Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/273f6760-a7b0-34aa-98bf-7f4c739069b5.roa
File:                     273f6760-a7b0-34aa-98bf-7f4c739069b5.roa (raw, json)
Hash identifier:          M389Flts/qamMC5vs3UZLcr9EPsBnpgjg7FfKtBJ8HQ=
Subject key identifier:   9D:CD:97:1B:AA:77:00:22:DE:47:5D:08:47:DB:FA:1E:23:E7:B9:E9
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BD6A1DB9FE0F284DBFFA0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/273f6760-a7b0-34aa-98bf-7f4c739069b5.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        52.129.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d6:a1:db:9f:e0:f2:84:db:ff:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=0bff606e-ef19-43da-a237-eb7c72cb448e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:e0:64:76:72:8e:2b:8c:fd:f4:56:e5:d8:
                    df:c0:00:9a:1f:84:96:f2:b9:62:94:f7:b7:f7:df:
                    a0:dd:fb:74:1c:48:a3:17:64:30:0a:5c:a2:bf:b8:
                    3a:21:82:e9:25:f4:74:a0:30:2f:13:c8:4a:01:7c:
                    92:a0:7d:b5:17:d1:50:a8:64:77:52:ee:a2:16:e8:
                    86:22:9d:09:db:f3:16:15:6e:e6:ac:06:88:be:da:
                    0f:0d:c1:ac:7d:66:03:3c:80:0e:ae:dd:1b:00:3f:
                    ea:8a:b4:aa:6a:53:52:09:03:48:3c:c1:e7:fb:3b:
                    2a:b3:7d:98:42:0d:7e:28:77:36:9d:be:aa:0d:4c:
                    55:8c:47:f3:17:a1:58:e1:12:bd:e0:a0:a8:15:c1:
                    58:e4:d1:f8:1f:e8:76:c9:14:e0:c4:4d:9f:26:dc:
                    13:85:19:08:07:41:36:c4:cb:2a:8a:71:e4:b1:52:
                    73:b0:42:63:a8:57:17:11:b4:57:ff:b1:2c:dc:27:
                    61:85:f8:b9:ae:2f:02:c9:7f:29:d1:bb:63:b6:b4:
                    94:e2:f4:28:74:72:53:67:ea:ce:bb:5a:2b:61:1d:
                    78:5a:33:67:1a:73:0e:55:bb:eb:46:f1:c0:82:20:
                    fd:c7:c7:4d:5f:67:4b:22:e1:da:25:64:e4:87:25:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CD:97:1B:AA:77:00:22:DE:47:5D:08:47:DB:FA:1E:23:E7:B9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/273f6760-a7b0-34aa-98bf-7f4c739069b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:d2:46:fe:ac:9e:54:5c:cd:dd:4d:60:f0:9c:cc:36:00:
         1e:cc:07:59:7c:cc:62:a1:1d:8e:fa:76:9b:42:64:c9:e5:43:
         61:a3:ac:a8:21:4b:f8:d3:63:57:dd:0a:5c:55:b4:0f:1d:e5:
         23:2a:3a:56:a4:09:c6:fb:e0:e9:13:5a:4e:f5:e1:18:55:e1:
         77:27:14:07:49:ee:3f:da:48:1b:80:b2:5c:4a:7a:4b:75:c8:
         e8:d0:5e:77:d4:22:75:5d:88:fd:13:25:0a:cd:0e:0f:a0:ed:
         89:9a:66:4d:5a:b4:35:1e:01:9f:26:6b:4f:2e:80:cd:7e:5d:
         ad:fb:e7:07:49:86:22:52:a9:69:24:e7:ff:11:ca:c2:df:75:
         70:d0:38:a1:b7:b6:6b:69:bd:29:5a:8e:60:6c:f8:8d:77:66:
         c4:f3:db:77:9a:06:9c:8c:d0:50:c5:39:fa:75:0a:dc:b1:cf:
         9f:df:69:ae:a4:25:7e:e6:cf:fc:93:6a:b5:c4:0f:53:38:c2:
         b5:d1:76:41:6c:13:c2:a9:e1:77:ac:88:54:04:54:04:7b:45:
         56:72:6d:cd:73:34:18:14:61:33:36:74:7c:80:d3:86:2c:54:
         dc:6a:15:57:7d:97:31:34:d4:37:28:32:70:4b:be:51:4b:47:
         36:ea:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:38 2025 by rpki-client