Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e9fc6f95-731b-3025-92c0-2e7b7f2a8d36.roa
File:                     e9fc6f95-731b-3025-92c0-2e7b7f2a8d36.roa (raw, json)
Hash identifier:          J7nJKFcHGka+UREW0svcZYs5zPD525ybJ3azrN0MXa8=
Subject key identifier:   FF:C1:A2:99:61:B1:82:80:E9:DC:A5:77:F6:50:D4:A3:1C:00:D8:DC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C34C193982D3413AF9C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e9fc6f95-731b-3025-92c0-2e7b7f2a8d36.roa
Signing time:             Mon 30 Dec 2024 18:10:33 +0000
ROA not before:           Mon 30 Dec 2024 18:10:33 +0000
ROA not after:            Sun 30 Mar 2025 17:10:33 +0000
asID:                     81
IP address blocks:        152.26.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:34:c1:93:98:2d:34:13:af:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:33 2024 GMT
            Not After : Mar 30 17:10:33 2025 GMT
        Subject: CN=5492cacc-0019-48e6-a037-a6fbc38df611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:8a:f5:92:61:90:fd:56:30:64:2c:b5:75:
                    bb:d8:1f:ba:88:d9:3d:c1:61:a9:64:90:db:65:b6:
                    45:29:b6:c1:8a:ed:ec:88:a1:8f:ce:32:df:6c:4b:
                    28:28:8e:dd:a7:44:11:18:c8:f8:31:ec:af:42:84:
                    c9:59:d1:f2:5f:f8:44:a2:c0:2d:74:f4:d7:96:2e:
                    6d:d6:0a:fc:12:be:bf:5e:87:55:97:db:9e:2f:0d:
                    1f:75:ba:6c:7e:85:33:6c:40:ed:3a:ac:54:8e:27:
                    b8:77:ef:ef:53:5f:b7:0b:7f:39:6c:78:b8:5a:d9:
                    75:8f:58:4b:e1:fe:af:aa:0c:ec:72:7e:c1:45:58:
                    5e:8d:2d:d2:a1:75:56:91:ac:79:48:10:15:41:14:
                    94:1f:0c:8c:42:de:aa:8c:11:4e:1d:b7:aa:13:56:
                    d2:03:fd:5f:2d:4c:54:5e:b9:4e:e2:46:37:8d:ca:
                    06:f2:71:af:bb:7c:e2:63:a9:32:4e:35:de:63:43:
                    28:91:b5:71:fd:19:46:71:e6:e3:bf:50:21:95:9e:
                    8c:5b:31:3b:26:d6:e7:ac:1a:82:7c:09:9b:07:11:
                    8f:d4:8d:e8:e2:54:5a:85:22:61:ec:e1:69:cd:b9:
                    99:5b:76:78:a8:35:5a:c8:45:1c:80:a7:86:75:a2:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C1:A2:99:61:B1:82:80:E9:DC:A5:77:F6:50:D4:A3:1C:00:D8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e9fc6f95-731b-3025-92c0-2e7b7f2a8d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:87:d7:67:b5:88:4c:7f:0d:7d:d1:59:e4:b6:56:49:9f:2a:
         92:b2:b2:7f:88:9b:e6:20:54:4a:73:6d:05:ab:3c:8e:30:4b:
         c1:39:a6:18:bf:45:b3:67:5c:c6:45:76:43:62:d2:db:e5:b2:
         87:eb:cc:9c:f2:6c:b8:36:3b:5d:41:19:d0:0e:31:77:fc:af:
         c4:28:14:4d:88:a0:9a:d5:c3:58:32:95:a0:7f:3a:5e:d8:35:
         ce:b8:a2:a7:ff:4e:c7:16:f6:c1:a3:83:58:22:f0:51:6f:31:
         1c:73:15:12:e6:5b:1c:51:db:dc:d7:e5:cc:e9:29:af:6c:c1:
         3a:f9:d2:35:99:25:28:53:15:ba:23:3f:5c:dd:93:68:39:10:
         ec:b5:7e:75:c8:46:df:3f:a4:05:8c:c7:e5:e2:6a:41:4d:d3:
         aa:67:3a:4b:a1:f5:98:53:bc:3e:d3:91:97:bc:53:5b:bd:af:
         9c:87:8a:98:1a:04:02:38:01:64:00:4b:c5:e0:27:a9:1d:8c:
         72:b7:51:8f:81:cf:d6:cf:f4:ed:1a:63:ee:a3:85:93:a8:1c:
         10:46:c8:ec:12:02:93:dc:f4:3c:d1:8a:f7:fd:3c:2d:4c:31:
         75:d6:3f:de:09:aa:fa:c1:59:36:41:d3:07:03:8a:c3:d3:dc:
         5a:89:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:07 2025 by rpki-client