Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa
File:                     53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json)
Hash identifier:          rJjrBzcL7iKRHwGwRb9b2mnQTp6KzwlEe1elMCtYJXM=
Subject key identifier:   6F:28:D8:35:9E:A8:8B:1A:98:F4:0C:25:02:21:1C:20:1E:08:B6:7A
Certificate issuer:       /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Certificate serial:       010D0C9F432858486D90476AE4B72F3CB123CA00
Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     26258
IP address blocks:        144.29.0.0/16 maxlen: 24
                          144.29.0.0/17 maxlen: 24
                          144.29.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:47:6a:e4:b7:2f:3c:b1:23:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=27f52629-9613-4921-ba89-b2ee6568ff0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:57:73:55:1e:ec:d9:91:dc:4c:47:13:77:
                    22:70:43:46:51:38:0e:8c:ef:6d:e8:6e:8b:e7:71:
                    0c:eb:41:b6:9a:57:da:24:85:7b:81:29:56:a8:0a:
                    34:de:e1:dd:e2:fe:b4:c8:d9:e3:9e:0a:97:d8:c9:
                    fe:23:e1:f0:ca:0a:d0:a0:e3:c3:94:f7:bd:75:70:
                    5f:3e:f6:71:c0:43:38:49:7b:bc:2c:10:67:b5:ff:
                    dc:9f:82:c6:49:ae:8e:7d:c2:31:11:39:c5:a4:52:
                    38:c5:36:bc:ba:6b:db:af:98:9a:af:f4:0e:42:13:
                    c6:0c:82:ba:b4:08:1f:74:02:e8:8b:9b:ce:2b:d3:
                    71:e4:ff:de:33:4d:24:f8:0f:17:0a:6e:45:b0:63:
                    d9:d1:93:fd:30:5c:cb:50:94:72:0e:4a:fb:a5:d2:
                    8c:3f:b6:92:cd:8a:6c:f3:e9:ee:a0:dd:38:95:4f:
                    bb:fb:8e:75:75:56:e7:74:54:aa:bd:4e:2b:3a:9c:
                    81:da:05:a6:f9:f2:cc:16:3a:2b:63:d3:fe:bd:97:
                    dd:d5:0e:75:2e:44:de:01:0b:a9:81:53:01:3f:01:
                    39:37:e2:ff:ea:a1:04:63:56:39:8a:d5:b3:4c:f7:
                    1f:ff:f8:e7:0a:8e:ee:1c:63:ad:42:fd:92:ca:03:
                    d9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:D8:35:9E:A8:8B:1A:98:F4:0C:25:02:21:1C:20:1E:08:B6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:d7:6b:c8:0a:e7:7b:eb:dc:da:2b:53:8a:9b:b3:b0:f6:
         ef:b9:60:ef:5d:06:41:e2:69:0a:29:ad:b9:b6:5a:f2:e9:0a:
         de:da:42:2d:f2:13:57:97:47:79:69:27:22:22:79:bb:e0:13:
         d2:9b:bb:ef:ca:2b:3a:2f:e8:1b:9e:25:d1:59:7f:e2:fb:75:
         52:8d:dd:90:3a:3b:c3:8f:4d:47:f3:47:23:6e:28:d5:a7:6d:
         0d:7d:2a:47:cc:b8:07:63:ed:9d:3d:8c:a3:05:68:d6:42:0f:
         b1:0c:53:11:7d:44:3f:a8:fd:57:06:a7:6b:4a:65:3e:33:95:
         a6:d9:6f:6c:1b:ed:1d:1b:fb:33:94:47:30:7c:f8:70:4b:47:
         b8:0c:d6:4d:19:c6:43:98:6e:8a:de:28:fc:8e:44:a7:79:b1:
         69:60:e8:c6:a1:90:cb:cc:b9:59:66:7e:4c:ef:68:30:9c:ce:
         47:e4:3c:23:18:d7:ee:07:89:29:0c:3a:f5:0c:02:a8:65:06:
         a3:c3:28:55:a7:f0:bb:55:61:95:0d:ad:38:a1:69:95:82:b9:
         82:1b:04:46:97:d3:44:d7:a2:fc:08:a7:79:68:7a:0b:8c:c0:
         33:a9:13:64:91:96:e9:d4:ea:a7:f8:f7:8d:12:17:38:2b:c1:
         ae:f9:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:20 2025 by rpki-client