Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa
File:                     1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa (raw, json)
Hash identifier:          PBbgeHciIRKcMYUsW7qdV5p0DmP29p19VQA1Exq37wE=
Subject key identifier:   3A:E8:47:5C:56:E2:BF:0B:3E:64:14:99:C7:BB:07:5D:E4:4F:25:94
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F432858480644F2C2A5255F6D01A8CD40
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     16509
IP address blocks:        52.128.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f2:c2:a5:25:5f:6d:01:a8:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=0ab72eec-4d7d-4d43-80e9-47d8e0550a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:4f:e8:2b:2e:7c:fd:1b:6c:88:39:cc:01:
                    69:66:74:88:5e:10:5a:e8:81:f8:51:ef:73:32:7c:
                    0b:e1:1d:09:00:c0:c2:90:96:f3:cb:7a:19:db:e0:
                    d5:c3:c1:13:19:21:fa:2b:f4:16:c9:0a:6b:1a:f8:
                    50:1d:5c:05:29:3f:43:2b:c8:87:c8:78:c1:33:a8:
                    a6:79:0d:88:96:ac:f5:1d:0a:f2:eb:bd:16:7f:0e:
                    53:53:c4:0f:89:4c:25:6c:27:db:7f:22:d5:c9:65:
                    d1:22:cb:f7:33:e5:70:d0:ca:5e:7f:0e:b2:a8:c0:
                    30:84:64:53:bb:34:88:8c:fd:c6:73:a0:d5:d0:37:
                    66:42:9a:f6:b4:15:b9:67:58:85:39:4e:d8:ff:c1:
                    c2:97:8e:16:08:f0:29:74:13:39:03:1a:2b:17:dd:
                    fc:99:2b:5f:9b:38:f0:5b:e8:8e:f8:c7:e6:05:e3:
                    5f:75:66:aa:18:77:b2:97:1e:51:ee:59:f8:8c:a0:
                    88:c3:fa:16:e0:f4:89:a6:86:fc:93:7b:82:71:8e:
                    3a:b9:7e:6d:26:07:eb:a4:46:ce:fd:13:01:b7:44:
                    27:c9:e6:2e:c9:44:30:61:82:4f:20:89:4a:fe:0c:
                    10:62:47:f2:ec:5f:f1:59:31:59:8f:cc:04:60:8e:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:47:5C:56:E2:BF:0B:3E:64:14:99:C7:BB:07:5D:E4:4F:25:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:1d:c3:3c:3e:8e:12:b0:8e:48:e5:38:1a:56:e5:7b:d8:
         e6:4f:7e:9b:84:69:11:31:b3:f2:f9:2e:0e:2c:03:b4:d1:fc:
         fb:7c:35:78:8f:98:5b:be:dc:2b:74:46:68:73:0c:24:8a:5e:
         81:00:ab:f1:78:07:8d:d4:6c:fd:9d:e4:ed:95:db:c4:8e:e9:
         fa:42:d7:2e:39:6e:6f:86:c5:1c:8c:b5:64:98:e1:3f:6e:7a:
         a8:71:30:fd:1c:b7:df:74:0c:1a:be:1e:42:34:b8:e4:b5:fa:
         d8:4a:f4:88:63:66:29:c1:6a:79:d8:71:09:27:b9:66:be:9a:
         6f:c7:2f:9e:37:25:a0:ad:74:c6:60:4c:36:d6:16:34:fe:d6:
         2d:c9:61:20:81:2e:fd:1d:9d:3d:00:52:8e:f7:79:f7:1c:e8:
         31:19:d5:92:17:d3:39:e5:18:d3:a0:8f:f2:4a:18:5b:ec:c9:
         61:51:c2:04:da:68:d6:aa:4e:d6:74:a3:6b:99:29:19:ce:65:
         9d:7c:b6:56:71:0a:44:84:46:44:0b:66:4e:90:46:14:73:d1:
         8d:32:b7:7d:ce:64:18:4a:e5:41:47:d0:52:9c:4b:6c:6d:6c:
         b6:d5:25:c8:c0:d1:19:34:df:cd:c1:cc:4a:ee:ac:57:90:71:
         82:6b:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:30 2025 by rpki-client