Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa
File:                     6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa (raw, json)
Hash identifier:          6ILAGfQZJzSEVphzX9yfgnTu9rNflx5YEbvu/mE3q4I=
Subject key identifier:   E7:75:BB:A9:59:68:8A:1C:F5:BE:B6:C7:92:AA:43:1B:4C:A9:56:83
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F432858481F652A3A5FA1C02FFCE7D480
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     33359
IP address blocks:        67.43.80.0/24 maxlen: 24
                          67.43.81.0/24 maxlen: 24
                          67.43.82.0/24 maxlen: 24
                          67.43.83.0/24 maxlen: 24
                          67.43.84.0/24 maxlen: 24
                          67.43.85.0/24 maxlen: 24
                          67.43.88.0/24 maxlen: 24
                          67.43.89.0/24 maxlen: 24
                          67.43.90.0/24 maxlen: 24
                          67.43.91.0/24 maxlen: 24
                          67.43.93.0/24 maxlen: 24
                          67.43.94.0/24 maxlen: 24
                          67.43.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:2a:3a:5f:a1:c0:2f:fc:e7:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=aa322207-b9ba-4708-acd1-39f2282b20e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:79:20:0b:56:38:ef:52:19:28:34:b2:73:f9:
                    df:33:98:82:a4:7b:86:33:39:23:28:05:e6:a3:cb:
                    e6:eb:f7:f6:ec:de:40:8b:b0:d5:70:0c:5a:6f:c9:
                    99:af:a5:28:db:81:22:f7:98:73:78:14:53:e0:42:
                    0b:74:99:a9:c6:94:17:23:33:8c:2e:6c:11:99:85:
                    33:a6:56:6f:c0:be:9a:2e:1e:4e:ba:a0:da:fa:ab:
                    4d:9d:ef:c3:9a:67:2a:0b:bb:2f:97:6a:1b:a0:83:
                    9a:d7:fa:ff:2f:c1:74:92:7e:fb:6d:ff:72:65:c5:
                    d6:fe:4a:4f:58:a2:fd:85:c8:c1:a9:02:1a:99:f9:
                    73:e9:7a:c7:71:93:0e:25:26:95:79:1a:fb:83:1a:
                    b3:74:76:d0:3a:42:68:39:9b:b9:80:a9:2c:7d:5c:
                    1a:a1:44:aa:ed:fd:92:a2:ac:9f:d5:9d:fb:22:9c:
                    4e:26:ab:bf:14:99:63:30:a1:e4:61:2e:06:51:eb:
                    c4:12:62:d6:a5:d9:2a:2c:d9:74:0f:28:12:a0:30:
                    ac:f8:42:0e:47:4c:8a:be:4d:85:3f:21:8a:14:a6:
                    65:15:05:58:0c:83:92:05:2b:fa:a2:9d:5b:11:ec:
                    6a:99:cc:fb:8c:ab:d1:59:f6:5f:cd:49:c1:4f:8b:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:75:BB:A9:59:68:8A:1C:F5:BE:B6:C7:92:AA:43:1B:4C:A9:56:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.80.0-67.43.85.255
                  67.43.88.0/22
                  67.43.93.0-67.43.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7f:25:92:28:34:94:c6:80:c1:54:78:23:22:25:79:ba:d1:
         52:0c:f8:2a:90:b6:e4:a4:e3:84:98:e3:2f:d2:43:df:6b:cf:
         5a:88:6c:f1:5e:81:1f:9c:de:0a:24:4c:86:ed:bd:e5:c9:38:
         05:83:dc:4e:04:23:ae:d4:5e:68:88:90:02:91:d1:86:46:7c:
         87:ed:7c:08:20:92:af:a7:6b:0f:9f:7b:e0:cf:dc:05:f6:34:
         ae:85:ed:5f:2b:0b:ad:33:3f:69:0b:f0:bb:dd:b5:34:97:8a:
         5b:9b:f4:54:9b:b7:c6:79:ac:b2:c5:76:a4:57:2b:41:98:ed:
         f7:09:5f:31:95:e3:e4:da:11:cd:bc:4b:82:fe:7c:54:f4:bd:
         a9:16:6e:22:30:70:60:55:a3:ed:64:f0:b5:47:f9:be:b3:9a:
         63:3e:de:35:34:9e:c8:e0:a0:79:9f:a1:55:c7:33:7d:b6:11:
         6e:17:75:df:d6:a5:d2:4c:16:6f:44:78:bc:e6:f2:50:8e:67:
         89:6b:a0:81:b8:81:b2:70:f5:01:9a:db:a5:ca:00:5c:3d:04:
         c8:35:57:a0:aa:f3:15:bb:d6:0a:eb:71:e1:72:1b:d6:55:78:
         0c:13:7a:2f:ee:1c:01:8e:99:e6:aa:4e:3b:84:61:0f:a2:e3:
         bd:a9:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:50 2025 by rpki-client