Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa
File:                     eadf60c7-3f3f-3252-bab0-1034ec94352d.roa (raw, json)
Hash identifier:          a0552VTdA4ETOlXzUI8EGvdQT0ESFnWgtdXXHQIyoFs=
Subject key identifier:   4A:5C:2B:E3:CA:3A:3F:46:1B:AB:32:74:8C:15:F7:B7:E2:76:70:BE
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F432858480644F459C8459AF1E49B1C80
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     16509
IP address blocks:        52.128.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f4:59:c8:45:9a:f1:e4:9b:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=6217fb03-dc0d-4726-8723-9f9ec320e7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:9a:d7:27:e2:35:fe:0c:d9:c6:b3:b6:3a:
                    8c:56:f7:70:1a:38:db:47:b2:61:ce:f3:8a:98:c5:
                    36:98:fe:31:b0:08:c0:49:3b:fb:05:31:7b:3a:b8:
                    aa:6c:44:0b:65:fa:5a:73:c8:a5:aa:8c:83:95:44:
                    bf:1b:63:20:67:da:a9:9a:49:a3:58:b1:93:70:3a:
                    8c:b4:5f:48:63:6a:d4:4b:ee:35:b3:ae:37:74:da:
                    11:d8:fc:fa:21:c1:15:65:8e:ef:31:f4:c5:bc:16:
                    14:f5:71:b4:58:2f:67:5a:6e:21:f6:fd:ec:56:20:
                    67:98:e0:96:c2:97:f7:61:af:7e:71:5a:49:f0:4e:
                    b0:c0:c2:bd:c3:9b:dd:b7:0c:f1:c4:8e:ad:73:0e:
                    49:56:7b:76:96:1b:6d:9a:9c:50:92:c9:68:b9:a8:
                    f6:db:60:3e:01:4f:04:35:ca:6f:8e:64:a1:f6:46:
                    ed:b8:5f:4e:2f:8c:d7:e0:3f:5f:cb:17:86:36:97:
                    a3:6e:33:63:d8:3a:e1:67:33:d1:86:ae:3d:9b:53:
                    75:c1:92:4e:fc:88:85:06:5b:fa:aa:c4:b1:e6:c8:
                    0c:41:87:11:b4:0e:17:74:6e:28:23:86:4e:35:3e:
                    a6:22:c9:a6:70:93:e2:37:13:17:47:9b:9e:bf:7f:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:2B:E3:CA:3A:3F:46:1B:AB:32:74:8C:15:F7:B7:E2:76:70:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:64:00:5e:0d:a8:3d:3f:a7:0c:99:f4:4e:2f:42:dd:54:
         4a:43:78:4d:5e:41:2e:2a:ad:48:b1:d6:5e:14:90:aa:96:ac:
         25:a8:5f:5e:74:70:de:38:6b:de:de:cc:79:7f:3d:d3:25:5e:
         6f:d9:0a:80:9a:5b:92:d4:15:da:0f:9b:f3:de:d5:43:4a:a8:
         f6:b6:ed:34:b6:9b:cd:33:ee:06:1d:77:ee:7e:47:4e:2b:09:
         ab:eb:03:2f:f2:0c:9d:36:2c:00:f6:37:25:9d:e4:b8:63:f5:
         1b:2b:fd:80:b2:d8:49:de:8c:90:54:ac:ca:43:5e:d9:44:18:
         e6:88:49:a8:c1:e4:d3:5e:8c:7f:45:f7:75:8a:cc:f7:d8:1f:
         99:f5:ac:d7:63:e9:fc:a7:73:65:54:e2:10:12:53:7e:b4:f2:
         3b:a8:f8:91:85:14:e7:d5:74:07:27:3e:12:ac:e6:36:55:1d:
         39:63:b2:31:5b:fe:45:70:b6:5d:ab:63:5e:b4:bc:e0:b3:82:
         44:99:58:e7:3c:8e:33:19:8a:2c:7b:ba:99:c5:d4:61:44:b7:
         b7:e8:7d:31:f4:4b:9d:fc:e1:07:a0:43:14:dc:5f:c0:76:33:
         77:fd:20:af:59:25:27:8c:7f:6d:fd:44:db:37:64:48:b4:71:
         5c:68:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:46 2025 by rpki-client