Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b8e76adc-0d1f-3c9f-86c5-7d02ed58a6da.roa
File:                     b8e76adc-0d1f-3c9f-86c5-7d02ed58a6da.roa (raw, json)
Hash identifier:          FZ+q7/cOgJJ7hVKYH4EmMJ2sxgHr7JsZ+PM4nvnXDpo=
Subject key identifier:   C6:21:AE:A8:D3:9F:3B:47:9A:BA:3B:9D:8C:A2:B7:D2:33:23:B7:DC
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584851A5741D2A4507551EB45480
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b8e76adc-0d1f-3c9f-86c5-7d02ed58a6da.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     45753
IP address blocks:        63.216.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:74:1d:2a:45:07:55:1e:b4:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=5dc08101-9e73-4e90-862c-8b2ab6b1ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:ce:77:f2:d5:6b:8a:da:ad:a5:bd:7b:52:
                    03:9d:93:e5:f0:1f:a2:93:d2:ef:e7:42:46:59:6e:
                    fa:4a:52:1d:cc:28:a1:ca:91:72:c0:cf:34:88:82:
                    c2:f9:69:0a:11:b6:06:75:31:11:34:83:15:a8:30:
                    e4:f7:a9:7a:c0:ef:15:59:fd:b5:b0:43:03:65:2d:
                    6a:b9:55:a7:a4:3f:20:8f:e1:5b:7a:ae:c4:79:50:
                    98:1c:56:d0:3d:50:ed:3e:3a:c0:f7:10:1d:c3:f6:
                    79:c4:ce:d2:fc:79:37:b0:ee:33:58:a9:8d:72:a2:
                    36:25:95:b9:7f:91:b5:41:c0:87:09:50:ca:bb:98:
                    e2:76:6a:a1:38:09:db:ae:ec:10:33:23:37:8e:23:
                    5d:de:e5:b6:29:c2:f3:05:1b:ab:c7:73:8b:cb:6a:
                    44:3e:dc:f0:12:29:87:92:f8:23:c0:05:15:e4:1a:
                    f5:f9:85:5c:90:77:b2:38:0e:9b:3b:db:8f:24:97:
                    53:82:ff:05:39:56:8e:77:b3:d1:78:33:18:9f:46:
                    44:01:ee:31:09:83:c9:b3:d0:ae:82:24:8e:03:3c:
                    00:e3:99:42:87:2c:b8:f3:24:07:39:3c:53:1f:86:
                    6c:19:5e:be:fa:24:2d:77:bb:1f:d0:86:70:02:b9:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:AE:A8:D3:9F:3B:47:9A:BA:3B:9D:8C:A2:B7:D2:33:23:B7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b8e76adc-0d1f-3c9f-86c5-7d02ed58a6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:d2:59:cc:66:ac:97:7c:9f:e8:10:a0:41:b9:92:1b:38:e0:
         39:90:e7:69:d9:83:b8:0a:5c:ab:64:41:30:e0:d9:7c:76:ae:
         ab:24:37:56:ee:7f:1d:63:e7:fb:ca:8a:43:45:88:2a:a5:2f:
         e2:ad:b2:fe:a6:b2:89:84:90:bf:54:59:31:0c:e6:dd:b9:b9:
         c6:f8:b1:93:78:47:57:a1:97:cf:e3:57:7b:6c:65:12:a0:28:
         a4:94:d2:5e:03:15:f1:37:eb:84:a7:74:5e:7e:6c:b9:64:5b:
         28:07:60:32:08:b4:5b:c3:82:3f:25:0c:0d:c7:66:be:62:44:
         39:05:23:57:86:31:ac:bf:c3:ee:5c:c1:5d:ec:91:2d:0f:da:
         ae:11:f5:41:70:79:b0:6c:2e:66:e7:88:99:89:7c:bc:36:b2:
         8e:e2:73:8e:8b:cc:dc:4d:79:e0:68:5d:c7:5a:c1:1c:17:3f:
         97:85:41:b6:48:fd:4a:1b:97:42:ba:f2:5a:ce:c9:db:38:1f:
         c4:98:bc:38:74:c1:12:0f:ac:20:28:58:e3:6c:d0:be:c9:7b:
         a9:94:22:81:89:85:d7:e1:fb:de:28:c1:f1:dc:5a:fe:99:0a:
         99:18:c1:a7:32:15:f6:fa:36:fe:94:ca:33:96:4d:c0:c8:2c:
         70:bf:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:20 2025 by rpki-client