Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/6753fc1a-c50b-3e79-b9ba-3678b5974856.roa
File:                     6753fc1a-c50b-3e79-b9ba-3678b5974856.roa (raw, json)
Hash identifier:          3Bsc9PYZ7tIYWvhfb+LWkQ2vPtovmdToy2bFFZXmwDg=
Subject key identifier:   8D:F8:7B:57:29:5E:96:9C:A5:ED:A4:F2:D1:87:05:AA:B8:4B:5E:C7
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F43285848977091D5125CA72C594B7700
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/6753fc1a-c50b-3e79-b9ba-3678b5974856.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     11377
IP address blocks:        159.183.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:91:d5:12:5c:a7:2c:59:4b:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=bac3f5fa-dbc4-41e4-8ef1-444665050b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:8d:5e:af:b9:6d:22:3b:fd:0c:53:29:63:
                    9e:00:bf:f1:e4:24:55:1c:8e:4e:bb:87:0d:f0:37:
                    e0:00:38:b0:6e:c3:1b:49:30:e0:c2:0c:14:7e:cb:
                    75:87:79:67:71:3b:c7:4c:e3:2b:d4:33:5c:64:12:
                    87:60:f7:51:25:80:8a:29:f3:68:f1:01:5f:f6:f8:
                    aa:22:15:9d:b5:50:f0:52:c5:c4:19:12:53:70:b9:
                    4b:7a:8e:f2:25:d1:9e:4c:59:03:c6:cf:51:88:38:
                    f8:9a:ae:c1:52:fc:bd:c5:c6:9f:cd:4f:da:57:9c:
                    55:0f:9c:7f:9c:bd:2f:64:e1:70:32:9b:b7:97:4e:
                    d2:ed:60:66:73:1a:3d:40:4f:a8:bf:db:73:cd:58:
                    8b:54:33:3b:7c:a8:35:b2:ca:b4:70:4b:34:8a:b1:
                    d5:7a:3f:24:d7:ac:4a:af:02:88:ef:11:82:f9:c3:
                    ce:47:5e:25:74:16:69:ec:3f:6f:03:48:ed:20:4e:
                    6b:c1:18:02:04:33:a3:ac:e2:0e:97:02:3f:42:e9:
                    69:c9:cd:e9:08:b8:af:51:a1:34:1b:ec:57:7e:95:
                    b2:ed:c9:f2:17:12:ae:55:85:b0:7a:ef:0d:e1:4e:
                    80:ee:35:a1:ac:88:6b:02:0e:28:b7:8c:06:69:03:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:7B:57:29:5E:96:9C:A5:ED:A4:F2:D1:87:05:AA:B8:4B:5E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/6753fc1a-c50b-3e79-b9ba-3678b5974856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:88:7d:7f:9d:fe:4b:5a:01:d1:35:04:96:c9:18:9c:b9:59:
         6f:f8:be:cc:c7:a9:d8:05:59:95:fa:2e:88:fb:c1:eb:e9:1b:
         1f:67:a3:54:2d:23:a2:fa:bd:bb:38:b9:df:38:51:d4:57:0d:
         5c:e2:06:03:12:13:83:d1:9b:f1:32:49:41:31:a5:5d:bf:48:
         46:8f:5d:6d:0b:43:bf:78:10:d9:40:d2:f0:d3:1d:f5:6a:32:
         69:03:ee:be:20:1a:87:b3:16:69:53:41:e7:8e:4b:1d:fb:7c:
         b6:7a:49:7c:96:dd:6c:6d:76:ee:24:6e:2a:39:a8:48:50:58:
         dd:59:cd:5c:82:a1:9f:cd:6f:40:66:09:a8:76:7c:e4:e6:e7:
         c0:01:4c:71:13:76:f0:7f:6e:63:3f:a0:1a:ef:67:7d:1a:2e:
         03:bf:a6:d6:87:cd:46:10:55:7e:ec:54:75:ab:ab:46:7d:1d:
         ca:f5:e7:fa:b7:af:10:cf:ee:8e:50:d1:a5:fd:77:9d:ff:eb:
         7e:dd:0a:d9:c5:69:c0:ac:1c:f1:e0:37:38:11:69:b0:4f:55:
         4c:e8:41:f8:5c:0d:7b:73:ee:ff:6a:17:49:98:e5:aa:ca:75:
         a2:ba:9d:31:5f:88:18:37:04:58:50:0b:7c:8e:04:64:ed:ad:
         3d:25:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:53 2025 by rpki-client