Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa
File:                     0d53c2ae-4922-3e33-8102-06de1e662cd3.roa (raw, json)
Hash identifier:          RP5r6/yp610h6ZNwP9uo0kzEVTVTT2eHwJcjUAIic/M=
Subject key identifier:   64:9E:CF:41:09:26:15:30:D0:83:41:B3:6C:D0:8D:12:7C:09:9D:75
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858487755D530D8C1EE68F746D580
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     21859
IP address blocks:        128.14.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d5:30:d8:c1:ee:68:f7:46:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=1dafd8ad-5c36-4201-b0bb-7fde62001938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:60:db:cb:9b:1a:78:ff:bc:5d:23:a5:4c:
                    68:89:b3:f1:b2:61:c5:bc:07:87:a7:a4:68:ab:97:
                    c8:6e:b8:43:3f:7c:72:60:eb:f9:48:1d:d7:fc:2f:
                    78:ea:7f:0d:47:e0:af:37:6f:f6:56:2e:e8:e2:c5:
                    0b:d7:92:48:60:4e:2e:fa:78:60:06:07:8d:6c:8c:
                    21:ff:90:38:60:ea:9d:e5:b1:30:9e:e8:12:39:fb:
                    f0:89:93:32:3b:b1:02:23:61:16:82:f6:b5:ea:c4:
                    57:77:62:e8:52:d1:b9:dd:4c:da:60:f6:05:06:94:
                    00:66:22:50:f9:e7:73:38:b4:1d:7c:c8:df:b7:10:
                    7e:5a:a2:4b:d7:05:51:a8:01:c8:34:4c:93:b6:10:
                    4e:9d:87:b3:d4:81:93:44:fc:5b:d8:8f:d9:47:c7:
                    50:f4:5a:e0:95:f9:a3:b6:e7:2f:e4:90:34:2d:b8:
                    3e:2c:ce:bc:fb:d0:a2:41:6a:0a:f3:d8:55:15:78:
                    93:78:27:7d:29:8c:d6:6f:8a:7f:e2:bb:56:38:3f:
                    72:e9:05:95:93:b7:c6:4d:07:ec:c9:f5:ac:45:7a:
                    f6:50:31:1a:b4:6e:bf:c8:31:6a:28:b4:57:58:29:
                    07:54:35:d3:84:62:38:e2:60:07:34:4f:ef:46:04:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:CF:41:09:26:15:30:D0:83:41:B3:6C:D0:8D:12:7C:09:9D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:0b:ec:3b:27:ef:2b:36:3c:ca:2e:ab:c4:04:29:29:b4:c6:
         d9:a2:cb:6e:d8:21:44:11:42:d1:43:da:1f:06:b0:29:de:d9:
         dc:bc:d3:36:74:24:ed:ec:25:62:5c:91:bb:f4:9d:12:bb:35:
         98:bb:eb:30:b4:64:10:c0:5a:8a:f3:0e:1a:99:53:8b:ab:21:
         97:6c:4d:e7:4c:5e:8f:ef:7f:b4:77:89:8d:0d:13:ad:50:49:
         1c:eb:43:fe:fd:20:20:28:69:de:ed:01:a9:32:a9:7d:75:6c:
         d9:ff:bf:18:9a:98:97:70:cc:ef:76:0b:df:f0:2a:d9:35:a7:
         8c:1f:59:74:63:6c:78:fa:22:0a:6e:bc:b6:a3:97:f3:45:91:
         e7:ec:3b:2a:d8:f6:99:7d:bd:4f:02:0d:30:c8:4f:72:ba:c0:
         92:79:5d:1e:8a:1b:a3:d4:7d:40:de:f9:cd:ec:4b:a9:04:84:
         01:97:7f:6c:d5:d8:aa:fa:14:6d:d0:c1:57:ce:e3:9f:13:63:
         5e:97:9d:56:3b:d9:c3:07:32:76:d9:23:d6:07:6b:38:80:da:
         e8:02:95:3f:ab:75:e3:a3:17:f5:95:f5:6c:d5:4d:0f:98:b4:
         a4:3d:4a:c6:25:23:c0:e3:f7:39:45:09:d7:1a:a2:a4:7b:75:
         6c:28:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:32 2025 by rpki-client