Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa
File:                     684a7ddc-fe37-3898-a92f-52690e597b61.roa (raw, json)
Hash identifier:          ncfRpsKgFZCjv8JUM6vLgylFwJzmcXX9I01Vf/2UF2A=
Subject key identifier:   2A:C3:35:3B:72:06:F0:03:7C:DB:68:C2:9F:8C:20:4B:5B:F9:B1:EE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584802082E4475E3709EDF724340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa
Signing time:             Tue 26 Nov 2024 13:34:59 +0000
ROA not before:           Tue 26 Nov 2024 13:34:59 +0000
ROA not after:            Mon 24 Feb 2025 13:34:59 +0000
asID:                     396587
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:2e:44:75:e3:70:9e:df:72:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:59 2024 GMT
            Not After : Feb 24 13:34:59 2025 GMT
        Subject: CN=8096431f-791c-4d3f-8a24-1f2e6e15107c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:4e:34:1c:07:eb:27:ca:d7:49:7c:90:c0:
                    33:90:48:ed:24:dd:59:c1:ce:94:bf:74:0a:97:ce:
                    6b:95:b1:8a:60:22:bc:a3:70:56:43:4e:c9:7b:08:
                    9d:48:36:d5:8c:5f:6e:7d:64:a7:9f:52:2d:f6:08:
                    fd:c6:b0:24:6d:63:c4:4c:7e:82:ca:10:76:f3:bc:
                    fe:41:4e:2c:07:3a:b9:a1:6e:00:21:18:bf:af:3d:
                    0f:15:96:12:7b:95:b4:6f:d3:3b:0e:a3:0e:34:05:
                    8f:07:83:a8:a9:71:3d:81:e5:2f:72:aa:b7:b3:2c:
                    52:c2:1e:6d:f7:46:df:de:d7:af:05:e2:59:0f:20:
                    92:89:00:d4:23:31:6f:82:f5:52:db:24:ca:f8:0e:
                    b5:09:b1:83:0d:0f:c4:78:e3:f4:9c:fe:b3:2b:21:
                    ec:70:82:e9:f5:55:35:ee:1b:19:08:e2:c5:d2:1d:
                    f9:26:ae:1b:13:d8:11:1b:20:3f:f5:30:cc:34:bd:
                    aa:7a:00:11:50:e2:0c:50:c1:9c:9a:70:16:8d:14:
                    11:e6:d0:0e:a6:32:29:32:24:fe:5a:5a:cd:9b:ca:
                    0c:06:1e:e8:4e:11:8d:43:af:7d:1a:bb:4c:ed:f0:
                    ba:88:d0:52:23:91:96:15:05:15:5e:88:6c:23:22:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C3:35:3B:72:06:F0:03:7C:DB:68:C2:9F:8C:20:4B:5B:F9:B1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/684a7ddc-fe37-3898-a92f-52690e597b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:a4:52:56:bb:e9:0f:ea:91:dd:5f:3a:37:8e:8a:4d:35:
         e1:2d:f2:a5:a0:88:f2:70:ee:53:66:90:d9:ce:a4:57:56:f2:
         64:04:49:94:d3:f0:e8:80:c0:b3:3b:01:88:0b:d7:6b:c5:6c:
         2f:30:52:6c:af:b6:67:4b:c3:17:fa:97:12:0d:2f:dc:24:02:
         9d:f7:e4:dd:d7:2a:fe:01:72:a8:75:0a:fc:64:6e:60:68:b1:
         57:eb:ec:3e:02:d4:32:05:6f:8f:9c:c6:2e:fa:87:62:b0:78:
         54:a5:9c:b3:05:62:15:63:58:8c:5f:3b:f3:9e:76:d5:ef:1e:
         bd:65:f4:3f:cb:f2:f8:2b:4f:a6:cf:14:91:4d:0a:da:84:5a:
         bc:77:5b:67:39:2c:5b:9a:74:6e:58:f4:f5:1f:74:b8:b1:a9:
         61:3f:9a:57:96:1d:83:08:e3:08:ce:59:40:0a:bc:72:00:29:
         c4:83:33:14:01:5a:27:a9:97:86:f6:fb:c3:35:d7:01:92:63:
         40:0c:bb:45:38:08:ef:ae:89:18:4e:46:ed:51:89:8e:ad:0f:
         75:88:3f:f6:5e:7b:63:a7:a5:a6:f1:90:b6:56:ac:e7:73:60:
         3e:75:df:35:9c:2e:97:2f:44:23:d6:27:51:d5:88:34:88:f1:
         33:4e:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:43:55 2025 by rpki-client