Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa
File:                     57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa (raw, json)
Hash identifier:          TslsR60RmyrtzxcE1Fv/+mVe8LNaZH8kAZN4FDrSGzw=
Subject key identifier:   BF:9F:C7:1D:54:47:2F:69:4C:76:1F:AF:1C:B6:ED:C1:83:5C:06:CD
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F43285848116FBBF5B8979608C4BFD180
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     14618
IP address blocks:        52.129.152.0/21 maxlen: 24
                          52.129.160.0/19 maxlen: 24
                          52.129.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:bb:f5:b8:97:96:08:c4:bf:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=f51c3c21-bec2-48c0-8c33-bc6c4487afa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:b9:22:d0:6e:9f:e8:bd:b5:e5:31:cd:ac:
                    27:42:7d:a0:e2:65:47:00:99:bd:60:29:81:42:c8:
                    35:67:23:60:ad:a6:d1:42:ac:1d:b9:84:8c:38:44:
                    70:13:78:3b:43:95:c6:6c:88:c1:15:8a:10:c0:09:
                    d3:2d:8e:7f:8f:8c:5b:8e:b6:f2:09:a7:eb:db:01:
                    00:ad:70:8d:b7:67:59:33:5c:3a:a5:c2:7c:e8:18:
                    29:a5:44:13:de:5d:73:a2:7f:08:b0:8a:4d:a7:8a:
                    8a:8b:8b:bc:2e:43:9b:99:77:c6:ac:df:77:fd:41:
                    5e:a1:c4:da:ea:70:b5:40:42:d7:5f:39:bc:fe:73:
                    25:93:5d:db:01:ae:67:f5:57:9b:db:e7:c4:ea:08:
                    60:ab:bc:6b:68:ac:d5:47:67:6a:98:a6:23:cd:f1:
                    70:62:21:86:08:12:6f:11:7c:ef:75:b4:bd:78:09:
                    68:31:53:d9:32:2c:68:a3:82:97:45:c2:a9:59:31:
                    74:16:91:a9:a5:1a:e5:01:02:ff:a3:81:aa:e9:50:
                    81:b3:f6:0e:c5:bb:0f:f7:7e:9b:90:6c:4b:b9:a4:
                    67:ff:33:6b:ff:6d:f6:33:54:bf:05:b5:7b:df:7e:
                    9e:8b:1e:c6:b7:20:18:37:fd:23:7e:67:65:f3:27:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9F:C7:1D:54:47:2F:69:4C:76:1F:AF:1C:B6:ED:C1:83:5C:06:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/57286f8d-dac4-3e0f-99f7-ec87c5de5916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.152.0-52.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:c3:33:c7:d7:a8:36:49:35:b8:c9:d3:e1:5a:a5:b9:7f:
         18:1c:14:ec:15:a1:01:92:3a:3a:e1:95:a2:68:f5:7c:15:94:
         f7:49:a2:ee:c8:ad:d6:98:8e:eb:58:16:27:d5:cd:af:28:f7:
         dd:39:d6:66:10:b0:a4:90:49:31:43:77:41:4d:6b:79:0d:21:
         4a:0d:9d:83:e1:5c:4a:2a:48:05:5c:65:ef:15:0e:fd:9e:6c:
         b6:f9:fe:ca:2d:84:0a:70:ea:9c:b3:6b:ec:6d:c6:3f:16:aa:
         55:f6:b1:cd:3b:ab:0f:e9:8d:7c:25:e4:fa:ee:b2:1e:bf:d3:
         22:3a:db:77:68:4b:d8:35:27:5f:8f:6a:33:35:fc:9a:64:14:
         19:e9:14:89:5e:88:b9:23:81:96:c5:12:ba:4b:2c:04:8c:95:
         55:77:af:eb:16:ac:0f:e8:be:30:79:ed:63:b3:ac:d2:44:5b:
         0c:f7:a8:c3:6d:88:99:52:ab:a8:1a:be:4e:4e:9d:31:e1:e3:
         7c:b2:53:8e:89:53:2e:8c:c2:7b:df:38:a3:9b:d3:a9:fb:da:
         58:01:8b:f1:d1:52:51:04:fa:c5:19:7e:da:99:9f:d9:ef:c9:
         9e:9f:6e:4b:f6:41:f3:08:91:26:60:60:77:c5:e5:fe:80:dc:
         3a:22:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:59 2025 by rpki-client