Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa
File:                     88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json)
Hash identifier:          y/QkYAjJTwoeKL91ElxrkVTWE7kwYREUH7V7e0GUFzI=
Subject key identifier:   5C:10:67:FE:53:98:38:8F:19:3A:C2:2F:48:BD:5E:AE:64:40:8B:6A
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F43285847F84F7A52D55385670CA10640
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     63199
IP address blocks:        148.153.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7a:52:d5:53:85:67:0c:a1:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=9affde53-7a6e-4159-b656-1e69fd9acb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:59:f7:70:a3:84:88:92:e6:60:14:95:7f:
                    e9:64:35:08:97:a4:c8:c5:6a:b5:33:13:70:0d:3e:
                    53:5e:76:be:87:a0:1d:97:00:3c:f8:b8:4a:19:15:
                    9d:ca:bd:5e:de:0c:a3:ec:96:c0:fb:35:a9:64:27:
                    e2:0b:72:ef:97:f7:f1:b9:c5:5f:af:d9:ae:ec:fa:
                    ef:60:b6:b1:16:4e:fb:91:d5:4d:bb:c5:9b:91:9f:
                    aa:ee:7e:d8:4e:80:4d:91:da:71:20:36:63:7d:4d:
                    e7:6e:4a:6d:70:20:92:6b:84:d6:70:b8:08:5a:ac:
                    d2:bf:62:12:f3:b3:11:ab:d4:4d:43:23:e0:0b:9a:
                    36:b9:37:d4:ba:e7:68:65:3f:d4:3c:b8:c3:16:bc:
                    3e:27:de:c3:c7:66:9e:97:cd:aa:72:e6:aa:b1:bb:
                    82:b6:0e:18:d1:7e:0b:f4:fc:01:68:e6:d0:62:6a:
                    ec:12:11:11:fa:0a:f0:6a:91:b5:97:47:7e:2d:8d:
                    5d:21:00:06:bd:78:7c:28:56:f2:ba:94:6a:36:24:
                    d3:67:e0:09:3c:73:f7:00:ee:d1:ae:6f:8e:ad:f1:
                    d6:cc:27:7c:3f:be:53:34:b4:42:da:3a:4f:10:c5:
                    c8:95:7c:39:5d:ed:9b:a7:42:50:40:f8:bf:ad:e3:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:67:FE:53:98:38:8F:19:3A:C2:2F:48:BD:5E:AE:64:40:8B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:ee:47:7c:9e:17:2d:e2:cb:4a:f0:28:21:3c:6e:cc:db:
         8c:2f:14:be:1f:55:cf:f0:ad:86:02:8a:25:28:fd:8d:1c:83:
         20:33:75:c0:2a:91:e6:13:5a:75:5f:47:28:f6:31:00:f4:c6:
         da:04:1f:d0:e5:5c:85:09:73:88:2c:3e:9d:24:32:12:50:44:
         75:e4:f5:93:b6:47:bb:43:32:59:ea:46:ce:58:a8:9a:38:05:
         85:71:2c:da:99:9a:c3:72:c1:c9:e5:57:5e:59:12:d6:57:7f:
         ec:8c:9a:cd:36:1f:fb:b4:90:ce:17:97:25:68:b4:e8:5a:56:
         b0:c4:31:c5:50:36:25:6e:45:b8:b9:5a:9f:77:b3:10:96:25:
         7a:5f:e6:f0:f7:71:39:08:1f:42:36:c9:30:d4:ea:63:2c:5c:
         30:5f:e3:e6:54:e9:2e:f9:56:9f:ae:0e:ee:6e:c5:c2:14:3a:
         42:85:83:3f:2b:6e:28:2b:69:0a:54:c9:be:0d:10:9b:5c:18:
         f1:f6:97:f1:cf:5c:86:e7:d9:4b:c4:6e:33:88:bc:dc:b4:82:
         f5:02:8a:69:5d:9f:e4:85:fb:ca:d6:ef:a7:39:14:08:d4:80:
         ce:32:66:12:15:8f:ca:65:1e:7c:af:02:89:f8:dc:41:64:bc:
         0c:38:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:28:02 2025 by rpki-client