Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa
File:                     00d6eb17-f865-352c-ae6e-6a855981e50d.roa (raw, json)
Hash identifier:          w82tISo5M0xNyq0GuHv0PcRwk7BAc294uvZnl/N/pj0=
Subject key identifier:   53:01:A5:84:B6:04:95:B0:67:6C:FB:E9:57:1A:F6:2F:F8:8D:F1:8B
Certificate issuer:       /CN=25283898-2dc3-4477-af3c-b64dd3c800ab
Certificate serial:       010D0C9F4328584883E5BCEF41C9C15569A2BA80
Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     13692
IP address blocks:        192.55.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:bc:ef:41:c9:c1:55:69:a2:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=663e0d15-dff6-4fd3-a196-7f688ac3501f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:c2:d4:bf:83:d1:58:7c:80:3a:1a:3f:9d:
                    59:19:00:e2:0f:17:7d:7d:f7:10:29:d6:b0:1c:e2:
                    0c:85:e1:34:c1:ae:26:2b:d3:56:6b:5d:6c:51:9d:
                    71:2f:1a:1c:89:58:94:63:7f:21:2b:2c:e2:72:8f:
                    43:b4:a8:e4:56:56:b0:c6:bc:a4:1d:e9:b9:42:4a:
                    f4:40:94:62:2d:b0:ed:43:01:45:49:44:bf:ff:0e:
                    44:ea:c2:3c:88:4b:3f:7c:80:b3:d1:e8:45:e6:45:
                    47:ea:38:6d:3f:4d:b8:a1:42:4d:24:86:a1:de:58:
                    32:4a:49:e2:e5:c4:1f:53:e2:c7:fb:4e:b0:58:81:
                    ab:08:50:a3:7d:4b:87:49:e0:fc:73:4c:8d:20:b0:
                    e6:30:3e:7a:eb:87:76:fc:bc:fe:ce:c7:30:c4:e3:
                    96:d8:50:cc:53:80:b2:34:63:14:8b:10:47:4f:df:
                    3d:81:f0:94:4b:69:55:e1:24:fb:94:a8:13:01:26:
                    bd:af:8c:3a:92:20:46:b7:92:7f:45:53:41:10:dc:
                    3e:eb:5a:26:e3:08:62:fc:28:1e:63:5b:90:e7:8b:
                    22:5e:17:93:be:07:1a:66:00:d6:30:f6:3d:0f:28:
                    9b:ef:53:58:99:3d:31:e1:d7:3b:c1:b4:7c:31:cf:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:A5:84:B6:04:95:B0:67:6C:FB:E9:57:1A:F6:2F:F8:8D:F1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:83:b3:23:81:52:3d:14:48:64:2e:48:c1:9d:33:5b:41:
         08:24:4b:cb:08:84:53:c7:bb:ad:57:6d:7b:70:2d:03:df:ce:
         fd:b6:58:26:ab:20:fa:52:9b:0b:14:2e:f0:57:a0:85:16:35:
         b6:f1:3d:46:06:be:6f:49:3f:b9:1f:be:39:a8:13:de:b8:0f:
         96:ae:ad:3b:31:1a:c6:90:53:54:93:74:0b:81:be:e7:e0:e6:
         f8:9c:0c:92:65:e5:3a:32:47:8d:a6:3f:3c:a6:de:b4:5b:26:
         23:4f:fe:e5:ba:1e:32:0d:28:67:b2:52:61:88:a9:42:4b:6b:
         9f:4d:7b:ac:7a:91:d4:73:dd:41:d3:57:33:24:1f:48:79:b5:
         3b:0c:60:af:39:5e:e5:f6:7c:9c:87:74:5d:da:31:d9:e6:55:
         87:79:d9:c0:1f:a9:04:29:58:08:41:a5:06:ba:53:26:3b:08:
         12:fb:57:79:10:cb:70:d7:55:a4:14:ed:83:43:4a:3a:02:d7:
         a9:1e:83:50:4a:dd:79:ec:08:3b:e3:44:78:73:56:5a:04:d5:
         26:c8:ee:41:80:3e:5f:47:87:18:73:c6:63:16:49:6c:1f:5a:
         b5:ec:68:99:fe:ef:49:7f:d9:5f:38:e6:98:82:9d:0a:92:da:
         0c:f1:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:23 2025 by rpki-client