Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
File:                     b758d768-536e-3bf2-96a6-ecc0554032dd.roa (raw, json)
Hash identifier:          JuYMoIXA5FuWe0HNM0cEQgLADBCPy/DO5uSxBrroWaI=
Subject key identifier:   79:80:61:88:F9:8C:3B:8D:F9:2C:D5:9A:5E:07:51:FD:3A:1D:CE:3B
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858485E35B6F5DCF6669F823251C0
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     14041
IP address blocks:        129.19.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b6:f5:dc:f6:66:9f:82:32:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=2f5886ec-2431-435d-9728-3607135aafd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:c2:d3:76:cd:67:52:50:59:fd:8b:09:7d:
                    53:a5:42:1f:85:f0:cb:4d:8b:e5:91:c1:f9:6c:9a:
                    77:70:52:2a:7b:84:ff:70:61:f0:9c:29:b4:b5:e5:
                    7b:74:da:f6:80:5a:f4:8a:28:ac:08:da:3c:fb:90:
                    55:c7:10:e9:4b:93:8f:21:94:84:92:44:18:4f:d8:
                    56:8a:a7:28:07:27:2c:a4:aa:5a:ea:a4:ad:14:e4:
                    c2:37:55:19:be:9a:3f:b0:a7:28:68:20:1e:2d:db:
                    a2:43:12:eb:02:3f:8a:b0:77:d5:0a:97:40:67:f0:
                    85:72:3e:63:17:f2:f7:6d:a7:a1:bf:37:d2:8d:9e:
                    b1:ec:e9:4d:91:57:40:ff:f2:9d:18:ae:c4:87:d4:
                    cf:06:37:f1:b8:b5:c8:14:d7:1d:bb:f8:e3:83:50:
                    bb:de:79:11:5c:ac:a2:65:93:e5:a3:b4:07:89:b3:
                    75:6c:62:1f:21:32:4a:ad:86:8f:d7:8f:11:f7:88:
                    28:a7:68:f9:7d:d3:ed:4a:7b:29:2d:62:2d:34:f8:
                    9a:3b:ba:3e:cc:a1:3e:b3:bc:51:88:e0:86:c7:3e:
                    a2:6c:86:0c:64:21:91:0e:da:21:d4:f8:76:dd:8b:
                    ed:49:4b:aa:32:23:ea:bd:cd:a5:7a:37:60:fb:e9:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:80:61:88:F9:8C:3B:8D:F9:2C:D5:9A:5E:07:51:FD:3A:1D:CE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:1f:89:fa:36:04:1f:96:73:d4:68:76:78:5e:0f:aa:9a:
         97:fd:9d:b5:f5:72:c6:32:b0:8e:1c:a3:06:18:74:ff:b2:20:
         1f:6a:eb:7b:3e:15:50:36:00:3c:ce:e0:df:a5:a2:84:47:67:
         88:d5:94:a0:cf:76:c9:95:e8:a9:4d:c0:f8:02:85:af:eb:a8:
         c5:82:0f:ef:5d:e4:04:41:ce:9c:f0:06:b9:1d:a9:9f:27:50:
         6c:16:dd:59:15:d5:1c:44:17:05:a6:c1:26:f8:51:e6:9f:84:
         9e:a5:7f:f2:2c:9c:ac:71:49:2c:88:15:d1:11:57:98:88:45:
         81:34:a0:b6:16:b3:02:8e:13:80:70:04:0f:47:bb:a4:7a:90:
         d8:06:02:99:ad:59:40:d7:99:29:20:bd:8b:88:98:d0:b8:db:
         56:f2:69:5c:69:48:d6:18:14:d0:f6:ee:9f:bd:0c:96:dc:51:
         4d:76:30:55:48:8d:95:bc:b5:14:9e:2f:b2:42:4b:aa:24:12:
         49:b3:dc:7d:dd:90:95:b6:4c:ad:73:e3:9b:0f:d2:28:c7:7c:
         c1:5a:a4:ea:ac:4a:49:56:f0:93:05:24:82:12:b5:34:af:d6:
         46:3c:37:65:1b:01:05:7e:70:f0:f4:dc:4c:87:db:9d:7d:91:
         86:4b:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:52:39 2025 by rpki-client