Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa
File:                     692417e7-6eff-392f-8306-bb8fa10fd75e.roa (raw, json)
Hash identifier:          RQOctAh+UxG+ULxHkEH1F5NHXH7tn1nb5TtXpvBvMts=
Subject key identifier:   BE:C4:BD:6C:26:5B:DA:0B:3A:83:2B:08:5B:EA:81:98:95:54:F0:9E
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858482EC0024F60D06AABD44BCD40
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     1239
IP address blocks:        63.223.67.0/24 maxlen: 24
                          63.223.79.0/24 maxlen: 24
                          63.223.80.0/22 maxlen: 24
                          63.223.85.0/24 maxlen: 24
                          63.223.104.0/23 maxlen: 24
                          63.223.113.0/24 maxlen: 24
                          63.223.118.0/23 maxlen: 24
                          63.223.122.0/24 maxlen: 24
                          63.223.125.0/24 maxlen: 24
                          63.223.126.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:02:4f:60:d0:6a:ab:d4:4b:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=82b8d4a8-27b1-4b64-8687-db6e47c78353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:5c:23:b4:28:b3:14:85:f8:17:23:16:7f:
                    b1:9c:41:eb:fe:ce:bf:7a:d8:02:b3:b1:24:d0:ca:
                    3e:f8:28:9e:95:7e:33:8e:f7:58:32:6e:30:c6:97:
                    fe:15:c0:aa:e2:1f:38:e8:88:52:9b:8e:fd:b5:09:
                    f1:ec:28:21:95:bd:18:f3:32:f4:eb:b2:d2:d0:59:
                    57:e5:b4:20:af:95:d9:e8:2f:08:8f:59:ce:56:27:
                    94:67:c6:14:4f:6a:d6:bf:36:59:ce:06:36:16:36:
                    24:d2:e9:c5:d3:43:de:80:31:54:1d:93:0c:f6:62:
                    5a:15:7a:4e:31:08:35:dd:42:c0:b8:d3:9a:a1:b0:
                    06:b1:f1:34:94:2c:e9:a8:c0:f5:01:94:c0:4d:b4:
                    bd:cd:f4:bf:b6:92:04:30:e5:59:9a:6c:a1:61:ac:
                    72:97:d7:c3:e2:9f:b2:63:94:78:29:24:80:44:a9:
                    83:44:4a:57:20:c1:bb:54:6d:86:3f:5d:98:46:69:
                    3a:70:e5:9e:d2:98:b4:ec:c5:d9:02:57:b5:d5:f3:
                    d8:86:06:a9:b2:34:53:40:cc:32:4b:00:94:2c:54:
                    76:13:3b:0a:d4:18:b0:f1:53:d1:79:ef:dd:95:28:
                    ac:7d:78:9b:4f:2b:88:3e:30:9e:d4:40:57:53:ee:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:BD:6C:26:5B:DA:0B:3A:83:2B:08:5B:EA:81:98:95:54:F0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.67.0/24
                  63.223.79.0-63.223.83.255
                  63.223.85.0/24
                  63.223.104.0/23
                  63.223.113.0/24
                  63.223.118.0/23
                  63.223.122.0/24
                  63.223.125.0-63.223.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:22:3e:2b:53:63:70:89:10:c9:b1:77:71:37:0b:80:23:6a:
         2c:ef:da:20:da:be:35:40:97:14:0f:fc:05:81:99:69:1c:e2:
         92:eb:95:2e:2f:fb:75:f5:52:29:a9:0c:5d:df:b3:d6:c5:75:
         3e:d2:39:f6:e0:5e:38:24:28:bb:95:36:de:16:c2:d0:c7:be:
         af:a2:e2:a4:f9:0d:b8:cb:02:96:28:cf:f4:97:96:e1:24:06:
         c0:ea:e1:9d:b5:b3:27:66:b8:a5:0f:fc:5f:2a:e4:8f:fd:fd:
         6b:34:ab:b6:ec:a3:34:a0:01:72:22:ff:d0:7f:1f:e2:80:61:
         7d:81:16:86:77:77:f0:d4:c9:e5:ce:dc:ab:ab:c6:04:43:81:
         55:47:e5:01:c2:31:f3:4f:47:50:19:b4:b1:a4:9b:8b:80:ff:
         15:9e:13:bb:2d:74:b4:2e:da:4e:79:67:18:8b:f1:ba:4c:eb:
         d2:7d:c1:fb:01:a2:d9:48:46:6a:9b:52:32:16:63:48:71:37:
         58:1d:de:88:c6:ea:e8:42:ac:1b:f4:63:bd:2a:f5:b7:f9:94:
         e8:a6:fa:88:3e:14:08:a5:4f:b6:ab:2f:fb:b0:01:f3:49:3a:
         7c:d9:2e:ea:84:75:e4:31:75:c5:34:bc:f6:b3:2a:a2:51:9b:
         5a:4a:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:31 2025 by rpki-client