Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa
File:                     5c105505-6c94-3c17-8a70-01babf353232.roa (raw, json)
Hash identifier:          f8AfKK/nw59LQH4ufOjprbJ9jWa9P9nu39OKq2dNMNQ=
Subject key identifier:   81:EA:B0:B5:69:52:48:E7:83:9E:53:29:29:E9:52:DF:03:0F:C5:F8
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584957F3FC2BD9ECD1D6AF007B00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     62610
IP address blocks:        128.14.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:fc:2b:d9:ec:d1:d6:af:00:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=4a40ac7f-ab7c-4c1f-9f7f-95fddb5455f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:85:04:73:9a:d4:6c:98:6b:93:d1:51:e9:
                    7a:0e:34:11:9f:ba:17:99:4e:12:f1:d2:08:e5:25:
                    3d:f3:39:0e:cc:0c:a8:9b:04:f2:82:d2:cb:8d:da:
                    94:40:16:2a:e6:01:4f:c3:05:e7:8c:a9:b0:0b:ee:
                    22:26:d0:be:5a:0c:f3:22:ab:4d:d8:a3:ac:06:18:
                    c4:32:c4:e9:91:87:9f:cd:c5:c4:f8:ef:d2:f7:ab:
                    06:ff:3f:6d:ec:ef:41:fc:1f:82:43:36:f9:11:61:
                    26:ed:bd:34:77:8c:a0:c4:50:d8:6d:5f:b5:1e:23:
                    26:8a:81:12:a5:a3:b2:05:4a:35:77:b6:37:59:5d:
                    c7:d4:0e:ae:64:3f:4a:60:18:4c:e3:69:f3:ef:5f:
                    6a:d3:08:b2:4c:86:67:5b:cd:c0:22:98:f2:b5:bd:
                    41:fd:b3:39:03:09:ec:39:5d:94:10:89:62:f5:64:
                    8b:39:db:92:02:ae:f3:29:7b:17:af:f5:3f:ab:f2:
                    2a:5a:38:e7:99:33:a2:f4:ba:a7:4d:0e:83:25:fb:
                    a5:ba:73:a5:32:5c:98:d7:f2:11:ac:fd:2d:1e:65:
                    79:0e:b3:2e:d2:73:fb:0b:ee:f1:c1:c6:7e:6a:c9:
                    0b:8f:15:5b:4d:60:22:fd:66:3f:34:4a:f9:bf:9a:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:B0:B5:69:52:48:E7:83:9E:53:29:29:E9:52:DF:03:0F:C5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:32:96:fa:62:3f:a3:40:49:ef:9d:f6:7f:41:e2:a6:22:
         b2:47:b6:0e:99:a7:f7:8e:6c:ca:f0:35:f1:71:0a:d6:ea:63:
         ac:c3:3b:7b:84:90:a2:a7:4e:51:22:ef:f0:3e:8c:67:a6:3b:
         3c:0c:58:e9:d5:bc:00:60:92:59:d4:c0:34:5a:78:4a:1f:ad:
         ef:5c:e6:df:ad:a6:ec:e4:4d:85:df:bc:33:61:05:4f:b4:13:
         3e:d6:66:02:8c:9b:85:2d:9b:ca:5f:3a:db:61:e7:1e:0b:5b:
         f0:0e:cd:bd:b3:6b:fe:b9:c0:41:0b:40:5f:c4:8f:ff:f4:33:
         db:d4:f7:2f:91:2f:04:60:93:36:40:04:69:a4:34:52:c1:ad:
         c4:f0:e1:fd:4d:57:72:2e:64:79:53:b9:3b:3c:e1:66:af:fa:
         e6:d4:9f:7e:1b:97:bc:34:03:29:c8:4e:90:fe:3d:59:de:5d:
         7b:6d:ae:6c:1f:23:7b:95:27:05:29:ac:bc:53:df:97:31:2d:
         90:49:58:06:b3:96:14:94:94:b8:e7:93:8c:cc:1a:17:19:0f:
         35:00:0c:8e:81:7f:c9:c5:7a:2a:45:30:b1:0d:f3:09:73:1f:
         6a:11:3b:86:de:b5:4b:86:b8:c8:89:b2:cc:b2:05:22:61:e1:
         51:7e:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:29 2025 by rpki-client