Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa
File:                     cc70bf40-8d8f-3723-a43b-f785998133e4.roa (raw, json)
Hash identifier:          2EEgRaIhM8qcgKB+uvn9YfBXmHbW+MjfZA0ZC3w3uXU=
Subject key identifier:   52:74:2D:D1:0F:A4:72:B4:31:A3:73:C9:AE:25:5B:ED:33:A8:99:FA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848BFEBC4D6317893A3AE09FB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        157.5.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:c4:d6:31:78:93:a3:ae:09:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=fe8055ab-4f90-45d4-bdf8-3244b2e4b1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:58:e4:20:a5:f8:ae:fd:51:4e:c9:bb:26:
                    5b:34:1e:8f:91:eb:58:ff:f1:aa:f5:97:b1:73:0d:
                    5c:f4:e3:3f:e2:06:68:bb:7e:b3:05:f4:8e:01:c3:
                    56:56:77:76:b0:f1:00:61:39:98:42:9d:76:85:ee:
                    07:e2:ae:72:08:81:3f:98:c6:52:24:ac:58:78:50:
                    f8:73:91:d1:11:43:9e:b1:e5:c0:52:f4:9e:8f:31:
                    b0:c3:39:d1:6a:37:a2:fe:11:03:7c:dd:05:ae:5e:
                    fc:31:b4:d6:c2:90:30:fa:30:16:65:e9:29:eb:4c:
                    45:64:3e:79:9f:7d:fb:a9:ef:f8:62:51:8c:f0:32:
                    3e:5b:da:a8:8e:de:b3:68:a4:81:6c:98:96:eb:dd:
                    f9:8f:8a:62:fb:83:85:a1:ac:8e:02:9e:19:ef:03:
                    ec:b2:9d:bd:6b:6b:18:8c:66:a0:9f:f2:64:20:d1:
                    33:d3:92:4b:17:f3:2b:36:f2:c0:50:06:20:fa:b7:
                    0a:1f:a0:63:99:3c:a0:aa:93:08:39:a1:d6:7f:90:
                    b4:f2:43:7a:ef:76:28:9c:5b:f6:78:e2:4f:e5:2a:
                    23:8c:04:c0:56:41:71:fa:3f:39:7f:d8:c1:7b:c5:
                    a4:2b:fe:c0:08:b2:01:ab:d8:59:de:1d:cb:fe:54:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:74:2D:D1:0F:A4:72:B4:31:A3:73:C9:AE:25:5B:ED:33:A8:99:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:bd:65:a9:22:47:e4:2c:30:2b:64:1b:ed:8b:25:6e:24:
         98:f2:85:eb:58:f0:78:01:d5:19:51:7c:2c:87:88:a8:cf:80:
         da:02:32:3c:11:23:dc:29:3e:ad:a0:ab:80:ed:98:89:43:fc:
         a5:f5:ae:e9:b7:94:23:4e:4b:3f:b5:df:ad:2c:04:47:3b:e9:
         72:d7:46:fc:0c:8d:a6:11:b4:64:2b:f3:db:0d:bd:88:50:0b:
         a1:bf:8a:85:d3:45:a7:eb:00:f8:fe:0a:ac:36:93:a7:29:a6:
         94:e6:e5:77:a5:42:84:20:6f:c8:6b:34:dd:eb:d8:04:9e:54:
         4f:96:de:32:b3:f3:ec:0e:7d:f0:4e:14:d5:6b:f0:69:b1:74:
         ee:a8:65:06:5d:ed:9a:10:70:6f:4f:e3:8e:b5:19:fb:92:d1:
         a2:27:32:67:32:09:f9:34:9a:7b:e8:92:c1:11:91:57:1d:2a:
         01:d2:82:60:38:0b:3e:ac:69:7d:a0:82:19:24:56:9e:da:fd:
         75:60:10:14:7d:05:8b:5a:aa:83:35:ac:56:6d:50:b4:df:a4:
         6d:a6:8b:f5:7b:66:68:b2:2f:e1:65:04:e4:80:52:f5:3e:66:
         55:23:6c:9f:fb:04:9c:d9:a5:5f:f5:f9:87:2f:96:cd:c7:2e:
         b1:97:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:02 2025 by rpki-client