Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b1a610e0-b222-3681-807e-2bdaf3392014.roa
File:                     b1a610e0-b222-3681-807e-2bdaf3392014.roa (raw, json)
Hash identifier:          G/Y7J9+SRQRa9B8OxqhyiBj6V3sZOW6nXu4QZnbkUXc=
Subject key identifier:   DE:44:73:48:2C:DA:46:35:C6:1A:3D:E0:AF:0B:3F:9B:B6:0C:F2:D3
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584812D52EDCCC62AB35B82AA180
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b1a610e0-b222-3681-807e-2bdaf3392014.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     6453
IP address blocks:        64.7.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2e:dc:cc:62:ab:35:b8:2a:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=54df11db-8a8f-445f-b8d2-47540316ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:00:88:03:72:a6:cf:6c:12:37:fb:91:08:
                    59:6c:07:72:cf:23:a9:6f:07:7a:08:b1:17:0b:c0:
                    be:62:fb:28:c5:4c:8c:d3:0c:f3:5c:8e:96:8f:8c:
                    5a:b8:39:33:97:10:57:92:c9:d2:67:96:5e:22:48:
                    00:50:5d:01:00:f9:3c:e5:a4:48:e3:64:7c:2d:d0:
                    c1:cb:13:88:22:c8:ed:8d:53:87:40:af:4f:26:a7:
                    5d:24:e3:fa:51:77:3b:f7:aa:3a:5d:13:62:e4:64:
                    92:2d:7f:43:0e:0d:45:c2:22:a4:d3:7b:db:04:ed:
                    46:54:c0:b9:5d:d4:55:de:bb:cc:c0:f8:0c:d8:d7:
                    4e:a5:3d:c4:6b:56:20:fb:1f:f2:de:ec:2c:77:ba:
                    dd:e4:44:74:c3:af:ba:7d:a2:d3:a2:49:62:4c:e0:
                    76:43:aa:94:71:44:83:0c:14:0d:37:49:f6:22:22:
                    9a:b8:15:1f:a3:b7:92:d5:8d:06:20:ba:d6:7b:e2:
                    22:af:2e:20:df:24:25:4b:ee:11:9f:e2:4f:2a:02:
                    db:ab:00:36:b6:e8:59:7e:3c:92:e9:12:77:ca:72:
                    2c:61:87:e1:6e:a5:ce:a3:03:58:90:7a:43:34:52:
                    b1:07:5c:4d:17:00:a4:d7:2a:7b:89:5e:3a:fa:b8:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:73:48:2C:DA:46:35:C6:1A:3D:E0:AF:0B:3F:9B:B6:0C:F2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b1a610e0-b222-3681-807e-2bdaf3392014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:36:0d:2c:c8:95:22:05:8a:8a:18:9c:ed:d1:d2:7b:cb:98:
         ea:2b:28:da:85:78:2b:91:60:37:69:d2:31:a8:7f:16:93:1f:
         2d:a2:0d:7a:8e:7e:b2:84:4e:09:42:7a:98:88:41:c7:f7:ba:
         ee:70:5b:83:56:48:d1:5c:8b:14:33:d0:03:cf:30:18:c7:48:
         29:60:ba:ab:1e:92:b7:83:ca:1a:23:25:d6:f0:f8:ec:62:5e:
         fb:2f:0e:c2:f5:b2:c3:b7:de:f0:5f:16:73:60:ba:96:d4:e3:
         38:93:b9:c9:37:8d:b3:bd:cd:73:c0:0e:be:ee:f8:e8:80:09:
         56:b9:9d:6e:e7:90:da:8e:d5:78:ac:e7:1b:c0:0a:b8:7a:1c:
         68:b2:ba:f3:57:fd:59:bd:6d:02:db:e1:fb:05:7e:17:fe:01:
         57:dc:e8:a7:65:49:5a:c4:0b:e6:6e:b8:4a:c8:dc:fb:ea:ea:
         73:1a:24:2c:68:44:b1:48:67:f8:2a:63:a1:15:ad:65:2b:c4:
         3b:8c:d7:23:c1:bf:51:35:44:27:b1:49:c0:ec:6f:04:66:0f:
         a8:40:7e:87:52:80:8a:62:fe:ab:7d:99:1a:01:60:35:bb:73:
         d5:08:c3:3e:f1:50:f6:ae:df:d8:80:1d:3e:98:33:ad:85:43:
         3b:f9:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:41 2025 by rpki-client