Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa
File:                     22ffa8f4-e794-3a66-89df-98333aa3af9f.roa (raw, json)
Hash identifier:          ms/vlQGMk/oaaYT4/EJmBTKDYG++j3IEPuiNoh+3vnI=
Subject key identifier:   03:97:2D:33:6F:CA:84:50:ED:21:9F:57:88:59:3B:AC:30:F6:08:B3
Certificate issuer:       /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial:       010D0C9F432858480644F7D1313CC50067C49780
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     14618
IP address blocks:        64.71.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f7:d1:31:3c:c5:00:67:c4:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=5bbcdd1a-5f8b-406a-a717-13c712c2931c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:b7:8d:fc:50:2b:d4:70:e3:45:28:fa:cc:
                    b7:38:31:8e:1e:bf:12:c8:9a:d0:bb:13:17:6f:4f:
                    30:8a:cb:87:c7:38:1c:d3:55:d1:9e:31:b0:3d:02:
                    fb:da:92:b1:0d:3f:9e:5b:d5:a6:23:25:2e:b4:e0:
                    6a:c9:d3:9a:57:8d:9e:56:0e:34:33:33:f2:6d:55:
                    74:8f:28:53:8f:f2:11:78:29:80:a2:0d:1f:52:ff:
                    45:13:0d:72:18:aa:5e:d5:86:fc:aa:7e:8f:bf:a8:
                    f0:2d:81:f4:5b:bc:bd:53:cf:a5:c0:a7:95:6a:ab:
                    9a:f1:ca:20:3d:4e:5a:b5:48:f7:c9:5a:d5:ab:4d:
                    ba:4a:3d:bb:31:40:2c:76:87:99:9f:6c:dc:34:18:
                    a7:c5:38:6c:39:d1:d4:4f:53:ca:7e:2a:4b:db:06:
                    2d:d2:91:d2:34:87:e2:ab:77:fb:f7:98:75:88:6c:
                    d5:98:70:73:84:66:b7:7c:77:e7:ef:3d:ec:55:5b:
                    04:b4:75:51:87:d7:23:02:53:c7:ec:35:05:5e:1f:
                    50:6e:ff:97:7a:7c:8a:06:c9:27:f8:7e:de:d3:a8:
                    46:62:a4:16:43:0d:d8:eb:58:d1:28:e3:38:6a:60:
                    9d:7b:c6:70:19:0a:0f:3e:14:f8:74:0e:1d:86:4c:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:2D:33:6F:CA:84:50:ED:21:9F:57:88:59:3B:AC:30:F6:08:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:15:07:fd:f0:78:37:62:9f:da:09:5b:03:03:71:a0:6f:c9:
         d3:59:ca:bf:0f:b6:8f:b7:9c:88:95:a8:1c:9c:03:7b:57:11:
         53:d2:0e:9b:9a:56:fb:c9:6e:33:4e:bc:96:8e:48:94:fd:23:
         75:ba:21:5b:04:7f:61:7d:ce:3c:fa:62:80:c5:8a:2a:6a:68:
         9c:c6:04:63:9c:e5:76:44:97:29:44:5f:46:4a:ef:05:8a:33:
         91:c2:a6:cc:24:99:d0:8d:e2:d2:17:f8:27:6a:42:a8:a2:c1:
         94:c5:6c:61:65:d7:30:df:a8:b1:38:18:e0:59:a6:d3:03:1d:
         75:a7:5c:69:55:c6:4b:48:a5:9a:1d:8e:07:71:c7:47:c9:1e:
         dd:b6:fa:0b:2d:81:db:d2:8c:92:b9:d5:70:b7:b2:4d:ce:43:
         f8:6d:f3:11:d6:bd:89:dd:fe:79:16:43:47:1c:48:83:10:99:
         c3:30:20:ec:b0:f5:bb:48:e7:40:6a:2e:5d:03:b8:bc:b6:f1:
         f7:5e:7c:a4:79:b2:d9:79:9d:ae:18:25:ed:1f:a6:cb:78:24:
         a9:d9:9f:97:e7:fa:67:31:57:87:5d:df:0a:64:0f:bc:20:81:
         53:d9:99:d9:3e:33:34:27:e8:12:65:01:35:90:e1:79:2c:3c:
         6e:b9:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:08 2025 by rpki-client