Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa
File:                     12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa (raw, json)
Hash identifier:          IwMhB1mfIkN7uNVHnQ1VBakMiXbNriosJd5N7IaYHU8=
Subject key identifier:   E1:6C:3B:4D:D9:BA:55:2D:15:FD:F2:1F:C4:03:24:49:2D:A4:6F:78
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584849456F58B672A7686619C950
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     395406
IP address blocks:        64.191.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:6f:58:b6:72:a7:68:66:19:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=511f74f7-e858-4148-a49b-9ed03583ef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:16:93:ae:09:a8:ad:7a:5c:04:18:9e:3c:
                    42:4e:58:d2:0d:cd:d4:12:6a:02:1b:0e:cb:47:1c:
                    77:49:0a:9b:5e:91:87:d5:b1:b2:d1:a5:37:e5:eb:
                    97:6d:7f:b3:ff:33:f7:1e:57:8f:50:77:74:60:ea:
                    fb:16:5b:5b:b1:15:ca:3c:4b:f2:e0:e3:99:bb:56:
                    54:e2:7d:ca:da:51:21:93:d5:5b:65:b9:71:81:63:
                    6d:0a:c0:d9:a9:bc:ec:fc:97:14:e4:d0:9f:e9:eb:
                    82:2c:d9:f3:c8:d3:a9:66:0a:c4:60:c5:cc:58:d8:
                    eb:ab:6e:7a:13:5e:91:9a:69:1a:52:4c:75:f5:bb:
                    28:23:ce:eb:65:13:34:a3:9f:18:59:dd:95:b4:22:
                    79:ab:b6:bf:f8:aa:d5:38:71:2e:c0:7f:0b:a5:d8:
                    cf:e7:cd:6a:93:db:7b:6b:4d:e9:30:3e:ab:df:92:
                    f2:2e:c6:97:e7:56:5d:a1:bb:e2:5f:9d:16:27:9a:
                    72:e3:08:10:0d:56:d2:16:74:aa:30:22:2b:c9:7d:
                    0f:54:81:4a:ba:44:8e:c0:39:e8:9e:a2:70:2a:8f:
                    e9:ea:43:57:71:ca:f0:7a:98:3d:49:ee:c5:6e:b1:
                    69:aa:ab:a5:23:af:ea:e2:5c:36:ad:8f:dd:86:42:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6C:3B:4D:D9:BA:55:2D:15:FD:F2:1F:C4:03:24:49:2D:A4:6F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/12fb4297-e72e-38ca-83cc-aa14397d0e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fa:f3:26:56:9c:08:b7:40:aa:9a:d8:70:7f:c6:b4:6d:2e:
         3a:2b:37:fe:ca:dd:a5:89:2c:ae:77:0d:51:d6:9b:5a:68:36:
         e2:1e:90:84:4a:bb:84:a1:a3:4b:bb:39:a2:fc:a1:48:2c:99:
         8d:94:33:dd:7f:4a:17:50:26:60:78:4f:d8:dc:15:f1:d0:ac:
         64:0c:fe:9e:5c:af:98:81:69:ca:68:b3:b1:71:5e:e5:c9:d5:
         4d:39:c1:4a:c6:06:b1:aa:1b:27:cb:26:b5:35:53:99:de:82:
         06:d0:c7:90:f9:86:e5:bd:a1:d9:4d:6a:3c:50:ae:f7:f8:3d:
         29:dc:b4:2e:73:c9:cc:64:7c:6c:28:fb:7c:da:8f:c2:55:2b:
         83:59:6d:06:28:55:7c:be:9c:21:ff:41:bb:a4:d6:26:3a:6b:
         0f:2f:56:2d:0e:e9:c9:40:cf:bd:78:d2:37:9d:62:1c:3e:dd:
         73:d7:1d:e6:38:ce:26:ce:c7:6f:ee:37:88:ba:fa:84:ac:40:
         71:1c:bd:40:2f:8d:a9:de:a8:18:af:42:2e:45:38:d0:b7:59:
         a9:1c:bf:4f:18:29:53:9e:91:94:65:72:d7:46:4a:44:99:ec:
         03:5e:fd:cd:b6:be:16:6d:ba:6d:1f:3d:86:86:ad:65:a2:4e:
         b0:19:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:31 2025 by rpki-client