Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa
File:                     4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa (raw, json)
Hash identifier:          L7dVH+xzSo4jZlAbTwfezQH3Uw5wm546cwM5xUZbhyY=
Subject key identifier:   8D:1C:A6:A7:32:D1:B7:EB:E9:83:6F:C6:0D:9E:59:46:7B:AA:A8:BD
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584804DFBD65067DF28B8A20D780
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa
Signing time:             Wed 27 Nov 2024 14:00:52 +0000
ROA not before:           Wed 27 Nov 2024 14:00:52 +0000
ROA not after:            Tue 25 Feb 2025 14:00:52 +0000
asID:                     16509
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:04:df:bd:65:06:7d:f2:8b:8a:20:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Nov 27 14:00:52 2024 GMT
            Not After : Feb 25 14:00:52 2025 GMT
        Subject: CN=5ea0920d-de11-4ccd-9d18-6de8f8706910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:c3:b4:4a:5a:e9:99:22:1b:69:07:6a:8b:
                    65:af:d5:2e:6c:fd:5f:de:ca:8f:42:05:42:d4:30:
                    91:6f:cf:db:f0:44:eb:4b:31:d1:b3:69:7c:29:6e:
                    9f:57:4c:5e:31:0c:f7:e4:0a:03:18:04:94:29:c0:
                    71:27:2c:6b:f8:ab:d7:72:b4:97:f8:3f:7e:67:09:
                    34:95:97:a4:32:ef:6f:d2:3d:97:74:cf:ba:f7:4e:
                    e2:4d:d9:5a:67:f3:53:08:e4:b4:f8:bd:8e:8b:74:
                    4c:3f:fc:76:07:46:11:8c:af:68:a1:fd:4f:7a:12:
                    cb:d2:39:5d:63:3f:4b:ce:fc:27:bb:38:e9:2e:4f:
                    5b:86:42:a5:51:0d:a1:30:71:c9:35:d7:61:30:e5:
                    7e:47:43:ce:cb:48:3c:89:1f:9c:ad:4b:5d:09:b2:
                    1e:c1:7a:5f:30:56:0b:80:d2:3a:41:ee:b2:a0:e9:
                    ac:7a:61:e2:cb:87:f6:81:6c:4e:24:8e:67:dd:53:
                    81:d5:ca:1f:da:96:fb:81:e8:b5:3e:4a:0b:cd:72:
                    ce:f5:50:c4:28:55:f5:1a:a1:24:c6:e4:ea:49:f6:
                    b1:cd:c9:e0:c6:1b:64:ef:c4:91:8e:bb:29:3e:99:
                    7e:17:79:eb:7f:89:cd:ad:06:f1:af:27:25:28:f2:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1C:A6:A7:32:D1:B7:EB:E9:83:6F:C6:0D:9E:59:46:7B:AA:A8:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/4ed32b05-8c24-32b2-8c2b-3f014bc9c2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:61:db:98:07:69:5a:c0:e5:c0:a8:5f:05:09:80:70:51:
         11:38:98:29:fc:31:ca:62:f8:f1:1c:95:bd:78:2e:ad:17:7d:
         96:92:a5:fa:d8:2a:42:db:8a:af:3e:77:bb:65:86:ae:ce:a4:
         81:ba:f9:ca:2d:3d:e4:27:fe:a2:4b:b4:fa:40:fe:3e:fb:72:
         33:fb:92:93:e8:77:8e:52:b2:a1:da:1b:fd:20:f7:b5:07:fa:
         74:82:73:08:01:2d:d2:27:40:a0:7a:1f:a6:eb:93:23:66:ad:
         72:6b:c0:75:21:a0:83:59:1d:58:b4:e7:64:3b:48:d6:7a:c8:
         fd:98:bc:81:a9:f5:89:0f:68:32:0e:af:1a:7c:80:3b:9b:d9:
         49:a5:f7:cc:cf:30:53:4c:ce:07:60:c1:2a:4f:df:da:46:20:
         0d:e3:19:d9:68:be:eb:33:5b:86:ba:de:1f:03:52:b1:1f:82:
         7f:28:14:92:85:87:5f:e9:c2:fc:34:55:19:5f:28:df:a1:9e:
         e7:dd:35:f9:0e:64:86:bc:65:52:3b:3d:d5:e2:75:59:e0:ce:
         a1:6e:a4:2b:96:53:71:96:94:4e:87:e0:35:2b:49:c5:2e:3e:
         3f:46:d5:a8:2f:8b:a8:52:b8:2d:30:9c:db:5d:80:c3:a9:c2:
         5f:06:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:36 2025 by rpki-client