Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/6aa9575c-6077-3533-80ea-cd584143b27a.roa
File:                     6aa9575c-6077-3533-80ea-cd584143b27a.roa (raw, json)
Hash identifier:          NP5d2c8uTlh94lwQc0xp21MGAW5c91C418xqsu4TXT8=
Subject key identifier:   9C:34:BE:A6:69:A5:77:4E:3D:6C:64:02:26:77:2E:D0:80:3C:94:E9
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858480EA51793C593FEFBE0F62CC0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/6aa9575c-6077-3533-80ea-cd584143b27a.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     27385
IP address blocks:        64.39.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:17:93:c5:93:fe:fb:e0:f6:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=7d35c59f-5920-48a4-bb42-0b7fa099c5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:f0:1b:c5:2d:25:da:b4:a0:96:b3:12:ff:
                    47:56:2e:47:f5:93:d4:64:cd:cb:df:49:95:5d:5f:
                    06:c5:ad:f1:cd:ed:b6:27:95:97:36:96:c7:f5:52:
                    0f:9d:d8:45:e5:a2:aa:44:f5:b3:54:cf:b2:b7:60:
                    23:32:ae:b3:83:d7:c7:d2:ae:ee:c3:a0:8d:ca:41:
                    61:3d:78:ca:3e:7a:0d:12:11:dc:70:36:be:5a:9f:
                    a2:f2:8e:10:3e:cb:de:52:b2:39:31:d2:15:c4:0f:
                    13:b9:8e:8e:5c:e2:6a:45:8c:08:cb:f4:52:d7:88:
                    2d:7a:74:9b:aa:d8:c2:5d:77:5f:ef:0a:7d:6c:78:
                    2a:fe:80:0e:b5:fc:3a:e8:dd:a1:a0:2f:91:e0:69:
                    8a:2e:7e:ab:e4:69:36:65:a9:4a:a9:03:a9:03:0c:
                    95:df:d5:f7:6f:3a:88:43:24:4f:48:f9:ae:04:8d:
                    a9:1b:25:9b:59:e8:e7:f5:3f:85:ff:14:7f:b2:29:
                    1c:ec:08:8d:45:c1:e8:84:0c:26:00:99:3b:40:95:
                    44:71:a0:31:7b:36:ac:ba:12:5e:15:5a:d4:0d:6b:
                    e4:d3:c4:9f:d2:d1:be:43:93:60:11:62:46:75:10:
                    c5:f9:7d:35:b2:89:70:e4:73:b2:97:92:0b:df:fe:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:BE:A6:69:A5:77:4E:3D:6C:64:02:26:77:2E:D0:80:3C:94:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/6aa9575c-6077-3533-80ea-cd584143b27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:20:d8:6a:00:25:2d:07:b8:0d:f3:26:de:43:a3:74:9c:
         84:b8:80:f1:65:01:c9:d5:12:02:35:c5:17:d5:6c:ab:f2:d7:
         58:5c:2a:5f:0f:e1:93:de:f2:d9:cc:5b:4d:12:83:63:41:91:
         5e:d8:f8:f7:5d:61:ff:ab:d0:bc:da:db:7d:79:ef:b1:91:d9:
         96:cc:0a:d8:50:4e:0f:a5:c6:69:15:3e:51:52:78:68:72:94:
         65:7a:e8:97:94:5c:5c:4c:ee:ec:00:95:cd:31:6c:80:8e:66:
         4f:49:b4:ad:c4:6b:09:f5:d7:d7:3c:11:8b:be:cf:74:8b:47:
         91:0c:a1:a0:65:f2:04:43:f2:1a:01:08:23:0a:8f:a7:fe:b6:
         a8:dc:eb:50:4d:9f:4e:55:8b:4b:ea:dd:42:9b:c9:98:13:4f:
         25:84:d7:b0:a3:c8:93:71:8f:ba:4e:b7:ac:3e:60:a7:4a:1a:
         37:a2:7b:b2:c6:26:a0:e6:e3:00:45:81:65:6b:0b:c9:e5:82:
         ee:b1:b8:24:f6:e0:95:e0:d4:48:ce:05:8f:4b:2b:de:fe:92:
         35:65:55:4c:09:f4:b3:d0:e5:e7:d4:0e:b3:47:16:13:05:ba:
         2d:e5:2b:47:3c:37:59:ad:b1:99:2d:1e:1b:8c:5b:73:bb:15:
         4e:ae:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:28 2025 by rpki-client