Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa
File:                     e277ca94-a552-3ae1-979e-0ca00fd433c9.roa (raw, json)
Hash identifier:          GjsvpUxF3JuN/mkoUIjeaPiSqIbzzfXhvuIWe2EIOfM=
Subject key identifier:   A8:37:16:92:8D:D9:16:80:60:E6:4C:DC:CB:0D:28:B9:13:1C:42:AF
Certificate issuer:       /CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
Certificate serial:       010D0C9F4328584869606D1EEDF29C15E5172980
Authority key identifier: 58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     13692
IP address blocks:        64.29.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6d:1e:ed:f2:9c:15:e5:17:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=ead9a619-0ff3-484f-b233-feaba3150424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:9a:d8:a8:ab:a1:b8:b4:0e:15:bc:8d:ea:
                    2e:63:85:36:e4:7e:1f:fa:1a:a3:12:fe:96:d5:dd:
                    27:b3:07:74:ce:d7:83:74:f4:4b:fa:d8:2d:74:70:
                    ba:70:18:7b:70:88:f7:b0:a7:0f:31:49:82:8f:84:
                    ff:50:47:9e:6b:01:6e:8a:f1:38:b8:0b:42:c5:63:
                    fc:04:27:5b:3e:e8:bb:61:b0:73:71:21:54:e8:e7:
                    c3:dd:5c:d9:3e:70:17:e2:a6:b6:e4:c6:49:db:f0:
                    ef:7d:6f:c4:e5:9b:88:3d:ac:83:07:cd:60:aa:be:
                    b1:c1:fc:2a:f0:f9:e8:00:4a:7c:84:e2:7a:e6:15:
                    27:04:cd:68:60:89:41:46:c5:11:28:93:30:18:9f:
                    04:fa:36:ca:f0:b1:b8:26:68:a1:a9:7f:f7:25:b9:
                    aa:fe:29:e9:c0:20:a9:2d:3f:e6:b8:bf:28:ff:96:
                    58:38:aa:a7:9e:ea:3c:1f:28:da:17:52:80:0a:31:
                    c8:98:0e:cf:c6:8f:c1:01:3c:df:c7:cb:2d:65:0c:
                    1b:38:1f:99:93:78:9b:0b:9c:e1:94:01:9b:b6:ce:
                    93:a0:a4:ba:c9:9a:7f:b7:5c:c0:41:0f:56:b8:68:
                    b4:23:02:02:54:44:70:df:af:ec:1a:92:8c:d8:c8:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:37:16:92:8D:D9:16:80:60:E6:4C:DC:CB:0D:28:B9:13:1C:42:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.crl

            X509v3 Authority Key Identifier:
                keyid:58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:04:08:d6:ab:29:96:c3:33:85:32:04:3b:12:8a:9e:5d:
         ad:8e:cf:7d:8b:ae:88:3e:9b:e2:b6:ed:f6:b2:b6:5f:bb:40:
         f2:d7:7b:29:e5:1a:6b:1f:cd:e5:6a:a5:2b:d8:46:e6:15:05:
         70:9a:df:58:0f:89:f7:fc:f1:ce:ee:ad:80:e8:c8:9b:2f:9b:
         f5:94:be:50:b3:21:41:7d:0d:af:47:4a:2b:14:4f:45:22:18:
         e8:be:45:17:46:64:f2:50:f8:8b:7e:b4:21:94:6e:ce:66:7f:
         c8:67:bc:01:7f:f2:31:49:28:b0:29:d8:2f:c4:05:c5:a5:45:
         df:13:31:7b:23:75:b3:04:01:24:1b:d5:a9:e6:14:10:f6:87:
         88:e3:d6:59:60:68:5c:9f:92:c7:ce:51:39:29:c5:de:79:ae:
         72:35:0c:06:1a:3c:b8:5f:ad:c0:07:69:1e:2d:2f:20:53:7c:
         41:22:4d:85:de:6b:46:ff:76:e3:a5:5c:56:c5:ca:8c:1e:ba:
         5c:3f:96:46:49:15:98:50:47:1f:56:7e:4d:a2:5d:0c:ee:c5:
         27:5a:fa:e0:ff:2d:c2:80:10:48:43:00:0f:b5:4e:d5:aa:6f:
         a4:37:a6:85:38:1d:83:67:d5:b1:18:2f:c9:98:71:3a:b6:c8:
         79:d2:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:57 2025 by rpki-client