Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa
File:                     b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa (raw, json)
Hash identifier:          azfhikRJVGN1PXC/XZ4+nNh2n1dUg6RXGR0oVtYGrwI=
Subject key identifier:   4C:14:86:53:17:50:6C:73:E7:E9:5F:09:04:9B:27:28:57:87:A2:FA
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F43285848C2B64E2BD635DD62AEFA6E20
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     29848
IP address blocks:        144.26.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4e:2b:d6:35:dd:62:ae:fa:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=22da1eb1-ca1a-43ff-9148-784180eab288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:52:a4:da:63:b1:13:19:3c:1e:46:cc:83:
                    04:6b:d8:f1:05:59:23:c7:61:b2:ad:6e:05:b4:11:
                    93:56:09:89:cf:b6:62:62:a1:4e:24:a8:02:44:63:
                    b8:5a:37:ad:ef:20:3a:cd:9b:f6:55:fb:0e:10:68:
                    72:f6:e1:3b:a1:cf:e4:41:e8:bc:9a:ba:8f:a6:f9:
                    cf:6d:60:fa:0a:02:cc:ab:f6:26:6c:41:56:9b:97:
                    6f:4d:c5:4f:86:4e:60:94:28:fa:2b:23:fc:24:0e:
                    b5:93:30:59:02:10:07:14:46:59:fd:1b:9a:dc:be:
                    23:82:48:7f:ec:84:00:30:cb:e1:d5:49:ea:bf:ab:
                    92:ca:3a:e0:bf:c7:ef:7b:df:b5:32:77:71:d7:82:
                    70:4d:b2:14:7a:1d:0f:4a:d3:ff:e2:12:42:b3:63:
                    09:52:00:65:61:7d:da:ec:2a:be:6a:6b:1d:23:ac:
                    8b:f4:bb:6c:e6:0a:f4:0a:cd:98:3c:2e:00:7f:40:
                    f9:27:98:50:03:4c:e3:db:9a:79:0c:c1:51:f8:0e:
                    cf:19:ac:cf:20:80:3c:54:d6:8f:be:93:cd:4b:19:
                    dc:ef:c5:a3:a7:fa:e8:97:a9:0c:e0:e4:c9:64:e6:
                    41:da:dc:4f:8b:44:aa:5e:33:bb:2e:66:fe:af:ca:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:14:86:53:17:50:6C:73:E7:E9:5F:09:04:9B:27:28:57:87:A2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/b5c54115-55ad-3316-b7ed-1d4f8aaf3d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.26.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:f4:67:6f:36:8e:d7:fa:92:37:da:f5:8f:9e:25:97:0c:
         a9:c1:b8:43:36:fa:ec:e9:71:2e:21:0a:94:16:7b:c7:5b:dd:
         bd:61:8e:47:77:63:b1:7b:43:ff:8f:db:67:59:5a:72:c8:4b:
         59:63:fe:ae:5c:9a:ac:e1:a2:59:5f:c5:20:ec:ed:09:ce:f3:
         7a:61:26:fd:cb:65:3e:f5:b8:97:0e:4b:46:89:24:22:d7:48:
         93:c2:50:bc:19:bd:92:7c:44:86:96:d1:82:ba:70:62:02:06:
         e5:5b:a9:c6:07:08:d1:13:48:ec:4c:80:f1:f5:7f:ea:23:b8:
         ee:7d:62:91:b3:98:aa:cd:b8:0e:08:37:b1:30:d7:79:b8:91:
         74:cf:cb:c6:74:34:00:db:1f:bb:26:ae:ef:6d:f4:46:f1:38:
         c2:30:3b:d9:17:94:cb:9a:49:cb:b0:06:15:18:d7:54:02:d2:
         cf:38:6c:93:c2:b9:74:b8:15:18:d0:ff:1d:83:1e:8a:e3:1a:
         79:ed:49:d0:8f:a0:ab:fe:58:b4:f4:ad:4b:5c:fe:50:16:f6:
         43:0c:89:57:90:54:c3:39:60:19:de:87:38:ea:bb:39:a0:ec:
         e5:70:49:0f:38:63:e1:2e:97:5c:91:3b:46:79:9d:37:33:b2:
         28:14:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:28 2025 by rpki-client