Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/083597b8-b196-3c89-9748-24bc522460fe.roa
File:                     083597b8-b196-3c89-9748-24bc522460fe.roa (raw, json)
Hash identifier:          0eRiQwAlI3TBzuXlbNtfuTnG/3V2uIQcFmobPevZc/E=
Subject key identifier:   02:E0:C2:43:6E:F4:16:04:A1:F8:D4:A9:77:99:84:B5:34:AB:FD:28
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F432858488815E07ED411899818AA4A98
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/083597b8-b196-3c89-9748-24bc522460fe.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        208.52.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e0:7e:d4:11:89:98:18:aa:4a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=1a105a97-2b2a-4e98-9f01-38cbeff08d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:6a:93:9d:a2:25:b0:21:d4:37:8c:1d:09:
                    66:b4:77:af:f7:de:60:b4:4d:0e:ef:26:9c:45:bb:
                    7f:eb:dc:a8:a0:a1:4e:a6:11:48:e7:a1:0b:d0:b0:
                    c1:95:da:ae:da:a1:e8:77:71:1c:47:05:bd:4f:4e:
                    93:f0:77:2f:8c:3e:29:34:0e:39:37:9b:2e:bc:e6:
                    38:98:27:64:7f:28:08:05:fd:50:ce:9a:e7:93:e8:
                    ed:32:26:5d:23:88:92:9b:d4:ec:f0:38:47:65:25:
                    25:41:71:16:40:16:5d:e0:e8:e0:bb:26:1c:40:7c:
                    c6:f8:93:17:a5:4e:3f:d9:be:be:1a:89:1f:37:63:
                    6d:4b:b0:63:46:f0:d1:de:68:7d:34:79:41:8c:82:
                    df:cb:a1:90:14:70:12:0d:2b:65:74:5e:f9:2b:a6:
                    3b:8a:76:ab:4a:b8:02:b4:f5:cb:d3:68:87:ed:65:
                    98:77:75:23:72:5e:cb:34:71:d8:23:90:b2:9b:e0:
                    58:a7:c7:db:a0:66:bb:fe:0e:92:61:b7:dc:03:9b:
                    74:3f:e5:3e:59:4f:9a:84:0d:40:ff:b0:5f:ba:f7:
                    bc:3b:7f:5f:1d:21:49:d2:f4:f6:1b:15:bf:6b:ec:
                    41:cb:90:73:4e:bd:b0:e5:d7:7b:e3:0e:f3:7a:f0:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:C2:43:6E:F4:16:04:A1:F8:D4:A9:77:99:84:B5:34:AB:FD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/083597b8-b196-3c89-9748-24bc522460fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:9c:24:61:ac:92:e4:01:c5:59:05:68:87:bc:28:c4:1d:
         3b:b6:d9:87:b1:e3:79:81:68:d2:96:57:b6:98:a4:85:29:3b:
         05:2a:71:27:5f:0a:d4:8b:80:51:09:3f:db:0a:f0:b1:43:49:
         39:cb:0f:dd:a4:bf:e3:28:05:56:f2:8b:ba:0b:73:8d:4e:85:
         2d:2a:f7:92:68:70:0f:b3:2a:04:f9:a6:c1:4b:07:6a:54:fa:
         30:c8:e3:1b:b9:34:1f:10:4c:94:f9:0d:a7:96:2f:01:d2:51:
         ef:86:94:a1:41:6b:ae:c1:2c:69:ee:89:d6:30:33:e8:2a:51:
         17:b8:17:7f:68:48:36:2e:3d:79:de:7a:d9:57:71:bd:6d:84:
         66:85:7e:7e:c1:53:e2:2a:e6:fc:79:63:dd:a3:9e:9b:a0:a1:
         6c:55:fe:3f:89:19:e8:b5:ef:38:6f:79:ef:5b:b9:24:aa:6f:
         7e:9a:ea:f2:74:71:53:4c:88:40:d0:a3:40:07:ca:54:fb:a4:
         91:33:3c:b5:8f:83:52:72:8b:66:22:b9:b3:e6:16:12:1b:b8:
         35:0c:30:87:e4:db:11:06:b1:a4:d1:bf:1b:f6:60:32:5e:44:
         82:b6:08:64:17:e4:80:02:3c:83:71:39:e0:3a:bb:a7:b2:58:
         41:24:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:16 2025 by rpki-client