Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1a955959-17c3-3e16-b629-4420a791edc1.roa
File:                     1a955959-17c3-3e16-b629-4420a791edc1.roa (raw, json)
Hash identifier:          qZg9lRf918qbcqk3Zc11H6SAgWBH5JyYNnBVxM2rjnM=
Subject key identifier:   E9:6E:8D:6D:79:C9:1D:90:EA:D0:A1:63:C7:6E:4E:D3:92:48:02:20
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858487755CE5F3D4A04BD6326C0A0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1a955959-17c3-3e16-b629-4420a791edc1.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     62610
IP address blocks:        128.14.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:ce:5f:3d:4a:04:bd:63:26:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=5e7df11c-b5fb-4cbd-a8a6-9c4c756a915a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:38:9e:f4:32:d3:ac:4e:0b:97:1a:cd:cd:
                    85:d9:8c:b1:29:77:7d:f0:84:04:82:d6:dd:39:d0:
                    f0:ab:bd:10:74:04:10:04:af:b9:65:83:11:03:47:
                    4e:ff:45:8e:be:3c:1f:3b:a6:c2:86:08:49:b5:ae:
                    6d:53:36:13:a8:31:37:b9:22:f2:da:be:61:47:56:
                    8f:8f:fa:64:f0:7c:e0:e9:5b:71:9f:db:60:b8:6b:
                    28:f9:68:de:23:b4:5f:9a:38:27:a9:b3:a9:3a:cc:
                    45:8a:b8:19:4d:6b:26:4c:32:4d:cd:5b:c4:4b:a3:
                    24:42:d1:97:84:ee:2a:fe:d0:d5:60:d9:90:9c:b5:
                    58:31:07:4f:b0:e9:0f:7e:51:9a:40:89:12:6b:e4:
                    61:9f:1d:56:77:1c:99:80:ae:5c:43:a2:9e:00:c9:
                    1d:5e:dc:62:5c:89:76:5d:b7:f3:c7:d2:b2:a0:9e:
                    74:26:b9:cd:c3:ae:66:8f:a5:6b:cc:c8:9a:b4:a1:
                    50:74:8f:62:a9:2d:f3:61:15:fb:b0:11:8d:ab:5c:
                    fb:7a:df:3e:ce:e8:33:59:01:73:c4:6a:9b:3a:21:
                    06:b3:12:45:8b:45:48:17:82:32:a7:cf:c3:3c:61:
                    a2:db:09:1c:d7:7b:f4:da:2f:8a:1f:6e:29:25:84:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6E:8D:6D:79:C9:1D:90:EA:D0:A1:63:C7:6E:4E:D3:92:48:02:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1a955959-17c3-3e16-b629-4420a791edc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:ea:87:e2:21:18:63:c8:07:0c:26:76:2a:02:4f:2f:25:
         67:99:fc:0d:1a:a5:9f:48:07:7e:11:72:26:a8:9c:a9:3c:e1:
         61:cf:af:92:6f:96:5d:70:04:3e:0b:b3:f4:97:39:76:ee:b2:
         4b:30:79:bf:1c:7e:b7:f6:60:08:70:d5:d6:f8:66:1b:93:54:
         63:e6:b4:81:0c:20:8c:f0:40:47:ab:c9:24:8d:11:82:02:2b:
         5d:c5:c3:95:ee:61:9c:7e:47:a7:7f:e4:28:05:68:02:f7:f0:
         55:3e:bb:40:5d:fe:5e:24:38:e0:e9:59:da:d1:58:31:d8:fe:
         1c:f3:4f:b3:7c:ff:97:25:9f:17:b5:30:63:a4:f3:3f:4c:89:
         57:05:9c:ba:e3:21:2b:91:d5:1e:81:82:23:5c:da:55:5e:c6:
         79:11:6b:07:6f:45:8d:25:83:36:24:60:44:dd:1a:05:e2:16:
         86:14:b6:aa:77:90:fc:c2:e9:b5:72:6c:c5:23:81:68:52:8a:
         ec:36:08:63:40:e5:45:56:11:4a:42:22:00:22:58:41:44:58:
         14:ab:86:a7:ad:f2:96:db:dc:d8:8a:df:20:1e:a6:15:b8:77:
         9a:4f:5a:fa:8d:12:d6:c3:93:d2:f6:81:4e:fb:db:41:97:0f:
         d5:6b:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:53 2025 by rpki-client