Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa
File:                     c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa (raw, json)
Hash identifier:          zD/pjbPyeCYSK3ci7wQ5IOhWrXB6H8xSgSI0ljgym1o=
Subject key identifier:   F0:88:A5:E3:D7:7D:29:C8:C1:2B:76:89:98:59:F3:03:29:6B:19:FC
Certificate issuer:       /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
Certificate serial:       010D0C9F43285848100A85442CDEE5EC41876500
Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     13727
IP address blocks:        52.129.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:85:44:2c:de:e5:ec:41:87:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=5ad855ef-538f-4140-b6c1-dac54ae785ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:24:17:1a:48:18:2d:b8:30:dd:00:fa:73:
                    82:df:a1:c5:9f:87:7d:44:4d:f1:a7:01:57:c0:83:
                    9a:58:c0:78:74:d0:d3:49:a8:2b:9a:29:15:77:7b:
                    47:73:05:00:a6:06:1e:70:c2:dc:11:41:8a:90:13:
                    35:41:ea:32:39:2c:04:1a:3f:55:23:22:d8:2d:5b:
                    1f:ab:fe:b0:64:54:da:3e:70:7a:6d:bf:6f:62:4a:
                    79:ef:ac:79:bc:3d:44:3d:a7:77:4d:5e:88:61:2c:
                    23:c0:c1:98:5a:a4:67:3b:00:cc:73:47:d5:40:11:
                    a2:a2:9f:14:82:ea:a1:db:3e:8b:41:74:3b:c7:97:
                    36:6e:60:80:15:07:8d:21:7e:81:65:0a:5f:12:53:
                    8c:59:e3:3b:d7:a6:57:df:88:03:6e:50:01:ac:49:
                    90:e1:6c:75:b3:09:62:8b:51:64:94:0c:ba:8e:bf:
                    c4:8d:ff:37:6a:b3:4c:a6:be:9b:77:78:60:33:60:
                    40:8b:f6:50:41:4b:f2:b0:30:40:2f:61:2d:4e:cb:
                    0b:e9:90:b0:7a:bf:73:bd:08:71:fc:b4:28:f3:85:
                    20:7d:01:4e:37:95:8a:38:d9:99:94:92:fb:da:76:
                    de:a3:db:6d:fa:ea:ac:0d:7a:37:f3:00:cd:de:a4:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:A5:E3:D7:7D:29:C8:C1:2B:76:89:98:59:F3:03:29:6B:19:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:05:06:48:67:2c:93:e1:1f:5b:97:33:e4:06:60:d7:6c:
         1a:6d:80:b9:34:16:8a:56:5e:29:fa:65:60:25:94:6b:6f:03:
         a6:9b:eb:34:18:29:a5:6d:7b:a0:99:b8:07:43:4c:ec:a3:30:
         97:8e:c9:2c:63:11:f6:35:c2:3e:21:24:bc:91:e9:0d:e9:64:
         90:41:42:2a:d6:b4:b2:e1:ba:7d:2d:73:cb:3d:0e:3b:3d:42:
         f4:51:76:52:ea:19:c7:6b:da:c5:b6:7b:24:cd:66:1f:51:b4:
         b5:83:97:d3:29:f2:15:73:c0:74:15:d3:29:40:83:48:bd:05:
         7a:6e:df:f8:1d:c9:08:37:ba:72:12:72:87:5d:be:60:e9:4b:
         9a:d1:ea:e7:7d:22:38:25:4a:ee:4a:bb:a6:b2:f7:24:44:fe:
         4f:28:0d:ed:db:ac:c1:ea:55:18:2d:9d:a3:e4:1d:5c:4f:84:
         aa:60:8c:ec:ed:41:bb:a6:b6:be:0d:6e:f3:87:74:5e:40:83:
         9f:0f:9f:a8:02:81:98:4f:2d:b1:8b:8d:e8:7a:d7:19:17:f7:
         d8:22:f1:7f:46:30:e9:22:a4:e0:6f:99:b0:83:a7:22:86:fc:
         75:e6:a6:11:bf:79:2e:13:af:06:a4:19:0c:7d:77:ad:d9:92:
         59:32:30:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoVELN7l7EGHZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl
ZDdjMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
NWFkODU1ZWYtNTM4Zi00MTQwLWI2YzEtZGFjNTRhZTc4NWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaEkFxpIGC24MN0A+nOC36HFn4d9RE3xpwFX
wIOaWMB4dNDTSagrmikVd3tHcwUApgYecMLcEUGKkBM1QeoyOSwEGj9VIyLYLVsf
q/6wZFTaPnB6bb9vYkp576x5vD1EPad3TV6IYSwjwMGYWqRnOwDMc0fVQBGiop8U
guqh2z6LQXQ7x5c2bmCAFQeNIX6BZQpfElOMWeM716ZX34gDblABrEmQ4Wx1swli
i1FklAy6jr/Ejf83arNMpr6bd3hgM2BAi/ZQQUvysDBAL2EtTssL6ZCwer9zvQhx
/LQo84UgfQFON5WKONmZlJL72nbeo9tt+uqsDXo38wDN3qRhwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCIpePXfSnIwSt2iZhZ8wMpaxn8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw
OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvYzYxN2RkMWUtNWNiNy0z
NWNkLWExYjMtMWYyODliOTI4MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl
M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw
ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi
N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLMBQZIZyyT4R9blzPkBmDXbBptgLk0FopWXin6ZWAllGtvA6ab6zQY
KaVte6CZuAdDTOyjMJeOySxjEfY1wj4hJLyR6Q3pZJBBQirWtLLhun0tc8s9Djs9
QvRRdlLqGcdr2sW2eyTNZh9RtLWDl9Mp8hVzwHQV0ylAg0i9BXpu3/gdyQg3unIS
coddvmDpS5rR6ud9IjglSu5Ku6ay9yRE/k8oDe3brMHqVRgtnaPkHVxPhKpgjOzt
Qbumtr4NbvOHdF5Ag58Pn6gCgZhPLbGLjeh61xkX99gi8X9GMOkipOBvmbCDpyKG
/HXmphG/eS4TrwakGQx9d63ZklkyMHo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:57:13 2025 by rpki-client