Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/7099634c-b346-3c7a-a956-ddc352bddc7e.roa
File:                     7099634c-b346-3c7a-a956-ddc352bddc7e.roa (raw, json)
Hash identifier:          lMzc4Eb8VPaxE3U51t02FLr3jGLr/3UsB5Bz1m01fQ8=
Subject key identifier:   5B:33:B0:35:E2:56:BF:1C:AA:43:1D:CE:A7:2B:84:95:D1:CF:1B:E5
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858480BDA75636ECB7CB32577BDA0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/7099634c-b346-3c7a-a956-ddc352bddc7e.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        65.110.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:75:63:6e:cb:7c:b3:25:77:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=3245d709-a894-4d4f-9efd-c481d1a7580a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:f1:7d:21:f3:d0:da:60:16:0b:e7:c4:3b:
                    55:04:dd:f4:ff:ce:51:ec:01:7a:d8:95:46:cb:1a:
                    84:a6:b7:75:ee:ef:c9:05:11:d5:7a:2a:8e:d9:6a:
                    46:5a:43:ba:f7:15:d7:d7:59:83:41:22:5c:a5:f7:
                    30:5f:a6:32:0c:5a:ab:fc:36:b1:61:9e:26:26:6f:
                    8b:7e:c3:d4:a9:02:59:eb:09:91:7b:78:4f:c7:d7:
                    54:8a:61:0e:4a:9a:57:61:5b:21:41:e5:4b:a6:ef:
                    73:c6:35:6d:c8:56:8d:56:80:de:b4:c5:ce:07:5c:
                    09:28:ef:59:82:84:5e:71:2f:cd:e7:79:41:e1:46:
                    b1:8f:fe:6f:b4:13:42:94:7e:c4:35:ca:0f:21:6d:
                    85:92:d9:9b:57:6a:13:e0:f6:b2:8e:25:16:d4:f2:
                    68:81:df:44:97:50:0d:aa:1d:b9:a2:f0:d6:d2:ee:
                    1d:e2:89:ca:05:d2:e4:71:60:95:b3:44:90:19:a9:
                    0f:24:e1:fe:de:b6:45:83:02:09:57:9f:15:28:d7:
                    38:bb:25:06:ff:e5:f8:c0:9a:28:41:4c:3a:75:05:
                    8a:fa:0c:22:15:f5:14:ed:88:2e:49:04:8e:7f:15:
                    ec:bd:eb:c3:17:11:a7:78:0c:f6:e4:a3:57:0f:8e:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:B0:35:E2:56:BF:1C:AA:43:1D:CE:A7:2B:84:95:D1:CF:1B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/7099634c-b346-3c7a-a956-ddc352bddc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:43:d7:4a:35:16:09:13:53:0e:d6:ad:9b:14:12:ef:72:
         ca:63:eb:e4:d3:1f:4c:35:44:8a:55:cd:e2:3f:cd:11:eb:15:
         37:f1:2f:13:80:69:18:db:2e:8d:8c:d5:a1:95:8e:da:1f:38:
         0c:c7:92:97:08:fc:93:ce:54:9d:57:c0:02:ac:eb:48:c2:c2:
         6d:eb:d5:1c:12:91:c8:05:cd:99:32:50:e9:53:5c:33:52:32:
         3d:a1:7b:aa:3a:fb:81:a6:82:ae:66:d0:ac:0b:dc:49:1e:ee:
         65:9f:41:18:bc:06:9e:33:2c:e4:23:4b:96:93:d1:0e:11:10:
         46:e2:c2:ce:15:df:d6:d9:cc:54:9e:0c:f7:cc:f7:ae:a5:aa:
         f1:89:3e:20:5e:4d:ee:fc:a3:2c:f6:23:fa:64:c7:ca:f9:f0:
         ff:23:0d:df:eb:3d:91:b1:df:78:61:26:5d:89:90:0f:7e:bb:
         2b:9d:76:a8:66:95:d0:1c:32:f2:dd:f5:bc:b3:f0:b9:49:14:
         45:7d:d5:d8:f1:a8:bf:ae:ed:95:46:e4:89:7a:5e:1f:ca:d5:
         a7:0c:2a:30:b0:43:d0:ba:c5:99:3a:b2:d6:41:1a:a2:71:15:
         50:40:0b:bc:78:84:b0:c8:5f:a1:cd:37:ab:9c:96:51:f1:1c:
         4c:46:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:43 2025 by rpki-client