Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4749eead-ec57-3bf5-a170-067c72e9d613.roa
File:                     4749eead-ec57-3bf5-a170-067c72e9d613.roa (raw, json)
Hash identifier:          /06ZawapwB1crPkknrnWjCAdojTQdVa7xzl8qYRWgdo=
Subject key identifier:   02:D9:CA:5B:25:E7:42:4B:39:B8:5F:4B:E2:3B:EB:C8:C7:72:E6:2E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C3590A0E9857A716A9FA0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4749eead-ec57-3bf5-a170-067c72e9d613.roa
Signing time:             Mon 30 Dec 2024 18:10:34 +0000
ROA not before:           Mon 30 Dec 2024 18:10:34 +0000
ROA not after:            Sun 30 Mar 2025 17:10:34 +0000
asID:                     81
IP address blocks:        152.26.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:35:90:a0:e9:85:7a:71:6a:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:34 2024 GMT
            Not After : Mar 30 17:10:34 2025 GMT
        Subject: CN=e56c3c2f-77dd-406e-93a8-2fe22f17f94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:98:de:0e:e5:94:38:6c:e6:ff:cd:e4:29:
                    b1:a7:17:9d:0c:a2:6f:99:b2:be:2a:8f:4e:05:70:
                    9d:12:05:d6:90:bb:05:29:ab:6c:dc:5d:ef:96:a0:
                    6c:cf:da:60:14:67:36:7e:ae:c8:37:f5:bf:ff:05:
                    67:d5:62:5a:bf:de:f2:46:6b:3c:3b:16:fa:60:b9:
                    02:08:fc:02:e0:28:81:90:89:ca:43:1a:9e:3c:c7:
                    8b:71:6c:af:36:31:fe:50:87:8e:0a:99:66:cf:51:
                    a7:b6:8a:bf:1c:fd:87:d4:6a:61:39:0e:8e:88:c8:
                    73:25:39:94:90:69:39:3b:6c:89:14:5b:74:b4:c7:
                    a7:a4:e9:f0:14:1d:ea:b6:75:95:92:66:6f:1e:9e:
                    5d:52:e3:4d:53:f1:b6:2e:b5:45:f8:aa:a9:b9:57:
                    ac:42:57:8b:d6:bc:34:5e:fb:63:ff:19:3d:03:3f:
                    42:68:60:b2:4d:66:0f:e0:b8:64:6d:fd:06:fa:65:
                    d4:a7:e0:92:8e:9c:39:c5:ac:1f:fb:11:ae:50:2e:
                    e3:52:cd:d4:fd:cf:2e:77:4f:19:f6:37:b9:58:1f:
                    3d:63:4c:39:e3:b7:49:6a:47:b3:8d:2f:31:84:d3:
                    cb:49:f3:fe:4e:1e:55:76:1e:1c:1f:df:35:5c:29:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:CA:5B:25:E7:42:4B:39:B8:5F:4B:E2:3B:EB:C8:C7:72:E6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4749eead-ec57-3bf5-a170-067c72e9d613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:49:9c:78:e3:4d:8b:5e:be:0e:5a:98:1e:83:c1:08:a0:
         a3:1e:d4:c3:5d:4c:6f:58:d8:f6:88:13:55:63:1e:24:50:70:
         a1:2e:69:ac:be:52:74:b3:68:6c:23:dc:14:77:5f:79:70:e1:
         f0:ca:bc:5b:79:59:cd:95:6b:cd:ff:84:12:cb:05:20:f1:8a:
         c0:08:b9:21:f4:73:05:3f:7d:ba:2e:78:1b:1c:0e:29:61:92:
         26:92:f6:35:8d:ec:dc:9a:4d:e5:c0:b0:5e:be:ed:df:ec:dc:
         78:75:bd:86:79:6e:ed:9b:6b:57:a8:10:1d:16:99:49:4c:e9:
         ac:3a:e6:7b:0f:44:e5:a8:d7:a4:f8:2c:95:50:03:5a:9a:53:
         76:4a:21:fc:70:76:3e:0c:db:b2:ac:81:99:30:bb:b7:06:f2:
         03:f7:b6:f6:38:02:93:f5:cc:d9:2f:ff:60:b8:8a:69:54:bb:
         44:cb:3e:12:f4:92:a7:0a:8f:2a:4f:04:0a:7d:11:d1:7c:16:
         a4:c1:18:61:e5:fe:09:a7:61:81:ec:44:f4:a0:8e:dd:5f:69:
         02:0a:6d:18:b5:37:fa:f0:2e:f2:65:d9:50:e8:6b:a2:ff:73:
         11:5f:41:23:f3:07:0e:99:99:17:01:e2:e1:3c:0c:c4:b3:2b:
         3c:a2:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:43:41 2025 by rpki-client