Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa
File:                     329dde8e-623f-36ee-ba20-f94b526c14c1.roa (raw, json)
Hash identifier:          iAUKDPiegD4CQLI75p/tnbZSkwt5FC5LayVEqQJSKC0=
Subject key identifier:   65:4C:8F:5C:2E:03:34:42:5F:E4:03:C6:89:89:A8:0D:7F:C5:27:F5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847FC7F9E75DCC3787C7273B980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     214314
IP address blocks:        65.49.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:9e:75:dc:c3:78:7c:72:73:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=c2a4bc09-11a4-4d0c-9a32-660132708671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:60:4a:84:01:5e:e6:0a:a8:6e:9e:64:e4:
                    81:76:9e:20:40:3f:f4:59:a1:aa:5d:78:93:97:eb:
                    ab:e6:fb:52:e1:cf:19:67:76:c2:6b:65:2d:b9:e3:
                    ec:41:87:70:7d:ef:5e:f1:b8:e3:b9:31:63:db:01:
                    46:01:e9:9a:e2:73:3b:5e:aa:96:cc:d0:4c:4d:27:
                    46:16:d3:d0:01:a5:f2:68:cc:8d:4e:35:8a:45:c8:
                    5e:18:b9:a3:b6:55:b6:61:90:5a:94:03:b6:99:85:
                    36:c7:ba:ff:4f:fc:53:5a:c7:88:1d:d9:b0:ad:96:
                    82:11:ae:4a:4f:df:ae:5d:6b:43:c0:37:27:f3:60:
                    16:9b:a9:8a:69:71:96:11:a0:20:a6:a7:e4:6b:ec:
                    77:3e:2e:9a:42:3f:14:fc:92:66:ea:1d:4a:7a:f2:
                    3f:3b:55:f7:ee:41:71:14:7d:d7:2d:b8:0f:b2:b1:
                    bc:61:41:cb:f4:9c:55:c3:05:e5:4a:07:75:67:93:
                    fd:d7:b0:53:c3:b3:60:99:f1:ff:e6:1e:a3:d8:f3:
                    70:80:bd:15:e1:b0:96:05:6d:66:40:12:12:a3:6f:
                    00:e9:59:0b:05:4c:20:19:37:e4:d0:0e:11:3c:cc:
                    83:ed:bc:bd:00:82:f7:68:ac:0a:43:03:9c:92:d8:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4C:8F:5C:2E:03:34:42:5F:E4:03:C6:89:89:A8:0D:7F:C5:27:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:c2:12:f5:36:0e:16:38:b2:43:df:b9:0a:f9:de:bd:bd:
         d8:e2:03:16:2d:54:f0:85:70:72:aa:86:e7:52:5c:e4:44:8b:
         9e:8d:48:40:eb:e4:b7:0c:ab:e4:5a:67:ac:0a:82:ed:26:5d:
         78:6a:76:3e:32:ef:75:de:a0:78:b8:33:95:77:97:7e:c8:6b:
         55:96:07:f6:78:d0:b5:dd:70:d8:38:2b:63:55:14:d7:99:0d:
         ee:41:78:21:11:51:09:cc:8a:37:44:e1:87:79:ef:16:55:35:
         41:ba:05:a6:ac:92:3d:6f:82:d6:fb:c8:f3:26:b3:ad:36:fd:
         2a:6d:72:fb:7f:28:ba:e1:1e:e8:2e:a2:eb:ca:13:c8:e5:61:
         47:6f:af:0b:ca:ad:c8:52:8d:5d:d5:5a:24:18:a7:d4:a9:74:
         ac:8f:25:07:e9:ba:ba:e1:b5:91:e7:04:e7:09:c4:f0:15:67:
         87:b7:4b:3b:70:b3:ec:f9:79:9d:1a:03:b6:3d:3b:98:f5:de:
         31:35:65:9f:cc:a6:cb:f9:d7:87:ed:0b:89:ef:d7:24:cf:8e:
         bd:8c:54:68:27:76:c2:72:f5:9a:ce:8f:e5:72:2b:16:7b:11:
         b1:69:0f:f2:1d:fa:99:20:03:21:90:4a:eb:e9:5f:2b:3b:1e:
         09:e6:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:06 2025 by rpki-client