Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa
File:                     f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa (raw, json)
Hash identifier:          pa7x4Tuv5O0XOySwodPX8wZ4vKATBecXmMDg3pVhN58=
Subject key identifier:   8A:2D:50:DB:3B:54:D5:80:FD:0C:5F:9C:2A:2C:78:5E:94:C4:F0:EC
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584878BB092FAD1EE1A39160A454
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.52.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:09:2f:ad:1e:e1:a3:91:60:a4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=5f7f10ff-ab85-44b5-863a-038c303d6853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:54:65:42:5d:cb:a3:f9:01:37:a9:7e:82:
                    01:f1:13:6c:6b:d3:87:ea:4c:e9:48:f4:15:45:5b:
                    d4:73:23:9d:83:28:0b:78:67:52:e9:d5:39:a0:4a:
                    a6:4f:aa:ff:cb:2d:e7:07:52:08:c7:67:c6:62:cd:
                    66:91:e8:d0:33:54:3b:a4:2b:5c:2b:25:fb:2f:7d:
                    f7:af:8e:22:33:3a:79:ec:5a:c5:f0:bf:6b:c5:98:
                    42:65:2c:30:92:18:5b:7f:20:f4:67:72:4d:77:5a:
                    e1:3b:2b:a5:1b:2c:fe:01:1a:52:e9:65:73:f1:a2:
                    61:92:dc:bf:4a:64:a3:64:cf:95:c9:db:cd:60:96:
                    2c:a0:93:5c:1e:0a:aa:48:c2:7e:ab:c8:55:a9:74:
                    82:b6:cd:ee:fc:c4:7e:11:e8:fa:28:36:58:ba:21:
                    81:9d:cc:69:bf:3e:4b:28:f8:9c:c6:d8:6b:74:26:
                    29:c3:92:46:73:06:41:00:4e:61:1d:b8:28:2a:2c:
                    7d:18:bc:e1:45:1e:e1:1f:e5:93:ff:99:19:90:18:
                    cb:b8:f0:a6:94:19:d3:b6:9b:ef:6d:20:ed:c6:94:
                    61:66:cd:6f:6f:e1:b2:36:e5:cf:b6:35:de:e3:78:
                    c4:e7:f3:31:60:17:2e:02:aa:ec:24:93:d3:76:75:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:50:DB:3B:54:D5:80:FD:0C:5F:9C:2A:2C:78:5E:94:C4:F0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:87:47:15:47:2e:00:92:37:e4:cc:68:2f:03:d6:85:0b:
         a1:1e:69:66:a3:45:a9:b4:23:99:72:06:8c:4a:89:56:b5:b0:
         0e:2b:62:a6:61:6f:77:ec:40:f3:53:d3:ef:7e:12:b6:83:74:
         e5:1e:b3:08:b9:ff:83:55:b9:0a:4c:f2:83:1b:ac:22:fa:d6:
         ac:0a:18:41:d4:0c:90:c3:29:aa:bb:8e:c5:16:21:64:1a:6d:
         61:28:b9:85:f1:12:7c:82:de:bf:c3:f2:76:d1:a4:79:ef:e5:
         ce:6b:c9:52:c3:e5:a3:7a:24:ce:d6:96:f4:1d:61:a8:ca:21:
         b6:c4:85:44:57:70:66:32:52:da:fb:b4:82:65:a8:32:ee:29:
         a0:a3:9d:92:cb:07:34:ab:92:9b:26:9a:9b:97:a6:11:6e:43:
         71:69:4e:22:ad:36:2a:7b:83:8b:a2:65:3b:03:d4:1b:bc:9a:
         3c:4a:a9:20:4e:c4:c1:f6:b2:66:15:e0:3d:d9:3f:ad:af:de:
         77:2b:9c:ab:7b:f0:46:8f:55:4c:5c:e7:f7:38:bb:62:66:38:
         d5:fc:d1:92:a1:e8:87:33:79:76:fc:e9:27:8d:ba:c1:3f:a9:
         ea:1d:7f:68:6a:0f:1c:87:5b:03:b0:2f:67:82:ef:8f:19:63:
         1d:07:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:41 2025 by rpki-client