:e2:c1:57:b4:7f:50:d7:be:bd:cf:d9:5d:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:43:08:98:D0:93:6B:2F:0D:0E:B8:D9:DF:A9:FA:11:9A:7E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:38:12:9b:75:1b:4d:5b:5d:e6:6d:9e:79:e8:01:2f:40:
         5b:58:e5:d9:d9:63:f6:78:92:ed:66:3d:c1:66:7f:18:81:f5:
         77:c9:3f:fa:f1:92:43:4f:9f:e5:17:b4:1a:b4:3d:6a:e0:19:
         b0:99:10:92:78:21:5d:97:b5:dc:d1:32:a6:65:8a:0d:6e:2a:
         6d:63:b0:c5:b7:c2:a1:e5:71:12:7b:cb:1d:eb:39:a7:31:64:
         87:3a:93:71:6c:95:d6:58:2b:4a:d8:d2:de:13:f1:1c:89:5e:
         ce:29:47:e0:50:39:54:80:ec:a1:82:51:f2:e5:6a:55:7e:95:
         75:1f:a3:fa:26:0f:67:8c:ae:f1:10:08:95:22:85:cf:f5:99:
         4f:f5:6c:73:f6:0b:65:5f:40:69:31:06:7b:01:c1:4b:44:42:
         be:3b:0d:ff:26:4d:60:c6:40:04:f9:77:10:b3:9e:e3:a3:80:
         2c:1d:ec:a2:69:bb:9e:5e:60:7f:fc:d6:57:cc:e3:d3:69:ed:
         20:28:a9:73:84:d3:fa:5e:56:d2:6c:63:bf:f0:60:36:ed:a2:
         3d:f0:43:79:0b:b3:2e:5c:97:43:22:7f:e5:88:60:47:ac:ff:
         94:cb:bd:32:52:ea:aa:0f:2e:8a:66:16:c0:22:69:91:42:fb:
         2d:c3:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:48 2025 by rpki-client