Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa
File:                     7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa (raw, json)
Hash identifier:          V/pNHTMa4evw8UtKR6+8WV+M4T773kNgV7ZumAwTpFo=
Subject key identifier:   70:78:3B:EB:7A:9A:EC:D2:44:8A:AD:08:7D:23:F9:4E:3A:F0:23:E8
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F43285848268C70415A304AE87F012780
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa
Signing time:             Mon 09 Dec 2024 15:30:34 +0000
ROA not before:           Mon 09 Dec 2024 15:30:34 +0000
ROA not after:            Sun 09 Mar 2025 14:30:34 +0000
asID:                     16789
IP address blocks:        104.156.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:8c:70:41:5a:30:4a:e8:7f:01:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Dec  9 15:30:34 2024 GMT
            Not After : Mar  9 14:30:34 2025 GMT
        Subject: CN=ab896905-c667-4313-b857-5f8287930c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:7b:69:33:a0:13:5f:24:36:b2:7e:74:d0:
                    98:2f:dc:5d:d1:ea:37:5c:79:9e:06:d7:99:4a:58:
                    7a:a3:9e:32:cf:6a:67:a6:01:4e:42:48:4f:ca:9b:
                    3c:67:d4:3d:13:18:c7:32:38:a7:be:b5:7e:4b:d5:
                    0d:cb:65:4f:07:bd:3e:f6:bc:d3:b9:98:c3:a0:03:
                    20:3c:97:4c:31:c1:ec:79:df:95:b6:9c:a1:1a:b8:
                    a3:9c:38:67:a3:a0:cc:80:68:77:29:55:d3:f0:93:
                    5e:55:af:dc:ca:e0:55:bc:85:a8:ec:b5:4b:47:10:
                    82:f9:ec:65:c4:d7:c3:48:5b:8e:63:68:c1:f2:04:
                    ee:be:49:f7:d3:98:f6:b7:c1:bc:ff:c0:47:42:03:
                    50:b0:b0:2c:0c:fb:90:f5:ce:c9:27:3e:d4:17:df:
                    dd:9d:fc:c9:c9:52:30:ca:95:4a:c8:60:23:2c:6b:
                    aa:9e:0f:30:ae:5a:86:fc:c8:2b:d7:39:a8:e9:12:
                    7c:43:b1:b0:ab:b8:1c:f9:66:00:03:59:4d:0a:1e:
                    e4:4e:c4:82:ce:1d:c5:dc:31:30:47:8a:f0:b7:5e:
                    d4:b8:cb:9e:f0:d8:e5:85:da:e7:89:28:91:ae:79:
                    f1:57:ca:d2:59:f0:4c:f6:6c:86:3d:93:a1:1f:01:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:78:3B:EB:7A:9A:EC:D2:44:8A:AD:08:7D:23:F9:4E:3A:F0:23:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d8:fd:80:92:51:05:db:d3:bf:a1:1d:4c:3e:c2:e7:8b:30:
         a5:86:30:81:30:b8:7d:0a:88:f6:cb:d8:42:f5:0f:a9:3f:7a:
         fb:46:91:4c:1e:50:b9:26:c0:38:be:31:aa:f1:10:af:5f:db:
         50:27:cc:44:d4:5f:1d:85:3b:db:19:16:37:14:5b:2e:c6:65:
         50:9c:33:8c:db:69:c5:25:67:80:52:e3:6b:bc:80:fc:5e:b6:
         2a:86:be:f6:dc:2d:28:ac:4d:c3:e4:16:60:14:b7:70:52:40:
         56:8b:e9:d4:28:aa:7f:8e:d1:f3:34:c3:e6:ae:33:91:78:0c:
         47:ef:b0:cb:3e:65:79:3c:fe:2a:25:c4:49:44:d7:2d:e2:b7:
         99:85:df:32:80:a5:5b:5e:be:91:c9:59:45:ac:bf:54:68:1a:
         d7:ef:ae:92:5a:1a:bf:0b:ac:6d:de:e9:f4:f0:a3:e9:e0:9f:
         f6:e9:30:d7:a4:6b:65:93:62:41:5d:49:1e:04:28:18:d5:0d:
         ce:d5:13:b6:d6:ce:bd:0d:74:1c:7f:e7:19:14:f4:3f:6f:7f:
         27:32:3f:6f:ac:a0:94:8b:cd:d9:32:31:ff:b1:73:00:a6:cf:
         fe:58:f3:6c:e8:8b:88:71:7c:3a:d3:72:18:90:04:24:31:cd:
         9c:8a:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:47:41 2025 by rpki-client