Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ec56d9d1-0100-3aba-9227-43fefecfd92a.roa
File:                     ec56d9d1-0100-3aba-9227-43fefecfd92a.roa (raw, json)
Hash identifier:          ZMqwhG2A24q8wMsUf85u0tY5D+63klkWvI2Nw8eFfbo=
Subject key identifier:   5E:4E:46:0D:B4:15:1D:39:9B:C2:A9:1C:38:53:13:58:53:77:01:41
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848CB16633B371BC384FD79E480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ec56d9d1-0100-3aba-9227-43fefecfd92a.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        150.48.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:63:3b:37:1b:c3:84:fd:79:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=640ef1bb-2525-493a-8109-b893b5d6c726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:7c:41:0b:9d:11:c0:f7:17:a0:05:c5:a3:
                    eb:d7:3e:b3:8b:cd:95:ab:92:e0:0f:44:b9:67:75:
                    c5:41:80:fd:a7:f2:91:82:28:d4:db:4b:d2:0e:4e:
                    cf:c4:4a:33:38:3d:c9:9f:e9:35:2b:23:81:56:29:
                    4b:e0:f9:b7:24:e4:6f:01:d2:31:0b:06:86:fe:8d:
                    80:88:82:10:ca:0e:06:06:d9:e0:a2:d6:66:98:4e:
                    28:10:0f:36:b5:f8:13:60:c8:17:48:2e:2c:35:a4:
                    b6:af:27:be:ca:87:44:6c:94:40:05:bc:89:43:e1:
                    51:9a:cf:07:ff:84:7d:51:68:02:0e:e6:d5:23:ec:
                    26:cc:0b:d7:f5:6a:ff:25:98:3e:db:2e:86:dd:9c:
                    5d:4f:cc:9f:6b:67:1e:00:8a:04:d1:50:26:fe:f4:
                    fb:d1:31:73:74:ed:95:85:66:aa:78:39:c3:19:c2:
                    b9:5d:fa:54:93:e2:7f:a1:92:b5:f6:4e:a9:59:2b:
                    68:88:15:21:55:a7:9d:ec:7a:e1:26:29:4d:b4:43:
                    0f:a0:20:2e:9b:e9:46:28:bb:39:f8:b9:a2:6f:f2:
                    6b:cf:b4:86:69:3a:d6:65:77:df:df:bb:f4:a0:e6:
                    fb:db:c6:0b:c7:d9:7e:f0:e1:5a:43:0f:ad:27:35:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:46:0D:B4:15:1D:39:9B:C2:A9:1C:38:53:13:58:53:77:01:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ec56d9d1-0100-3aba-9227-43fefecfd92a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:41:8d:4e:66:c9:35:79:0c:c0:7b:d3:76:7a:24:ba:90:7b:
         be:fd:93:0c:25:3c:81:71:e4:81:68:af:63:53:52:21:06:f5:
         e0:18:e1:2d:2e:8d:64:7d:51:f4:42:aa:ae:8e:e3:00:17:c4:
         47:b1:b8:1b:2c:b4:ef:20:7e:fc:36:d2:f5:ed:51:72:da:b7:
         a4:41:b9:11:21:4f:45:bf:09:08:dc:fd:6a:fb:95:bf:28:0e:
         2c:31:97:ad:70:55:79:d3:48:e8:26:4c:31:f9:53:5f:0d:2c:
         5b:bc:a3:3d:04:e7:e1:ed:95:07:24:c3:3a:a0:ea:6d:22:89:
         80:ad:77:cf:4c:83:5e:b2:e5:eb:b1:1e:e6:81:88:e9:09:c8:
         81:e3:da:d7:ea:f6:dc:a1:cd:57:8f:34:e3:0c:8c:82:cd:02:
         53:10:c2:a8:a1:03:d6:ce:9d:3d:59:15:6c:68:8e:12:1f:1f:
         a4:ec:20:55:51:e3:bb:d0:cf:1a:b6:c3:90:d6:cc:a4:d7:15:
         ec:fb:e6:30:ce:7d:47:ee:2f:eb:21:4e:0b:33:f0:58:dd:17:
         f6:83:69:59:c8:97:07:d0:c2:01:f3:60:d5:46:1f:22:11:a0:
         bb:08:cf:c6:ab:32:37:8a:5d:f7:1f:31:43:07:48:1f:4c:af:
         6f:ae:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:31 2025 by rpki-client