Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/64fede1b-d9a1-3ff7-8138-c204d8636099.roa
File:                     64fede1b-d9a1-3ff7-8138-c204d8636099.roa (raw, json)
Hash identifier:          er36C2a8A9lkWvAZWZmyLYCI6yTffLvbLXj+nN4dq3k=
Subject key identifier:   8B:33:89:70:5A:F4:2F:87:78:DC:13:37:9D:3D:0C:A6:F0:39:74:1A
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F43285848037B6D7A3E5B5E114A445580
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/64fede1b-d9a1-3ff7-8138-c204d8636099.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     23520
IP address blocks:        63.245.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:6d:7a:3e:5b:5e:11:4a:44:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1d7fb19a-3860-452f-baef-d7b804bb3a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:de:4c:aa:db:80:46:7e:d6:33:86:51:ab:
                    98:dd:55:db:f3:e8:6c:7f:39:47:d7:bd:46:42:bc:
                    07:87:c0:77:d5:02:04:5d:19:3c:4b:00:f8:c4:b6:
                    ea:5a:d0:e7:e9:0e:a5:19:65:b4:22:bf:3a:99:ca:
                    3a:e1:9c:28:06:71:67:ed:0c:8e:cc:ff:c8:48:c6:
                    6c:b5:e0:9e:b4:f2:d1:87:1e:d5:a2:b0:59:f2:bc:
                    51:b4:6f:5b:59:6b:4a:3b:58:5c:fe:c9:73:12:a6:
                    1c:b3:e6:bc:4d:b7:45:1d:1e:b3:fa:8e:13:e9:91:
                    3b:37:37:47:dd:51:2b:f1:00:5c:49:bc:f2:af:7c:
                    52:8c:6b:71:6a:ff:9f:c0:d2:55:7f:e4:f7:09:7b:
                    09:8b:77:79:c7:a9:5f:b7:42:7d:2f:20:8c:b5:fe:
                    70:67:18:9d:33:24:fe:af:d7:77:10:bc:60:45:21:
                    85:64:f0:3d:a3:15:27:75:8e:b5:5f:a6:7a:93:24:
                    5a:5c:55:e0:c7:b6:6b:41:2c:15:d2:7e:9a:81:46:
                    86:ad:a6:b0:0c:2f:eb:8a:54:14:69:b2:ef:3a:77:
                    44:79:dc:18:17:df:bf:bb:d6:ee:e2:44:b3:b1:13:
                    e2:a5:62:d8:58:f1:3b:80:6a:be:70:26:0c:a1:5d:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:89:70:5A:F4:2F:87:78:DC:13:37:9D:3D:0C:A6:F0:39:74:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/64fede1b-d9a1-3ff7-8138-c204d8636099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:95:5f:2e:98:60:91:04:24:5c:18:8b:d1:2d:78:d4:97:f0:
         98:44:e7:0b:20:9a:32:3b:3c:0a:7f:ba:2e:24:c0:79:fb:72:
         26:91:29:5b:de:e4:c4:7d:ee:41:36:4a:53:59:a3:be:bc:16:
         77:63:16:f3:57:19:d1:07:38:e1:58:44:b5:67:dc:91:e3:f1:
         16:1a:e5:c2:7d:bb:1c:df:8f:9b:14:42:40:99:af:04:df:64:
         22:1f:c8:75:4d:a4:51:1f:49:27:84:34:16:01:83:49:36:e8:
         0a:88:ec:42:5a:8b:73:52:d8:9f:04:b2:11:9c:20:d3:0d:0f:
         a6:46:2f:70:45:cd:b3:7c:be:a3:2d:05:8c:eb:90:a0:0c:71:
         e0:e7:0a:d0:55:d3:cd:26:0f:6c:03:cb:39:3f:8b:05:1b:46:
         45:87:8f:9f:86:70:05:84:c8:67:6d:fd:4c:4f:9a:37:cd:6f:
         de:98:2b:95:f2:0e:20:19:9a:08:aa:35:04:de:bc:81:eb:a2:
         9d:75:96:a0:07:5f:16:4e:e2:03:8e:dc:b4:b1:eb:c2:a7:a3:
         2c:37:90:ab:88:69:00:b7:c6:3b:09:a4:0d:55:44:e1:07:35:
         b8:a7:33:ac:db:a8:71:6b:3d:82:18:d5:ad:54:93:b0:48:2e:
         71:11:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:55:32 2025 by rpki-client