Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/158e3dc4-8304-3210-95c9-bad4cd03603c.roa
File:                     158e3dc4-8304-3210-95c9-bad4cd03603c.roa (raw, json)
Hash identifier:          4as/WV9VJ3M/31fixP0H80HFKHq8UZzUntl3U1YYzGI=
Subject key identifier:   89:70:C5:10:3F:C9:B3:5C:18:AC:35:39:E6:71:CB:68:9D:81:C4:AB
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584832F028345CE3496AFD04F380
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/158e3dc4-8304-3210-95c9-bad4cd03603c.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     32161
IP address blocks:        64.38.212.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:28:34:5c:e3:49:6a:fd:04:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a50d5bac-3833-44d1-bf95-b8ebf2362580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:63:24:31:7c:04:27:bf:3e:d1:eb:aa:6e:82:
                    49:46:4d:72:6d:0d:7a:6a:85:10:c8:b4:0d:61:68:
                    50:a0:11:ec:ae:02:18:8b:c6:58:7f:16:37:08:fc:
                    f9:8c:64:d1:01:09:b4:4c:86:b7:1a:ed:9d:dc:83:
                    e2:05:32:71:93:da:de:81:6d:f2:75:99:4c:d0:21:
                    6e:60:6e:b2:ca:e6:93:6d:9e:13:b1:4d:20:e2:05:
                    fc:6a:73:51:99:26:f4:60:e5:d6:6a:16:19:33:e5:
                    71:74:b5:fc:51:38:b4:13:c7:31:d9:c6:08:60:cb:
                    86:a8:1b:0f:a1:bc:d4:7e:63:db:7f:45:83:38:2a:
                    c8:b1:3f:e2:9b:12:ea:87:29:b0:1b:38:f6:5a:dd:
                    b7:9f:6c:a1:d7:ab:35:5f:f1:39:a6:85:79:82:5b:
                    6a:5e:82:70:d2:1e:93:6d:b2:c0:44:90:6e:0f:d3:
                    25:c2:27:25:29:de:47:4a:df:68:4c:b9:81:fe:94:
                    6a:11:0e:f4:d2:b3:db:0a:d2:f5:9e:e5:04:65:7f:
                    c1:22:ec:58:74:12:69:cf:d3:b6:34:02:1a:71:b3:
                    12:f1:6e:36:93:4c:0a:57:ba:f5:2d:42:1c:dd:62:
                    63:eb:53:bf:c9:71:a6:75:f3:fb:50:6b:ac:b8:e6:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:C5:10:3F:C9:B3:5C:18:AC:35:39:E6:71:CB:68:9D:81:C4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/158e3dc4-8304-3210-95c9-bad4cd03603c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:7b:55:60:05:a2:18:ee:7c:1c:2b:b9:69:bd:2a:8f:d4:
         b7:14:3d:43:33:3b:97:f5:85:21:4b:46:d0:3a:6a:30:1c:0e:
         4d:0b:44:b2:51:2e:d3:9d:c0:c1:59:86:36:ae:6d:f7:9e:1c:
         b5:b7:c1:4e:d1:ff:77:21:28:00:ce:96:34:86:4c:5f:58:a6:
         14:dd:09:bd:f2:0e:04:28:02:28:d4:cc:0c:dc:f8:09:bc:31:
         31:89:74:51:d7:16:1a:18:2c:ce:e0:52:e2:e0:d6:a5:ef:87:
         0e:b9:7d:71:2d:3d:39:c0:29:3d:89:c4:13:a7:89:bf:df:51:
         3f:a0:5b:ba:bf:43:11:14:81:d2:42:33:7e:db:1b:73:bf:9c:
         62:96:54:84:b3:70:b4:18:26:e5:da:0d:9b:58:7e:d6:85:bc:
         4c:ac:f7:b0:41:86:4d:ec:06:fe:e7:6e:66:d6:c0:ca:19:9e:
         48:50:06:1d:97:a2:7b:27:c4:ae:a8:24:24:a7:9c:4d:72:68:
         a6:39:e4:ec:f5:44:49:b5:65:ff:a1:2a:47:ff:de:75:6f:be:
         99:cc:da:0a:1f:3e:6f:63:50:3b:7d:5d:0f:8f:22:a5:3f:4e:
         68:c5:57:f7:06:41:ba:6e:a2:01:52:d7:a7:68:2d:27:34:3b:
         2d:d0:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:38 2025 by rpki-client