Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/e2ee8e25-3a4a-3d32-b248-474fe11b8fd1.roa
File:                     e2ee8e25-3a4a-3d32-b248-474fe11b8fd1.roa (raw, json)
Hash identifier:          66+agMlacTauvASqid9054LEHclycOHA2D4HjFcBiDI=
Subject key identifier:   50:89:DF:AF:E2:BC:2D:94:49:A8:55:44:97:AC:35:8B:A9:C0:32:9A
Certificate issuer:       /CN=f5b47d91-eb0d-4085-9bc2-452042c0b313
Certificate serial:       010D0C9F432858489075F8CEDCD60B2660DEDE40
Authority key identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/e2ee8e25-3a4a-3d32-b248-474fe11b8fd1.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     31775
IP address blocks:        64.201.232.0/22 maxlen: 24
                          104.153.28.0/22 maxlen: 24
                          104.244.192.0/22 maxlen: 24
                          162.0.160.0/19 maxlen: 24
                          199.241.26.0/23 maxlen: 24
                          2605:9480::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f8:ce:dc:d6:0b:26:60:de:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=766cb517-d0dc-4a21-89e4-8da177122630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:e2:0d:18:64:77:e5:82:38:2e:03:b4:91:
                    00:c5:d5:33:8a:47:ad:11:dc:61:ee:fd:4d:09:3b:
                    d1:b3:a6:93:58:90:9d:40:04:67:43:3e:70:60:92:
                    5b:5c:d5:b7:84:a3:ba:35:1c:bd:64:11:90:86:ba:
                    e0:d0:1d:e4:c3:37:17:eb:f1:23:07:7c:26:c8:50:
                    43:90:34:13:eb:2e:47:ef:80:60:26:c7:75:7c:e5:
                    a0:b0:21:ed:60:b5:11:e6:90:06:f4:1c:cf:f7:07:
                    46:11:c3:00:f1:cb:97:53:94:dd:13:9f:ae:6d:e2:
                    c4:49:7c:97:e2:d0:6f:01:e6:0a:dd:71:5c:ab:15:
                    42:bb:c1:f7:b1:93:21:f1:73:0f:fd:3d:78:40:f0:
                    d1:13:61:a0:03:8f:8e:27:0e:60:55:4c:af:f2:31:
                    4d:0e:19:03:48:f3:27:05:72:2f:15:08:52:3d:2a:
                    e7:e9:88:1b:c7:53:02:6f:73:8b:70:01:ce:20:7b:
                    c5:61:1e:cc:b2:d8:45:bf:98:24:d6:b1:be:f8:d0:
                    ab:28:6a:7b:98:19:c5:40:59:a2:b7:2c:d7:bc:ed:
                    57:20:50:57:70:5c:1f:b0:95:3b:a8:ce:51:a1:43:
                    b5:36:05:92:e5:f5:cc:c8:e4:66:4c:d7:68:65:ca:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:89:DF:AF:E2:BC:2D:94:49:A8:55:44:97:AC:35:8B:A9:C0:32:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/e2ee8e25-3a4a-3d32-b248-474fe11b8fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.232.0/22
                  104.153.28.0/22
                  104.244.192.0/22
                  162.0.160.0/19
                  199.241.26.0/23
                IPv6:
                  2605:9480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:ad:89:06:b5:10:61:71:4a:e1:1a:81:81:e2:86:08:db:
         e3:15:8b:44:ee:f5:14:99:e1:d5:e9:98:78:32:9d:cb:92:c8:
         19:02:c2:d8:c5:71:84:f5:7d:d8:0d:32:09:b5:8d:3e:73:4d:
         5a:c5:c3:27:86:8f:f4:2a:1a:85:2b:29:3c:ab:77:6f:eb:26:
         46:fb:3f:f9:40:f3:4a:7e:f9:25:ed:b0:ba:ca:01:6d:1c:0f:
         88:a7:e3:6b:6f:c8:0a:21:6a:90:52:f5:f3:be:61:df:30:9e:
         5d:79:9f:53:e9:85:d5:c0:25:37:86:69:f7:d9:c2:20:99:93:
         ae:65:29:c7:ba:7a:e4:16:c8:b8:4f:e8:ed:de:7a:1b:bc:8a:
         03:18:69:a1:0a:9c:32:24:44:09:3e:13:d8:e9:f6:03:9c:ab:
         18:de:2d:6c:55:e1:47:bf:f1:dd:25:e7:f7:2a:e3:bf:dd:77:
         91:06:af:e1:f8:b7:cd:cf:af:c6:56:9e:85:86:87:67:14:6b:
         d9:ca:5f:83:5d:7d:ec:c1:05:32:f2:09:90:06:5b:92:ed:6e:
         d2:c5:cb:ee:dc:92:bf:4b:63:2e:d6:0e:0e:99:99:1c:47:51:
         c6:de:d9:2b:22:5c:bd:b4:60:fc:14:12:ea:ba:f7:e2:28:92:
         d6:2d:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:44 2025 by rpki-client