Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
File:                     36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa (raw, json)
Hash identifier:          7BXh2UdF6TvlCax/oBa9pnbNznE2vpScMfnzhg8sllY=
Subject key identifier:   09:30:A2:05:34:BF:3C:DE:1B:41:76:D4:41:76:31:C6:CD:56:51:50
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F432858483F801939BA527BECF8544CD0
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     398712
IP address blocks:        52.128.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:19:39:ba:52:7b:ec:f8:54:4c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=c61c88a3-4f9a-449f-ab91-23799d0b4279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:a4:fd:91:4a:37:30:ef:26:1e:4c:43:d1:
                    57:6c:b9:93:91:c8:e2:cf:04:05:f6:95:dc:e2:a7:
                    4d:c2:41:95:26:ba:34:b7:49:e1:e5:2e:7f:44:fd:
                    e6:0b:db:a2:5e:5e:94:65:00:c2:d6:e8:f4:cd:54:
                    93:8b:0d:74:a7:ae:99:82:2f:af:b2:f7:7c:5a:ad:
                    07:e0:9c:ca:e2:a1:fb:e6:3d:88:a9:51:cc:db:de:
                    e0:75:78:d1:11:41:f8:b1:5b:96:0b:50:fe:3e:30:
                    cc:06:e0:db:73:61:4b:a9:e6:65:02:ea:da:d4:d4:
                    d7:13:a0:01:77:94:b4:6a:66:5b:59:b5:1f:34:bb:
                    e4:8b:64:b9:65:a2:89:e3:b4:46:c9:cd:43:81:ac:
                    38:f6:9a:b2:1b:c0:54:e8:1d:e4:15:93:38:22:5f:
                    8a:70:d3:2b:fc:57:8d:85:48:56:fd:4b:3e:e3:70:
                    13:bf:be:1a:1a:96:2c:7d:03:b1:ce:98:d1:e4:00:
                    63:52:7e:6e:d5:03:f1:20:25:5b:18:f2:95:b3:9c:
                    09:1d:23:8c:91:db:7e:c6:c2:3c:3e:e3:2d:61:df:
                    a9:e1:a3:ac:fc:0d:1b:40:03:31:94:11:29:9d:95:
                    43:9b:54:96:6a:d5:f0:76:f0:ed:cd:c2:02:a4:eb:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:A2:05:34:BF:3C:DE:1B:41:76:D4:41:76:31:C6:CD:56:51:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/36bdd430-5ea6-3663-9b8b-1aa56e736aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:87:48:d2:99:53:86:09:a0:cb:23:1a:eb:71:a5:f6:38:
         d0:14:c9:fa:00:bd:cc:92:ea:4f:d9:4d:03:d8:fd:60:7c:6b:
         3d:e4:50:62:09:d1:c3:03:20:48:2f:87:91:f2:0a:ad:1b:46:
         3f:6e:34:14:b8:32:bf:93:84:d6:ea:aa:b6:45:a8:cc:31:92:
         f1:15:d4:e4:69:02:9b:2f:1d:77:dd:16:c7:d5:7a:d0:cb:87:
         ab:9e:aa:a3:85:59:09:1a:73:23:dc:59:28:ca:c9:bd:26:8d:
         89:7b:cc:ab:31:88:1c:17:01:89:d7:30:48:73:00:6c:22:7e:
         28:75:6b:9e:23:9b:03:69:fc:63:34:ab:a6:e7:c6:61:36:96:
         de:aa:20:bd:d5:ee:e3:a2:45:da:d8:44:9b:47:f7:07:df:ec:
         89:29:1e:ce:e4:fa:53:a4:21:16:8e:a5:18:5d:ee:75:1b:22:
         f0:ff:96:d2:ec:61:78:da:fe:a7:d0:3c:9c:2f:50:2b:bb:5a:
         ed:5f:62:fe:cb:7f:5a:ed:72:7b:05:2d:04:58:a7:fa:78:ef:
         2a:ad:78:2d:63:66:ce:00:63:3d:30:3f:89:65:89:ca:77:a4:
         ff:2c:0a:cd:55:3e:fd:82:72:54:3d:93:b5:7d:18:26:1e:c9:
         cb:ab:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:44 2025 by rpki-client