Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ec62920f-e68a-33bc-843c-10d5d67dab79.roa
File:                     ec62920f-e68a-33bc-843c-10d5d67dab79.roa (raw, json)
Hash identifier:          EQH7Q1J0RX3yKagcg6yOKLq8sUrSawWIH8LEFuttn1U=
Subject key identifier:   87:3B:72:5B:50:59:4C:70:91:58:A7:9B:FE:36:05:BB:00:86:30:41
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285848530AE6BB99B98EA19488ED80
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ec62920f-e68a-33bc-843c-10d5d67dab79.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     18434
IP address blocks:        156.55.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e6:bb:99:b9:8e:a1:94:88:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=e57cb260-08bf-48fe-858b-87b9e3848578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:d4:9d:93:fc:a9:76:50:11:36:59:0d:9d:
                    cf:de:07:ef:2f:d9:91:23:0f:10:7c:e0:48:50:fe:
                    0e:2c:22:6c:b8:69:66:d7:d4:be:a6:e4:6e:36:eb:
                    d4:ca:04:9d:c2:94:5f:f3:e4:2c:25:52:29:88:3d:
                    d2:22:03:75:1a:bd:67:90:74:27:c6:e8:86:7f:30:
                    1a:d3:71:65:b5:f6:6b:51:da:30:a7:36:0f:90:91:
                    9a:f4:a6:2d:d6:98:79:a3:4e:89:55:55:02:b0:6e:
                    7b:a2:14:bd:b9:61:8e:28:05:5b:32:14:aa:24:40:
                    12:2f:32:90:9a:d7:77:a4:7a:d1:9d:f9:1d:56:f3:
                    6f:d6:62:6b:69:f7:19:bc:df:7b:99:25:81:50:0b:
                    da:d2:8e:85:b5:25:6d:23:39:ed:e8:12:c2:b6:94:
                    fc:2a:1d:ca:55:11:4d:70:90:69:9e:07:1c:84:d2:
                    97:66:5d:ac:47:4a:a9:b7:c8:d5:03:54:6f:e1:a8:
                    d9:26:58:64:ca:d9:01:46:d4:89:20:6d:a4:f4:ef:
                    96:53:8e:5b:df:2a:35:54:bb:74:7a:68:a7:78:f2:
                    0d:e3:da:26:64:b9:37:bf:37:7b:c6:d0:57:9e:12:
                    b5:a2:27:27:aa:3b:39:2e:0f:31:72:f9:ab:cc:a4:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3B:72:5B:50:59:4C:70:91:58:A7:9B:FE:36:05:BB:00:86:30:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ec62920f-e68a-33bc-843c-10d5d67dab79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:88:9a:78:c2:01:d0:93:b7:d2:9e:70:5b:3d:c3:f0:b1:65:
         35:14:26:0a:2b:4f:8f:d4:93:b2:d7:57:73:19:f0:10:63:04:
         c1:d6:9d:e4:ac:4d:1b:dc:1c:11:0f:a2:1d:1a:78:85:23:b2:
         e0:f8:41:b5:fb:24:0e:9b:29:ec:50:6a:e4:0b:5c:ee:7e:7f:
         bd:55:f9:bd:53:81:62:8f:a5:a8:93:b7:74:80:01:50:58:08:
         86:b9:71:d0:82:c6:ed:a0:6c:70:c2:5b:90:d3:c4:42:33:48:
         27:27:70:be:83:ba:66:98:30:18:c2:3b:f3:17:a2:f7:c0:a5:
         b8:68:76:14:85:fb:ce:32:54:12:3d:13:9f:60:a4:0c:14:cf:
         5f:cb:58:b3:f7:d4:36:77:28:55:64:ed:9b:ac:bf:6e:81:5e:
         34:e3:e3:e7:74:23:83:32:50:ad:93:81:03:74:3f:de:f8:34:
         eb:c6:6b:21:3e:79:a1:f1:58:90:4c:aa:e2:ef:cc:15:40:54:
         4e:ce:80:6a:70:c2:dc:e2:60:9f:a1:a5:52:e6:35:85:a3:8e:
         67:16:f0:21:68:d7:3b:f5:06:6a:3e:b6:30:76:67:67:b4:fe:
         31:6e:7b:4b:c2:d5:cd:a8:6c:7f:36:21:1d:29:51:33:36:2e:
         9a:9f:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:07:00 2025 by rpki-client