Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa
File:                     6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa (raw, json)
Hash identifier:          nZGIibW8cGxLHHECeF9h8mtPjLgZPlJLpu45sc1LmwA=
Subject key identifier:   B1:B7:17:29:13:D2:D2:14:31:2D:94:CB:06:7E:7B:A2:CD:E4:4F:26
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285848705AF4EC2CE94988E5226100
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        64.22.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:f4:ec:2c:e9:49:88:e5:22:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=34257124-0434-4d88-bfdc-3e65562513a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:d3:aa:a8:eb:02:a2:58:74:69:4c:9d:c1:
                    3f:0b:67:43:23:59:e1:c8:76:e8:06:ad:21:2e:ea:
                    5d:68:c8:75:71:5a:51:12:99:b4:0c:28:b1:ab:03:
                    46:df:68:1a:87:3e:f8:23:0d:5c:46:94:0f:fe:14:
                    82:37:2f:74:c7:3a:9c:c6:37:51:0c:72:81:c1:d1:
                    ef:c2:fe:30:32:38:94:29:b5:0e:dc:45:41:bb:34:
                    b1:58:b3:2e:8d:4c:77:6b:d0:10:17:9e:21:a1:f5:
                    2d:5d:b0:b9:70:62:0d:01:2c:cf:b8:60:2d:3a:a3:
                    18:ad:94:c9:8e:e4:f3:ab:41:8f:93:89:a3:d9:6e:
                    dd:c9:b1:ef:4d:14:9d:35:02:03:d8:d2:07:a1:c6:
                    75:99:c1:d1:1e:7e:fb:c0:6b:44:5d:96:84:0e:8c:
                    ed:fb:f5:cc:5c:99:19:c0:fa:52:24:a4:00:6e:63:
                    a4:7b:49:34:ac:69:68:3f:65:e2:90:21:76:7e:eb:
                    ce:9d:69:85:a8:92:b7:b5:fd:f6:41:bf:da:b2:8b:
                    7f:e1:91:13:c0:f8:e7:07:e4:17:13:d5:93:5e:75:
                    15:e6:b7:28:f4:68:eb:9d:aa:d9:ef:13:06:74:ec:
                    98:6c:d1:55:99:37:7b:f0:bc:f3:bb:55:8b:cf:1f:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:17:29:13:D2:D2:14:31:2D:94:CB:06:7E:7B:A2:CD:E4:4F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:15:f8:2b:4a:d4:fc:01:30:cb:e2:17:38:f9:ce:9d:01:
         67:4d:96:16:eb:93:3f:fd:24:f4:b7:87:89:04:f9:a0:30:12:
         57:83:d5:21:55:e0:6a:cc:4b:14:0e:61:67:fb:cb:69:c5:1b:
         4d:a0:2d:0c:6d:17:59:4b:c1:2c:96:d1:28:1d:7a:b6:31:57:
         2c:55:35:e6:35:d1:e0:51:fe:aa:58:ac:97:f7:35:47:01:e5:
         9e:70:dc:48:0c:76:7a:18:f3:43:f7:c9:b3:15:0a:27:c7:61:
         3e:86:cf:e4:85:0f:7f:d1:ff:25:c7:88:26:a6:34:87:4c:e3:
         d5:8c:d9:72:cb:2a:cc:0f:1b:9f:80:4c:6f:24:e3:27:88:f7:
         93:8f:a9:0f:4f:fd:4a:73:a6:f5:e1:b6:bf:79:f3:79:d3:24:
         c4:4b:3c:34:5c:2e:d8:6d:72:8b:eb:1c:3c:cf:b4:c7:99:50:
         ce:06:e8:76:15:0f:a4:e3:bd:c2:d7:77:c1:a0:11:78:8b:2b:
         6b:4a:42:7c:0a:30:22:0b:76:3c:0f:21:8b:d9:fb:92:43:3b:
         07:3c:d2:bc:53:69:fb:41:53:83:81:e3:66:c5:eb:0a:26:7e:
         a1:9c:cb:0d:73:74:6f:8c:d0:2e:aa:1d:9f:b3:a9:66:27:6d:
         37:13:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:53:46 2025 by rpki-client