Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa
File:                     ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa (raw, json)
Hash identifier:          BNTAG2TiTE+WD0dbKtvH3AgaBnulz7YaMp4rGzF7gtA=
Subject key identifier:   C0:84:42:BB:3F:00:C0:36:8C:6A:A4:2A:B7:38:E1:1D:7A:67:1E:5A
Certificate issuer:       /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
Certificate serial:       010D0C9F432858492CAE85D6EDB67C57E96E8680
Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     6528
IP address blocks:        67.14.192.0/24 maxlen: 24
                          67.14.193.0/24 maxlen: 24
                          67.14.194.0/24 maxlen: 24
                          67.14.195.0/24 maxlen: 24
                          67.14.196.0/23 maxlen: 23
                          67.14.198.0/23 maxlen: 23
                          67.14.200.0/24 maxlen: 24
                          67.14.201.0/24 maxlen: 24
                          67.14.202.0/24 maxlen: 24
                          67.14.203.0/24 maxlen: 24
                          67.14.204.0/24 maxlen: 24
                          67.14.205.0/24 maxlen: 24
                          67.14.206.0/24 maxlen: 24
                          67.14.207.0/24 maxlen: 24
                          67.14.208.0/23 maxlen: 23
                          67.14.210.0/24 maxlen: 24
                          67.14.211.0/24 maxlen: 24
                          67.14.212.0/24 maxlen: 24
                          67.14.213.0/24 maxlen: 24
                          67.14.214.0/24 maxlen: 24
                          67.14.215.0/24 maxlen: 24
                          67.14.216.0/24 maxlen: 24
                          67.14.217.0/24 maxlen: 24
                          67.14.218.0/24 maxlen: 24
                          67.14.219.0/24 maxlen: 24
                          67.14.220.0/23 maxlen: 23
                          67.14.222.0/24 maxlen: 24
                          67.14.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:85:d6:ed:b6:7c:57:e9:6e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5a95e2ac-779e-4802-a3a3-156fd4216f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4e:08:c4:b1:06:78:bd:01:70:41:8e:b9:a2:
                    35:be:2d:08:74:d0:98:2b:59:23:23:78:c3:5c:ce:
                    fb:17:d3:03:d6:87:14:d2:71:4e:0b:19:87:c8:91:
                    72:7f:0a:76:97:d4:a4:b2:07:d5:ff:68:32:ce:70:
                    6c:57:b0:8d:64:80:fb:05:84:be:66:55:cf:54:b4:
                    8b:fe:63:8f:a4:74:9e:3d:ef:a3:0a:c6:61:50:12:
                    4f:5e:b8:e8:e7:aa:92:9f:fd:6d:c1:1d:b5:5a:45:
                    ce:53:d8:26:56:a0:31:95:cc:45:80:d7:18:96:60:
                    40:ed:cb:96:46:9a:9e:6d:31:b8:24:cb:33:ae:23:
                    26:22:db:f2:fd:3e:9c:6c:48:7b:59:83:87:62:63:
                    62:d9:3e:6d:1e:b6:58:54:0a:aa:dc:88:f8:a4:f4:
                    4f:52:ae:bc:37:73:18:7a:b9:ff:0b:00:90:f9:3e:
                    73:90:df:8c:2d:e7:5f:1e:e4:2c:0a:4a:a8:5b:f3:
                    e9:d1:a2:6b:45:49:78:af:a7:77:fd:25:b5:07:24:
                    d0:c9:c0:7e:bd:5c:5a:2b:44:ca:0c:5c:b6:06:75:
                    e4:b3:26:99:e9:62:51:2c:80:a9:0c:1a:17:fd:f4:
                    c1:37:e6:60:b1:5e:7a:8b:a2:3a:68:aa:5a:92:87:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:42:BB:3F:00:C0:36:8C:6A:A4:2A:B7:38:E1:1D:7A:67:1E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/ac745f9c-932a-36ae-b3fa-7a7a2e9a4c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl

            X509v3 Authority Key Identifier:
                keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.14.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ec:3a:0b:f6:2a:b3:69:87:55:82:ba:3f:49:f8:ae:eb:8b:
         ed:e5:e8:04:98:08:e6:17:98:8a:0a:3e:e5:29:88:0d:62:a9:
         73:a1:e3:85:a9:5a:b4:6b:5a:31:73:8c:db:ef:bf:7f:37:aa:
         51:e3:25:40:7e:7b:45:f3:99:32:2b:8d:7d:0e:eb:ac:e1:72:
         10:c5:bf:4a:89:38:a8:14:13:2e:44:bc:89:85:b0:ae:fa:d6:
         8d:ef:0d:2d:d5:a3:05:42:a1:be:2d:f7:b3:d8:59:7a:eb:fa:
         14:ba:68:d1:82:03:d6:6b:90:88:7f:14:73:c3:96:c1:bc:b6:
         72:d5:4b:b0:68:6f:ab:c7:82:ad:8c:92:04:69:28:19:74:d3:
         c9:8d:a7:94:4c:9f:09:bd:94:55:d1:79:0b:40:6d:0b:a6:47:
         1d:e0:83:c9:ab:13:72:88:99:34:3e:8a:a3:5f:19:70:56:44:
         72:22:76:65:63:ff:06:8a:81:ea:cb:de:12:a0:ea:f4:a6:11:
         77:5f:ff:1a:e1:d0:9a:2a:67:05:71:47:54:d8:91:a3:63:b8:
         d1:d7:ea:6a:ee:8e:e0:17:b0:8f:fd:3d:01:c3:b4:bd:fd:2d:
         b7:b2:a1:d5:96:c1:d6:16:f6:8a:5b:46:ae:80:f4:4a:fa:a2:
         54:1d:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:32:00 2025 by rpki-client