Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa
File:                     940344f4-0160-35f8-8292-c2448905d4ba.roa (raw, json)
Hash identifier:          jUZ9DTXqU6xGDqZ52lfTr2TZ9wwFersxqWZlChceA1c=
Subject key identifier:   F2:0A:B2:5B:94:6F:8F:A5:06:E8:02:72:9D:AB:F3:CB:AD:99:9D:13
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E16BC9C66CA1930042BE5C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     36629
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:c9:c6:6c:a1:93:00:42:be:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=e134f5a9-4297-42d6-b3ba-9e695167195f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:09:ec:09:2f:51:9f:69:0a:fa:b5:37:47:
                    8b:b1:9a:5b:c5:90:08:13:d3:f8:48:fb:3b:05:12:
                    83:02:26:25:05:19:ab:20:42:ac:16:61:f3:12:87:
                    8e:2c:9a:01:57:f7:ba:b0:b3:b8:21:30:46:a8:68:
                    c4:63:75:8d:40:58:9c:4c:a8:4e:bb:35:aa:50:2c:
                    3e:e8:8e:c4:eb:71:6b:fb:c0:a6:96:e7:16:a3:46:
                    1a:61:b0:60:42:d3:3e:0f:2c:e9:3d:04:9a:20:dd:
                    45:a2:b7:0e:3e:8b:f2:34:ce:c4:c0:59:23:02:f0:
                    3e:12:c4:65:9a:07:b0:87:82:dc:3c:88:8e:60:e8:
                    8f:ad:8e:25:48:74:70:af:96:4f:46:a2:63:4c:f4:
                    25:15:55:0a:44:11:43:3f:f6:36:4d:c0:84:87:aa:
                    4f:b3:db:e1:c6:29:63:c3:eb:b1:c8:6e:dc:19:fa:
                    c7:02:be:fe:5f:f0:30:70:48:98:c2:a6:74:21:8f:
                    cd:e1:2a:1b:69:18:88:ca:ee:c7:92:75:ee:c0:4d:
                    1a:e9:e0:6d:f8:9c:a8:74:5a:1c:58:5b:d3:7c:98:
                    a1:67:c1:7d:fc:cc:ea:fc:28:be:f3:d8:f2:fe:92:
                    4b:99:e6:cd:c8:3a:f0:1b:70:25:0e:4b:45:b4:b8:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:B2:5B:94:6F:8F:A5:06:E8:02:72:9D:AB:F3:CB:AD:99:9D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/940344f4-0160-35f8-8292-c2448905d4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b4:2a:7e:41:d9:61:81:ad:60:ee:c2:18:47:0d:78:a2:d0:
         53:83:8b:1e:c7:d6:d4:cb:63:eb:15:d7:05:02:4c:d0:d9:d4:
         de:13:96:ff:8b:5f:1f:1c:50:08:77:f2:83:ba:cc:ff:8e:ee:
         5d:5b:82:fe:24:d2:9f:a0:a6:f3:c4:85:09:f5:10:da:24:22:
         40:5b:5b:e1:55:00:57:86:c0:30:94:fd:9f:6b:d4:a5:70:04:
         df:c4:1b:92:52:94:6c:fc:05:62:e9:47:45:7f:38:dc:98:27:
         8a:88:25:02:f7:0f:d0:a9:57:14:f5:9f:fa:2d:38:d0:ff:cc:
         7b:82:5c:30:de:59:6d:04:03:35:d4:46:db:78:6c:3a:7e:74:
         ff:93:d5:3b:73:9c:11:47:35:97:60:3d:8e:21:59:91:0c:ea:
         31:99:87:c8:31:77:39:04:e3:cd:b4:39:0e:f6:28:b5:f0:a4:
         1f:9f:c8:f0:44:78:b9:2e:92:4d:e2:a4:d4:25:ce:79:db:14:
         02:35:5e:d2:b2:c2:71:4f:53:ff:8c:8f:1d:a5:2c:c4:34:ab:
         f0:4a:47:22:3e:78:1f:bd:76:8c:63:27:2f:32:19:a2:de:bd:
         93:7b:d7:21:fb:3b:28:06:a9:93:bb:a9:cf:6d:26:f7:ea:c8:
         43:02:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:34 2025 by rpki-client