Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa
File:                     564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa (raw, json)
Hash identifier:          JRrB07WEP2fBNieuUX00GoLbZgKgLaJqS17vTS2BJ6E=
Subject key identifier:   DC:2B:E8:AE:75:55:09:BC:DB:9C:2B:94:A5:22:19:60:3E:4A:D9:18
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584858A05DF384FFB13FEC470D08
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     30722
IP address blocks:        47.53.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5d:f3:84:ff:b1:3f:ec:47:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=05e94d08-3424-40b6-8ea6-cf395bfdd8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:6d:0b:bd:27:5e:bd:e7:37:ab:71:3a:72:
                    9f:0f:b1:91:65:79:51:f5:72:10:37:23:f9:6b:a9:
                    1f:8a:3d:99:ec:c1:eb:e8:cf:5e:50:f5:09:62:31:
                    de:f9:46:9e:fd:49:57:1b:41:e0:d0:91:39:81:e7:
                    85:c4:83:e8:6c:52:7a:a0:94:f1:61:d2:4b:4b:3d:
                    0d:6e:57:fe:a8:35:c1:d1:76:ef:6e:3e:0b:bd:1a:
                    95:00:d7:dc:8e:9c:bc:c4:f1:19:d0:9f:44:f7:27:
                    d9:2b:60:d9:5d:59:85:09:93:0b:b1:55:ea:52:66:
                    80:0b:a8:0a:0e:83:1f:ab:52:c6:22:c2:fb:f2:c0:
                    91:0a:1a:d0:6f:67:28:cc:19:c5:7f:f1:14:0c:73:
                    50:3f:a1:26:5d:a8:46:52:64:a5:55:a8:f3:44:47:
                    dd:50:b7:45:92:02:c1:f2:5c:22:c2:6d:7f:ba:2a:
                    03:c6:ec:ee:9f:bc:4a:d4:46:e0:61:27:f4:f9:74:
                    57:85:c9:0b:1b:49:79:a7:8e:05:94:74:45:42:63:
                    a0:74:d0:c1:9e:1f:d3:00:29:38:a3:91:7b:0b:9e:
                    43:61:e2:7d:86:21:81:03:a6:91:1b:1e:36:ae:c6:
                    49:79:02:04:9e:3d:ec:b6:a8:ee:e4:28:4c:fd:bf:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:E8:AE:75:55:09:BC:DB:9C:2B:94:A5:22:19:60:3E:4A:D9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.53.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0a:81:9d:6f:35:6c:40:ea:0b:b6:53:aa:4e:4a:cb:58:6b:
         74:db:6f:04:5a:14:1e:fe:ec:bc:38:ae:d4:bd:05:6e:eb:bf:
         cb:52:00:5b:0a:42:73:34:67:e2:0c:e5:cf:59:5e:16:41:58:
         84:bb:1e:17:d4:42:c7:e5:07:e1:d8:79:c9:f6:6d:13:8f:b4:
         10:c3:b7:6e:34:bf:38:1f:df:6d:f1:68:69:14:b6:6b:8b:fc:
         a7:12:c6:2e:88:cc:2a:0c:66:4b:f8:c5:ce:92:57:1d:07:c3:
         a8:58:51:d4:29:31:5a:87:e9:06:28:5e:bf:0e:27:2e:90:41:
         1d:c1:ff:a8:05:2a:13:29:62:b2:43:77:8d:e5:64:a9:c8:5c:
         5c:f8:6e:0b:b7:43:18:df:94:d9:78:89:92:57:d3:24:2b:9d:
         f1:1e:51:62:a6:79:06:73:a8:bb:c0:eb:f1:d0:b3:b8:18:76:
         7e:b6:ad:d8:47:04:03:c6:c9:ff:ef:10:1f:77:ec:7a:d0:6a:
         ee:d5:1f:6a:55:3e:0e:b6:a7:b8:ae:3a:96:de:72:8f:ef:52:
         ec:6c:88:29:c0:83:22:a9:89:49:0e:c1:93:d0:06:f0:d9:8a:
         d9:16:99:7b:db:77:2f:1e:d9:f6:1b:ad:34:5e:67:3f:d8:69:
         fd:fc:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:15 2025 by rpki-client