Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa
File:                     3e5f7689-0ac5-3013-a3be-588929f3eeac.roa (raw, json)
Hash identifier:          ddyNIjOon40STtwMZ2vqdTftqigPiAzYvqwWNOji9SI=
Subject key identifier:   C7:11:4B:B1:4F:A0:17:9B:3E:68:68:35:05:E7:50:C6:45:D9:75:33
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848159FECB60A2817F0764A6040
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     4760
IP address blocks:        205.252.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:ec:b6:0a:28:17:f0:76:4a:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=7ae51f21-8a69-4b73-b80f-d436ddfe23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:c7:97:51:6f:2a:6d:9b:91:0e:5e:79:2d:
                    a4:fa:37:04:cb:85:9c:c7:64:62:6e:65:8e:1a:26:
                    48:2b:5a:17:57:2b:5d:f1:3f:bb:23:16:f7:73:9b:
                    34:18:10:9c:f9:67:ab:74:ab:e4:5b:62:59:b4:e0:
                    00:b3:1e:00:a6:60:5f:e0:44:7b:f5:17:bb:db:9c:
                    0d:c9:bf:29:22:69:50:b8:43:c4:05:29:b6:fd:e4:
                    94:7a:52:db:46:37:ca:6f:8d:3f:2f:89:15:5c:86:
                    32:7f:57:0e:7d:ce:44:3d:03:de:9f:47:93:7c:98:
                    bf:97:e5:32:16:59:35:4c:db:99:82:4d:94:83:59:
                    a6:31:b7:5d:c1:de:6d:81:ee:28:7a:72:48:dc:76:
                    55:1e:07:4f:48:a2:cc:e3:23:aa:68:9a:d0:10:d3:
                    86:bf:76:3a:f3:ee:fe:90:7b:79:20:c7:e0:2e:be:
                    f5:8c:58:21:44:eb:35:7c:a3:a0:40:7b:ac:e8:6b:
                    84:d3:7a:b0:44:98:ad:2f:4c:1a:66:17:fc:27:60:
                    4f:db:5f:d9:6a:7c:78:2b:ee:23:22:e3:04:25:3f:
                    01:a5:b0:2d:85:a3:1d:a1:82:63:c8:a7:76:e6:e0:
                    3f:a2:de:a3:71:86:a6:4d:dc:86:eb:61:9e:db:27:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:11:4B:B1:4F:A0:17:9B:3E:68:68:35:05:E7:50:C6:45:D9:75:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:df:d1:e6:3e:e4:52:7f:13:05:4c:49:fa:33:c4:dd:e8:
         45:a7:dc:b4:4e:90:74:c2:f2:e5:37:3c:5d:0f:35:b0:78:6b:
         fd:de:88:20:2f:7c:d2:a8:57:bb:33:0d:b8:36:7e:5f:fa:3a:
         03:88:d3:05:c2:b1:0e:5f:79:31:12:80:7e:58:f3:fb:2c:be:
         78:8b:af:3a:06:e0:aa:9a:72:8f:c8:e3:ea:44:8b:70:3d:ef:
         93:e8:2f:6e:95:1e:3f:72:b1:0c:e1:bf:c4:d0:35:8a:98:40:
         37:a7:14:b3:3c:eb:2d:ac:40:9f:c8:33:10:f1:27:f4:d3:68:
         40:de:a2:e7:1e:c6:9f:63:a2:b4:23:b4:fb:2d:9c:c9:26:8d:
         74:6b:b6:f8:36:11:1b:c8:55:94:e8:0c:a7:88:a1:46:30:07:
         e2:39:70:05:d6:83:11:10:29:c6:d9:0e:54:0b:5b:55:8b:cb:
         2c:2f:e8:04:ef:7d:cd:49:7e:83:96:0e:0e:82:bd:bf:b0:a1:
         87:d0:c8:7a:22:c2:19:4c:88:36:ab:92:a3:ad:4f:1c:6d:57:
         32:a6:c3:92:0e:f8:9c:19:f8:78:f4:c4:88:d3:10:ef:1f:bf:
         9c:0d:e0:38:2f:92:e4:50:06:a3:cd:49:48:d8:03:b8:f1:4b:
         b7:7e:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:16:11 2025 by rpki-client