Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa
File:                     ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa (raw, json)
Hash identifier:          pQZAAhOavaE9lLk/PMTUwcrwLVwPVXZRUJXUB10Ma0Q=
Subject key identifier:   C5:93:2C:FC:31:44:26:5D:27:3D:F0:71:37:23:FE:DB:5C:91:CE:47
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584839EABEFD8C991F98DB3DDE00
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     27696
IP address blocks:        63.245.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:be:fd:8c:99:1f:98:db:3d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=ad53c300-633d-45d2-97c2-75e1418a3cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:d5:61:e0:69:2a:e0:ba:03:62:94:d8:e9:
                    ca:b1:4f:3a:20:b8:db:5b:17:6b:cb:1a:09:49:d8:
                    52:30:aa:8c:8c:f6:4a:80:26:1e:58:f4:d0:13:c9:
                    e9:03:3b:82:b7:9e:d4:31:38:c5:31:8d:ac:63:e7:
                    c1:9c:c5:87:5c:cf:22:37:54:5a:33:08:20:bd:bb:
                    f6:36:aa:9c:07:21:7f:cb:12:63:f6:3b:59:78:97:
                    5a:ed:0d:07:b2:5c:d2:69:bd:a4:14:24:a8:88:f9:
                    c6:68:f5:34:9a:b2:21:ff:f2:cd:22:66:e2:3d:0b:
                    94:ea:99:9f:cc:bd:f2:81:b2:d5:f2:85:07:fb:8c:
                    c7:aa:e6:d2:9c:c6:f1:76:3b:f5:f3:2e:f2:e7:09:
                    8b:16:13:83:9d:4f:dd:a2:e2:50:98:f4:5a:48:07:
                    1b:5f:48:db:1d:d1:23:64:78:cf:1b:1a:5f:8c:4d:
                    3a:fc:da:85:b9:db:f7:27:aa:98:34:44:82:66:55:
                    d8:0e:4d:a3:a9:58:4c:ba:8f:8e:c6:16:9a:f3:06:
                    c3:e7:b9:ba:01:a1:77:7d:5c:d3:16:32:eb:df:35:
                    9e:a1:ee:55:5c:17:cb:1b:89:ac:a4:3b:80:39:b4:
                    c2:c2:17:5d:07:55:9c:bc:bb:bf:9d:0b:26:db:53:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:93:2C:FC:31:44:26:5D:27:3D:F0:71:37:23:FE:DB:5C:91:CE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:12:b2:36:28:1b:19:c7:c6:3e:32:73:0e:0f:e6:53:c3:
         c1:68:11:da:24:41:8e:53:6e:26:73:41:fb:fd:95:94:80:77:
         7a:eb:18:e9:6c:d9:87:c6:32:67:1d:29:72:e0:86:dd:73:8c:
         7e:27:d4:e3:01:0e:35:77:66:6a:3a:f7:33:38:d5:2a:c2:14:
         ea:40:3e:fa:b3:aa:30:0d:b9:6d:22:5d:f9:84:c9:22:a5:63:
         8e:1f:8a:45:df:f5:b2:b7:36:cc:54:ec:1c:ea:c3:a9:b3:f1:
         e2:63:f6:bb:ad:9c:e3:0a:de:da:87:42:aa:4b:4a:4d:ee:9a:
         4a:db:cc:51:60:f0:5c:eb:be:1e:c4:4b:33:d3:76:2f:bb:47:
         63:67:01:95:e1:de:6c:84:96:ea:0e:80:2d:c4:f7:26:b5:48:
         57:49:4e:18:96:b4:58:a7:ed:bb:d3:62:e7:e8:08:2e:1d:ed:
         9a:65:22:27:01:ea:3a:0b:b2:e5:f7:95:4c:21:d5:d9:49:a7:
         46:22:2b:ea:21:8e:6e:cb:05:f7:6f:c9:82:0f:01:ea:a1:bc:
         58:2e:bd:13:ce:5c:46:dc:13:cd:ac:a7:45:f5:40:d6:22:00:
         51:a3:26:4f:9d:06:49:27:24:e7:30:c4:4d:04:ef:b1:ca:4f:
         de:83:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:49:09 2025 by rpki-client