Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/b54cd9b3-8354-3384-a1a5-3c7866ed938e.roa
File:                     b54cd9b3-8354-3384-a1a5-3c7866ed938e.roa (raw, json)
Hash identifier:          IWbmDpyEAQTGaAihMZ+iVDkZGrnv0u/cgjei41N48sM=
Subject key identifier:   05:B5:46:E6:35:5A:D8:31:FC:6A:E6:8B:A7:66:89:E1:3D:E2:BA:48
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584897708D8E017D4E07F5883CC0
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/b54cd9b3-8354-3384-a1a5-3c7866ed938e.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     11377
IP address blocks:        159.183.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:8d:8e:01:7d:4e:07:f5:88:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=7901c691-35c9-494b-828c-dc8976aaee6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:5d:a9:2d:7b:0d:72:ce:d3:6d:b9:eb:af:
                    5e:36:65:06:2c:2d:e5:f5:26:e1:92:1f:33:26:95:
                    16:17:a2:32:bc:72:9e:9f:aa:66:bd:69:e9:c2:9a:
                    bd:fd:e6:60:a2:c2:a2:76:65:3f:00:dd:2a:32:02:
                    f0:84:21:30:95:32:1b:f1:cb:c7:9f:4b:8d:a5:24:
                    76:0c:95:57:43:6d:1d:ee:cc:09:76:ea:df:46:09:
                    3b:6a:a8:81:6a:d0:39:37:fa:72:e7:35:39:f1:f7:
                    be:05:5a:a1:11:40:86:d8:26:00:05:9a:e4:dc:f6:
                    19:44:b5:9b:d6:fd:c5:98:5b:02:3b:78:9b:1d:bf:
                    eb:54:08:09:4d:34:13:68:57:40:28:97:c4:e8:2b:
                    2d:7c:84:f7:20:a6:60:4f:73:d0:5f:2e:a8:24:68:
                    88:8f:64:21:85:3f:f2:9f:83:e4:ae:00:bb:ca:7d:
                    fc:aa:dd:44:a2:40:31:dc:a0:21:ff:32:39:a5:53:
                    dd:86:91:64:87:ce:9f:0a:31:2a:d6:f9:ee:b7:00:
                    29:72:34:4d:64:cc:24:a4:f4:c8:d2:9b:10:fc:e5:
                    5b:e8:19:92:d1:99:70:21:f6:0f:12:c4:ac:c4:c4:
                    dc:07:04:6b:88:a4:b4:d3:1b:4b:bd:2b:c9:e6:2b:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:46:E6:35:5A:D8:31:FC:6A:E6:8B:A7:66:89:E1:3D:E2:BA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/b54cd9b3-8354-3384-a1a5-3c7866ed938e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:d7:46:b8:da:71:96:f6:e2:35:88:ac:9f:d4:0d:2c:dc:
         ea:5b:25:c7:40:f4:48:14:de:c9:29:18:dd:e1:5e:78:b9:5c:
         1d:6b:87:45:b1:67:95:00:68:4e:8f:d5:60:ad:82:43:1a:b2:
         13:4f:3d:7b:eb:ad:f8:ae:e2:78:72:f9:eb:2e:b7:e7:80:0c:
         40:5e:79:3c:d6:9e:68:c1:2a:ac:7a:e5:00:20:31:26:c9:9f:
         09:a4:f2:90:c2:ee:f9:23:25:53:7f:4e:83:eb:e7:e5:ca:38:
         c7:96:68:ae:52:52:9c:d1:d0:93:01:e4:6a:76:a8:23:5c:0c:
         cf:25:6c:f1:95:b1:6a:05:5e:e9:1b:d4:25:a2:4c:b8:f3:d5:
         21:53:0f:8c:da:2c:92:50:39:aa:4a:63:1f:05:de:27:3a:e9:
         90:15:ca:a1:b0:74:d3:1f:f9:e7:32:ef:3d:1c:3f:4c:f8:a1:
         ae:39:f6:0d:85:44:0d:f9:cd:29:c7:8e:de:f3:bf:0a:e7:3d:
         f2:f0:62:19:6e:84:dc:4e:83:5c:5c:25:dc:7e:17:a6:65:de:
         d1:8d:e5:2d:b5:c1:70:72:00:0f:6d:a0:e1:f9:02:9c:0b:2c:
         09:47:dc:39:b7:3f:21:f2:49:5e:ff:0b:80:17:c7:42:80:55:
         2f:de:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:42:49 2025 by rpki-client