Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
File:                     bb18ad33-5add-3198-87f4-b7c59f066532.roa (raw, json)
Hash identifier:          KBg70qZY8Z4XHusy5RSzgAp1903/sHRkysLjqwIbuK8=
Subject key identifier:   74:E2:80:FD:3F:6D:CC:DC:67:DE:28:AA:BA:46:54:26:8E:13:83:FB
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F4328584878BB05D251E0C76D87344E80
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     29831
IP address blocks:        128.254.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:05:d2:51:e0:c7:6d:87:34:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=86882846-943f-4372-a88a-68211a39fecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:89:af:73:6f:28:c3:eb:82:94:a8:cf:7d:
                    bf:2e:05:aa:e0:f2:33:f6:61:61:e2:70:ad:47:ef:
                    b2:b4:e2:d3:c6:ae:ed:98:b8:a8:f3:22:d2:7d:a9:
                    6f:ae:a3:e6:1f:d6:0b:81:e8:74:18:ee:7d:34:15:
                    47:b7:be:1f:92:a3:8e:1d:e6:70:4b:44:11:ce:d6:
                    9d:10:27:5c:a2:c1:05:75:34:73:87:ea:a1:05:40:
                    41:dc:04:f5:26:eb:f1:37:69:79:bc:19:68:b5:18:
                    ce:05:fc:e6:85:c7:ff:e2:ec:ae:3e:59:db:77:c8:
                    ac:67:d5:c0:3e:0a:8a:84:9b:22:9e:5e:c9:72:cb:
                    41:11:6b:44:54:91:0e:7c:3a:68:21:0f:c3:65:5d:
                    ea:b3:64:65:d0:9d:a8:68:eb:42:e3:bf:35:9b:10:
                    47:07:2a:96:d5:20:80:8e:e7:7f:48:13:d6:c8:94:
                    fb:31:23:fc:4f:fc:b1:e1:ea:d8:d9:0e:51:11:68:
                    a7:93:a3:da:e5:a7:53:f4:cc:bd:c5:db:a0:9d:3b:
                    86:a7:a0:5d:eb:5a:b0:8f:0c:92:dd:ee:5f:d9:f6:
                    82:8b:80:51:29:ef:53:cb:e0:c4:8f:f4:f1:f4:9b:
                    0f:a2:a7:3b:25:79:3f:3c:5b:6a:b5:85:71:83:04:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:80:FD:3F:6D:CC:DC:67:DE:28:AA:BA:46:54:26:8E:13:83:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:86:c9:be:2f:7c:75:1d:41:f0:bf:4f:09:30:8c:50:16:5a:
         52:33:73:9b:94:c1:a1:cc:d2:d0:d8:c0:fe:f4:52:97:43:2d:
         9c:8e:ca:bb:db:60:fd:bf:81:b0:53:f6:01:cb:de:c7:11:de:
         23:55:9e:6e:29:3d:16:b7:85:0d:dc:f5:b2:39:f4:35:a1:b5:
         6a:96:16:a9:2c:f5:c8:b3:ce:db:46:b3:65:e1:cd:db:f1:32:
         89:92:5f:e6:7a:5c:a8:ea:63:46:75:e4:f4:30:36:12:85:31:
         3a:6d:96:4d:ae:26:13:0e:46:b6:cb:42:3b:cb:d1:9c:7a:30:
         b4:17:71:02:4b:34:9b:fb:88:ad:ba:2d:18:4a:ad:13:c2:62:
         79:b4:fb:85:c9:a4:f9:4c:49:7b:3b:1f:61:89:1a:7d:d2:9c:
         be:25:05:b6:d1:c9:4a:91:93:50:d9:78:b3:f8:70:2b:18:07:
         c1:9e:b9:5e:52:2d:07:a4:56:6c:ec:65:31:92:fb:f8:24:9c:
         a6:ca:8b:ea:8c:0e:7e:73:72:ba:94:46:0c:cd:4c:5a:f9:2b:
         d2:0c:4e:a9:0c:0c:a3:7a:25:06:c1:1e:7e:a7:8d:5d:82:45:
         17:a0:19:5f:71:26:ed:92:15:26:9a:1c:d4:6b:52:54:a3:77:
         cc:15:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:49:26 2025 by rpki-client