Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa
File:                     4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa (raw, json)
Hash identifier:          5UDU6Mfl36T2DwMVjx3y4faOXc+/xAkIBFWs7o9go1g=
Subject key identifier:   02:C9:DC:DE:58:EB:75:FC:B7:D9:55:13:20:24:3C:FD:A6:7A:91:AB
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285848530AEAE333F2CB79D803FF80
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     131199
IP address blocks:        64.44.84.0/24 maxlen: 24
                          64.44.87.0/24 maxlen: 24
                          64.44.118.0/24 maxlen: 24
                          172.93.132.0/24 maxlen: 24
                          172.93.177.0/24 maxlen: 24
                          172.93.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ea:e3:33:f2:cb:79:d8:03:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=086ac1e3-178f-4d65-9d8e-9cdfc68e4212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:1c:4d:43:4a:f7:77:90:df:b3:3b:57:a6:
                    e0:4e:9a:a4:11:21:b1:52:36:4c:62:9b:81:cc:48:
                    ad:45:df:83:4a:38:8d:1b:58:70:9e:d9:ca:46:02:
                    f1:5c:6a:70:4f:9a:29:8d:80:8c:b2:f6:81:8d:cc:
                    fb:2e:55:c1:8d:ae:5d:fd:75:e7:6e:aa:f6:68:8a:
                    52:dc:17:33:bc:77:3d:49:28:c2:bb:08:96:13:2c:
                    dc:76:03:d5:7b:1b:d7:e1:77:b0:ba:92:98:86:2b:
                    76:d2:98:33:50:e7:c6:36:95:b3:21:7c:61:40:98:
                    8c:84:8e:e5:74:d2:5d:9d:54:76:e4:da:27:85:99:
                    c3:d6:fc:54:8a:89:2d:8f:3d:f8:c5:20:3c:d5:b7:
                    e4:98:ee:64:7a:f2:1a:c0:e1:fb:12:ee:45:11:70:
                    68:10:86:c7:15:4b:0c:5d:5b:82:52:74:63:3c:29:
                    34:e9:c0:f0:2b:35:53:d5:c5:45:92:80:b6:17:a1:
                    7b:44:45:bc:eb:2b:0b:d8:bc:22:ed:12:85:67:41:
                    08:48:a0:9e:f4:26:73:8b:d7:43:c7:26:3c:67:c1:
                    f0:be:2c:34:6e:0d:f8:1d:c6:1f:9d:3d:d0:c5:4e:
                    92:02:07:f1:9e:5d:b0:b2:9e:e6:44:53:a6:8d:c6:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:DC:DE:58:EB:75:FC:B7:D9:55:13:20:24:3C:FD:A6:7A:91:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/4672951b-5cd5-3eca-a2f3-77aaa6b34b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.44.84.0/24
                  64.44.87.0/24
                  64.44.118.0/24
                  172.93.132.0/24
                  172.93.177.0/24
                  172.93.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:15:15:0e:ab:f7:53:da:c9:d9:d5:76:a9:c1:72:21:b5:
         c5:ea:66:b8:6d:b6:f7:8e:db:6d:c4:4d:66:0f:c2:e6:ff:4f:
         9f:81:2f:e5:16:e3:6b:1f:c4:0a:20:a6:3d:e4:b1:ad:19:98:
         6e:28:38:42:77:82:50:56:78:60:b2:6e:20:5a:f2:05:54:b4:
         6f:c7:a2:35:c8:f5:af:4c:ce:44:a3:b2:e8:94:f7:f1:3f:22:
         cf:bd:60:8a:be:6e:d9:fe:31:8d:97:ee:57:e0:31:3d:08:d0:
         16:14:61:1a:91:73:f4:7a:dd:8c:d0:63:ea:27:1c:28:f4:54:
         5d:64:ff:7b:30:f2:2c:a2:3a:0c:7a:17:32:8f:5d:2b:c8:60:
         b9:1c:d8:1f:29:d9:25:44:37:7a:d7:63:1e:f5:de:fd:6c:79:
         4d:0b:8a:e0:9a:7c:72:b5:b0:79:5b:3a:89:9a:33:5e:00:fc:
         e4:42:9d:ad:1e:63:55:96:ae:a4:e8:54:8b:e8:a9:17:bc:e4:
         97:19:0b:28:be:53:88:91:06:ba:49:e1:1c:9c:0e:89:be:4b:
         93:0d:81:81:44:a6:f2:a7:8a:5c:cc:1e:3d:39:2d:a8:b6:a4:
         d7:78:64:d0:9f:b8:8b:e3:bb:76:61:80:4d:f5:8e:c1:cb:dd:
         ea:78:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:20 2025 by rpki-client