Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9834368-3afb-3de0-a734-5a2768c2ae3f.roa
File:                     e9834368-3afb-3de0-a734-5a2768c2ae3f.roa (raw, json)
Hash identifier:          xsomUQEtYErhX7cBMvD7tIuyTqb6uUer0Lke11ZL02k=
Subject key identifier:   EA:57:F5:DC:5D:15:89:55:7C:92:72:18:A4:46:36:DE:9B:71:79:BD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E16BCD186CF2549254AA2380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9834368-3afb-3de0-a734-5a2768c2ae3f.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     36628
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:cd:18:6c:f2:54:92:54:aa:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=b5034f98-e3f7-403a-95c7-f3e2b287d39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:98:27:88:10:6c:7b:aa:72:19:25:57:af:
                    83:d0:35:8b:e2:85:ee:fb:e0:39:82:dd:54:8b:2c:
                    f5:84:eb:e2:45:e7:5b:93:48:f4:d2:7f:87:00:ac:
                    36:c5:bc:4c:fa:c3:d4:55:a0:58:8b:38:77:d8:f0:
                    7a:07:2c:0c:19:7d:36:e4:e7:b1:f3:51:c7:df:e2:
                    54:54:9f:2d:20:51:6c:51:71:25:9b:c0:58:60:ec:
                    c5:f1:97:39:57:d5:a7:25:67:39:ea:e3:23:30:e8:
                    7f:65:28:d8:18:d5:86:b1:1b:f7:bd:64:90:bd:73:
                    a8:31:4b:7f:6b:74:2c:af:bf:3b:fa:fe:44:fd:b5:
                    0d:bf:0d:3b:55:bb:e6:8a:3c:83:de:2f:92:f2:85:
                    3c:22:2e:25:00:1e:45:51:18:2c:86:a1:23:81:8e:
                    df:f0:d2:98:be:30:d4:af:95:7f:be:b3:07:c8:6c:
                    89:57:da:2f:01:7c:d9:9c:15:10:d1:7f:f2:20:13:
                    4a:8c:4a:f4:d4:a3:32:96:97:2c:d9:89:08:3f:1c:
                    62:2c:0d:e5:c3:55:fa:bd:7b:1b:fb:8f:ed:49:17:
                    1f:d4:12:da:46:2b:f7:f9:fd:74:f5:4c:ac:f8:70:
                    5c:08:f0:58:68:52:1d:4e:47:cc:a1:f3:d9:e1:c2:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:F5:DC:5D:15:89:55:7C:92:72:18:A4:46:36:DE:9B:71:79:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9834368-3afb-3de0-a734-5a2768c2ae3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:69:cd:9a:81:29:23:0f:9c:1a:82:2f:45:10:4a:5a:7d:
         5b:46:30:f7:a5:25:16:92:4b:9d:29:46:7a:7b:ae:c4:ab:b3:
         25:a9:56:e9:cb:ce:5d:a6:69:bc:44:ec:b2:c9:1e:f1:3d:0d:
         c9:1f:39:16:9b:e8:5e:50:bc:70:fb:20:42:bf:1b:f4:ea:d9:
         da:2b:7b:22:a9:ef:ec:9f:09:43:09:de:1b:0e:d4:fb:e2:de:
         85:80:50:63:7d:8b:e1:a7:ff:78:2e:d1:a1:6e:0d:2b:7d:cc:
         d5:3b:b2:9c:7c:4a:8c:f2:49:3c:8a:01:94:c2:64:ab:59:92:
         fc:12:e4:49:07:dc:f6:3d:bc:a7:da:c6:be:9e:05:28:d1:60:
         ce:32:c5:ac:c4:1a:2a:d8:07:c0:a0:be:e6:75:d1:33:77:d5:
         ae:2e:11:1b:bc:a6:48:05:af:01:8c:e5:71:ca:9c:4b:5f:f4:
         ee:b7:bd:f4:f7:9d:0e:cb:44:94:a8:74:43:98:62:e0:83:8b:
         9b:ed:f6:ce:a5:ab:16:e7:b0:49:f7:4c:6f:91:04:85:96:22:
         07:27:75:9d:f3:85:19:64:90:5a:bb:1c:69:ea:00:8b:a6:c1:
         0c:06:dd:bb:81:32:d1:27:2d:82:b3:bc:8d:56:1a:db:0f:62:
         65:7a:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:21 2025 by rpki-client