Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa
File:                     1814f33e-9120-36ed-b07e-30d6034f9571.roa (raw, json)
Hash identifier:          DWnXsNU2gfUJGDjb79Onm1We9ou/i4p9sZpJC/ryrg8=
Subject key identifier:   75:12:06:73:82:A4:F3:7B:6F:21:55:DB:14:09:3E:C5:56:23:F7:9D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584802082C88774CF5CD92EAEB40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa
Signing time:             Tue 26 Nov 2024 13:34:58 +0000
ROA not before:           Tue 26 Nov 2024 13:34:58 +0000
ROA not after:            Mon 24 Feb 2025 13:34:58 +0000
asID:                     22547
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:2c:88:77:4c:f5:cd:92:ea:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:58 2024 GMT
            Not After : Feb 24 13:34:58 2025 GMT
        Subject: CN=71ff9e96-5a5b-4052-a0b6-f20045997999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:44:63:c0:f2:33:63:c5:cf:b1:fb:a9:1b:
                    dd:05:5b:42:e5:59:57:e1:27:79:b5:a1:11:95:9f:
                    78:ae:ca:a5:13:1e:6e:c2:93:88:b5:2f:7d:cd:57:
                    4f:64:04:f8:9d:e8:42:05:5a:e0:0a:05:2d:f2:9b:
                    25:58:b2:cf:63:3a:84:bb:57:13:d9:23:1f:08:9e:
                    f8:17:64:31:9f:56:95:72:51:95:52:f5:6e:c7:0f:
                    b4:16:0a:83:38:a0:47:75:1e:4e:aa:fa:2c:ec:5e:
                    ee:6d:39:84:da:75:d9:bc:d9:7d:82:e3:ff:72:b9:
                    1d:c6:95:ab:7f:91:da:bc:9a:00:2b:12:5f:68:6e:
                    7f:aa:03:d1:90:74:f6:fb:8b:13:95:68:67:bf:58:
                    a5:ef:92:1e:9b:eb:c6:54:9a:45:42:94:24:14:28:
                    77:98:0e:39:ff:63:eb:0b:27:46:02:e4:3d:2c:8a:
                    ff:04:1b:30:36:03:c4:df:75:00:f4:5d:2d:71:6e:
                    9c:8d:e3:72:82:0d:b4:a0:fb:8b:e9:21:a1:5e:56:
                    8f:fd:47:6a:58:13:08:36:44:f9:b4:59:6f:3d:e4:
                    70:92:41:12:83:c4:63:75:87:e4:28:ba:be:a3:06:
                    91:8b:76:25:ec:b4:05:51:d5:63:6f:45:e0:cf:cb:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:06:73:82:A4:F3:7B:6F:21:55:DB:14:09:3E:C5:56:23:F7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1814f33e-9120-36ed-b07e-30d6034f9571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:48:70:19:23:35:1e:0d:ee:56:0d:d9:7c:c0:9b:d6:47:5a:
         14:2b:ae:bf:89:12:54:91:d9:e5:ec:9e:89:c8:cf:91:87:75:
         50:a9:c4:41:db:93:ff:5e:c1:44:f6:94:10:a5:c6:53:3d:f5:
         fc:b9:0f:16:6c:09:79:1c:df:65:df:85:5f:47:8d:4c:63:24:
         50:94:9f:94:e9:00:df:2b:46:54:f0:1d:3d:3b:fe:77:49:87:
         07:7b:8f:1c:20:a1:63:21:25:d4:1d:59:e6:1d:b7:fc:0e:9d:
         fb:51:7e:46:ac:5a:2d:0d:34:3f:d5:8b:2a:18:84:06:bf:04:
         72:b9:a6:13:b8:fc:99:98:dd:6d:5c:c9:0b:4d:79:44:53:b4:
         e6:fc:b2:77:6f:96:bb:54:1b:da:8f:fb:80:ae:b7:07:20:c0:
         6a:a1:4c:1b:04:8d:a7:ac:4d:1a:71:56:f8:18:72:61:39:4f:
         af:ae:c5:6b:5e:d9:62:f5:77:f9:5d:0f:70:ce:47:50:14:cf:
         d4:fe:49:b2:bd:c8:54:4f:fe:0e:99:39:ed:cd:e5:26:fe:29:
         23:ae:c4:58:a1:b3:f7:9a:22:87:d1:ba:67:00:f9:5a:ee:27:
         dc:f1:b0:ab:80:de:a0:c8:14:2f:71:c0:d5:6d:6c:b9:0a:f9:
         fe:33:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:32 2025 by rpki-client