Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa
File:                     f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa (raw, json)
Hash identifier:          SlamQVRvYXldjLPEoGBoY0NLtCjkbrInsOBmnliv0HE=
Subject key identifier:   5C:83:81:BA:81:72:A6:9F:B0:31:F8:88:F7:35:82:F1:1C:14:08:ED
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F432858488AE0A0C3B69A20B7EF667DE0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     25697
IP address blocks:        152.44.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a0:c3:b6:9a:20:b7:ef:66:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=61ee581d-04e5-470b-9ecc-81dd18680be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:61:1c:ab:76:4c:d9:c2:2d:26:9a:05:de:
                    9e:2e:cc:81:ee:cb:9a:d8:df:96:31:e9:62:e2:eb:
                    c9:ab:87:40:47:76:ca:b6:a0:41:2f:2c:e5:57:ba:
                    d9:b7:5d:ea:de:3c:3e:4c:22:6e:31:90:dc:52:df:
                    22:28:06:72:f2:ea:93:2f:52:0a:f5:73:3c:47:85:
                    9f:c6:6e:30:96:a4:65:dd:e8:cf:0b:c5:da:46:de:
                    8f:34:14:83:06:1c:6b:e2:28:90:2e:e8:19:a8:7c:
                    06:e4:31:ff:32:5b:96:cb:64:37:0d:2e:6c:8a:de:
                    ad:36:a2:2a:ee:9b:f1:9c:20:45:ff:7d:7d:38:17:
                    a1:f5:bc:49:45:d3:d8:06:58:2e:4f:6f:da:3c:da:
                    dc:a5:f3:61:1c:30:26:a9:8a:cf:0c:62:ee:1d:af:
                    84:2b:a0:a2:84:50:b4:bd:72:82:21:07:4c:79:b5:
                    7f:85:d8:7b:c9:21:a0:97:cb:4b:37:da:fa:aa:42:
                    20:55:da:99:e3:76:6b:18:77:92:7c:ff:3d:b1:5e:
                    81:2f:4f:bf:a8:ae:f3:b1:51:f1:ed:d6:d4:e0:e2:
                    52:86:2b:f1:38:0c:aa:81:17:81:99:32:6f:ef:76:
                    58:90:21:27:ee:be:e5:bf:d4:99:be:bd:be:8c:8f:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:83:81:BA:81:72:A6:9F:B0:31:F8:88:F7:35:82:F1:1C:14:08:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/f2bc0db1-3bbc-3071-a926-f7b2ffb534ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:6b:e4:33:35:fd:46:4a:80:ed:07:48:d7:6b:b9:f7:6c:ac:
         50:53:69:06:5c:94:f5:01:36:41:1b:5e:33:89:8f:94:a3:2e:
         a0:96:38:94:c4:93:a3:5c:03:6e:de:78:a3:3e:ab:ea:6b:ff:
         17:10:45:64:a2:56:a7:e3:b6:1d:6c:91:01:6c:d2:38:be:d5:
         f1:81:e4:f9:36:0a:51:43:12:74:e2:90:fb:a7:e0:67:14:c2:
         81:7a:58:ff:3d:d2:c6:70:60:ea:e6:9d:62:c1:d9:3b:ff:91:
         48:42:5b:9f:3e:95:18:0c:3d:4a:81:91:0d:dc:32:f1:9d:15:
         dc:fc:63:f2:07:b2:e9:76:e7:7c:59:f7:76:c7:e8:43:d6:7c:
         ed:2e:41:64:2d:64:5d:5f:6f:73:44:8d:b4:bd:c2:fa:73:f9:
         68:f6:b0:a6:95:97:b4:29:06:b8:36:b2:90:06:da:bf:0a:1c:
         e9:a9:c3:a8:a8:76:59:e7:c4:69:ff:2b:d0:72:8a:11:9b:f1:
         26:7e:77:b9:83:2f:70:f0:f2:fb:25:54:53:60:5b:23:6a:49:
         22:e6:c0:c2:ee:77:a9:9c:18:6c:be:d1:ee:68:2c:4f:6d:10:
         d8:5e:6f:ba:2b:94:77:98:5a:48:d1:c6:b6:b0:78:80:3f:0e:
         00:1c:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:37:27 2025 by rpki-client