Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa
File:                     52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa (raw, json)
Hash identifier:          weOeegQe/X2QHBaBploWhd9o+DxwHoGZPUpcO+LTDVg=
Subject key identifier:   E2:7C:8A:DE:2B:3E:02:D5:EE:1C:83:FE:25:FC:44:03:C3:5C:2D:14
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584900215B9ADCA6C2EAEC7DF100
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     14015
IP address blocks:        148.76.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5b:9a:dc:a6:c2:ea:ec:7d:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=0375475e-7515-4dee-9e4b-b6721c9b5604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:80:9e:f5:eb:ca:f9:cc:c1:6d:57:c4:17:
                    04:0e:84:c1:62:52:05:13:f5:28:15:ab:fa:63:87:
                    93:14:dd:47:15:5d:e3:b6:3a:88:0f:ef:89:34:0a:
                    66:50:ee:79:86:ca:48:58:c9:ce:d2:0d:34:6b:d4:
                    d6:51:af:65:80:a5:11:3e:f3:25:7c:f9:c4:41:4b:
                    55:03:68:8f:8b:dd:8b:42:44:4a:f2:20:d8:9c:1c:
                    26:e7:56:eb:e7:ba:fc:c6:ea:fe:bf:0b:8b:06:cd:
                    09:3f:10:81:3d:0d:ab:42:74:3f:74:c7:c6:6e:db:
                    98:45:2e:b7:fd:29:8f:00:a7:12:38:9b:ec:b9:3d:
                    63:b1:e0:eb:20:87:2f:04:43:ec:0d:86:40:fa:f6:
                    26:f7:30:89:5c:9a:3f:6a:d5:34:00:24:46:57:5d:
                    40:be:7f:eb:b5:8c:e8:9d:8c:50:03:7b:90:a1:a3:
                    55:8d:76:08:46:c3:36:5a:42:9a:7e:a0:f3:52:a1:
                    66:5b:02:b7:57:f4:c8:14:b5:3c:97:49:b7:4f:fd:
                    58:56:60:e5:c4:ab:2b:8a:64:8f:37:a6:9c:82:27:
                    d8:2e:bd:6c:b9:1b:1c:d2:09:ad:6a:a8:b5:09:4f:
                    7c:4f:71:36:80:43:0a:f5:d7:fb:40:49:01:c3:8a:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:8A:DE:2B:3E:02:D5:EE:1C:83:FE:25:FC:44:03:C3:5C:2D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:cd:29:dd:52:21:66:6a:bb:71:b9:97:b4:5d:c7:f3:05:
         34:88:4d:f6:61:f5:67:60:f3:f4:67:19:63:98:51:1d:0c:73:
         ad:76:25:d0:48:93:f6:72:c9:89:7c:28:8d:b9:82:e4:56:49:
         e9:2b:30:2d:12:93:6d:bd:b1:44:54:9d:f6:9d:aa:2e:1b:96:
         e3:13:57:bf:79:78:f5:53:66:cd:5e:d5:7d:91:a2:56:70:83:
         68:12:bc:5b:d6:43:f8:d5:a0:d1:ea:43:4e:95:7c:c8:78:24:
         21:41:56:b9:e2:43:32:fa:8d:ff:57:9b:93:3f:7c:51:72:03:
         b8:f2:1c:bb:56:eb:ec:b3:a6:65:62:4e:18:45:31:3d:b8:4e:
         e1:1d:1c:a8:70:22:0c:4c:18:cf:c9:31:e8:55:64:76:61:62:
         b6:a8:cd:ba:f6:fb:ce:4b:6c:91:78:98:85:f6:49:0e:49:4b:
         9c:35:b5:e2:2b:de:cc:2f:35:e5:37:b8:97:80:fc:6e:a1:24:
         52:23:f9:64:ca:fb:25:88:0a:75:77:08:3c:69:bf:e5:7f:20:
         01:61:eb:bc:57:eb:b3:cf:16:3d:41:f3:19:dd:fd:eb:c7:b3:
         96:af:b5:38:5b:6a:ec:7f:70:7f:9c:7e:f4:25:62:17:d3:ab:
         a7:33:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:05 2025 by rpki-client