Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/e638b9c5-41cb-3060-bd86-7218f758e99d.roa
File:                     e638b9c5-41cb-3060-bd86-7218f758e99d.roa (raw, json)
Hash identifier:          eGZrwPUNQ/arB3NZ0f3QWSu51iY+gTKi0p/LfAbROEk=
Subject key identifier:   7C:F4:07:FE:B5:23:0F:1B:CF:39:BB:3B:9C:4F:7A:B0:02:37:86:2A
Certificate issuer:       /CN=410cdbf9-164e-4f04-8897-d002dc917140
Certificate serial:       010D0C9F432858487CEB2F3C3A81887568B8CB00
Authority key identifier: 1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/e638b9c5-41cb-3060-bd86-7218f758e99d.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     393717
IP address blocks:        192.69.65.0/24 maxlen: 24
                          2620:9c:c000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:2f:3c:3a:81:88:75:68:b8:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410cdbf9-164e-4f04-8897-d002dc917140
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=82d7acaa-8e08-4941-b606-f54be5307f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:b7:a4:24:62:26:1f:37:92:cc:d6:8a:96:
                    83:40:03:0a:f0:09:eb:bc:be:b7:14:5f:31:e3:37:
                    30:1b:c4:b0:e2:44:64:b4:ee:87:50:10:51:38:cc:
                    f8:05:9e:8d:10:ed:81:54:a2:68:1b:d0:74:68:22:
                    55:8b:9c:29:37:b2:ec:c8:f9:c1:cc:b0:26:9a:92:
                    2a:93:de:00:dc:17:4f:bf:c6:f5:20:e4:b6:3b:e4:
                    cd:26:7c:cd:82:c4:be:43:49:fa:25:14:8b:a1:8c:
                    96:18:2a:ff:46:e4:53:28:de:c0:53:9b:3f:8a:7d:
                    7c:10:06:55:d3:79:c8:60:36:4d:40:cf:28:42:93:
                    7b:97:a9:4e:4d:d8:b3:97:e8:a8:d9:39:85:41:7c:
                    2e:a3:67:be:57:88:1d:1c:f9:9f:29:46:43:3e:7d:
                    5d:d5:1d:60:03:1f:ec:de:43:bc:8e:dd:f6:a2:4c:
                    25:c3:69:f4:f4:bf:5d:9f:e7:35:ce:26:3f:f3:01:
                    df:de:19:67:01:08:36:8f:47:2b:22:0b:43:11:d6:
                    3b:1d:bb:42:9e:94:6c:a0:bc:5f:54:95:c1:9a:e3:
                    50:2d:24:66:db:e9:62:d4:e8:50:70:10:e1:d6:b3:
                    7b:1d:b2:66:ea:52:dc:b6:55:f4:9f:62:6c:b2:45:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:07:FE:B5:23:0F:1B:CF:39:BB:3B:9C:4F:7A:B0:02:37:86:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/e638b9c5-41cb-3060-bd86-7218f758e99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl

            X509v3 Authority Key Identifier:
                keyid:1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.65.0/24
                IPv6:
                  2620:9c:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:93:90:a1:0c:77:55:e7:60:f3:7c:d4:c2:41:ca:ed:7d:79:
         ca:a9:a5:1d:b0:e6:d7:ba:4e:9e:fa:8b:c3:62:e0:4a:06:b7:
         a7:e6:a0:8a:44:95:4d:19:9d:4f:06:63:27:a7:44:8d:ef:79:
         bd:23:65:82:ad:35:2d:f0:28:1d:e4:35:4a:8d:32:8c:bb:7a:
         e1:76:7d:02:26:08:e5:33:7b:0f:24:ba:2f:6f:c9:11:7f:e4:
         6c:04:1c:a4:34:61:9b:e5:0b:54:9f:9e:dc:0f:81:92:02:a8:
         c4:eb:6d:b2:bc:95:bc:93:6a:f7:c5:f2:2f:5c:67:44:6a:44:
         cd:20:4b:e1:4e:e7:dc:a7:58:ed:18:fd:fc:15:b4:50:e6:34:
         c8:e8:0f:6d:cd:02:0a:ec:9e:1a:31:05:bf:3c:19:ae:fd:f0:
         73:9e:7a:d9:08:45:92:af:ac:db:1f:18:28:d1:ee:e4:e2:35:
         65:01:4e:41:a7:df:86:b0:ab:fb:58:54:71:f6:44:39:b1:6e:
         c6:27:e4:40:0b:6c:78:5d:c3:8c:3f:93:a8:ec:93:46:7a:5b:
         0d:e9:b2:f0:87:44:ae:f2:1b:08:0f:0d:9a:1b:e7:55:ae:e6:
         28:00:de:05:a1:9c:0e:16:b3:43:70:b4:49:63:6f:84:2d:67:
         28:0a:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:22:08 2025 by rpki-client