Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0512fcef-e5c4-34b6-ac36-fee76c6ae1e5.roa
File:                     0512fcef-e5c4-34b6-ac36-fee76c6ae1e5.roa (raw, json)
Hash identifier:          ogu32B0hAJIzosHERwCU/Bs6RgQIUALWbpyLTv1plAs=
Subject key identifier:   7E:A6:C9:2A:56:9A:40:FA:6B:D2:7B:21:B7:99:11:F4:A8:0E:E6:2E
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584957F409C4A9B455A4AFC1BD80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0512fcef-e5c4-34b6-ac36-fee76c6ae1e5.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11290
IP address blocks:        24.122.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:09:c4:a9:b4:55:a4:af:c1:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=09b755e1-9f4a-4089-827f-60b0d4b465be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:ce:31:06:89:bf:5f:c3:50:6e:30:b0:b5:
                    a7:a2:07:79:bf:10:de:04:70:1a:13:42:b3:2f:6c:
                    96:8c:f6:34:6e:21:db:6c:7e:e5:d0:73:36:c3:d7:
                    0d:87:e6:4e:ea:d9:44:ae:f0:cb:bf:30:bc:34:39:
                    a3:2c:75:ac:b5:72:da:da:e2:c8:40:8b:b2:cb:00:
                    32:5d:05:72:e6:40:58:ef:50:ae:81:a4:8a:95:15:
                    9f:2b:05:73:7d:b5:ba:f5:43:d6:72:f9:c2:e4:bd:
                    e3:be:e2:61:09:61:37:94:29:55:ec:51:48:8d:a0:
                    24:9d:41:37:6f:59:a8:9c:50:7a:50:55:d8:40:d3:
                    c0:b8:14:b7:4f:52:7c:d7:fa:22:fe:0c:54:d5:6c:
                    1d:5e:b7:fb:84:b9:ea:bf:a9:00:5f:d0:7a:a0:82:
                    b4:bd:9c:60:b0:9a:ac:73:54:0a:28:9b:ee:7d:2d:
                    f8:62:ab:7f:d7:fc:6f:23:b7:70:97:94:fc:de:f3:
                    3f:3f:1e:df:0d:30:11:29:b2:07:66:23:db:a3:00:
                    5c:67:d3:6f:7b:92:e5:dc:aa:f6:b2:17:4b:11:a5:
                    0c:c6:14:da:e4:9f:cd:00:9b:79:b4:12:3f:d8:af:
                    05:ad:3f:8a:9c:70:7a:41:06:20:22:ce:95:58:d0:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:C9:2A:56:9A:40:FA:6B:D2:7B:21:B7:99:11:F4:A8:0E:E6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0512fcef-e5c4-34b6-ac36-fee76c6ae1e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:72:bd:6c:95:09:2c:c4:b9:f8:cf:68:7f:84:dc:24:90:b3:
         6b:59:f8:18:3b:13:33:ab:f6:6a:de:42:e1:0c:e1:94:a5:87:
         92:7a:a0:b7:d8:43:52:7a:84:36:24:64:fa:be:59:67:e2:a8:
         9c:fd:29:b9:fc:23:74:cf:63:3a:3c:75:a9:7d:19:65:fb:e4:
         a3:c1:20:ac:4a:3d:63:f0:48:7c:5d:fa:1c:3f:f2:46:22:1e:
         c8:ab:48:54:ce:ba:6f:ad:3f:ad:b2:8d:8d:e0:45:bd:c5:f3:
         4b:ea:66:da:bd:42:b3:11:0c:05:13:08:b8:35:59:a2:02:4f:
         5e:5f:8d:81:4e:92:32:fc:71:d6:5e:87:d1:99:05:91:01:9a:
         24:15:c2:a8:69:39:eb:ae:5b:55:e4:7c:60:60:ce:c4:9d:26:
         5b:db:41:15:af:66:e2:39:08:ad:81:6b:e7:1d:2d:7b:af:e5:
         2c:0c:5d:7c:53:2e:3a:18:ad:3e:1d:70:d4:db:6e:e6:25:42:
         a4:f8:b9:4b:71:19:2d:36:33:7c:03:45:fc:90:26:24:e6:66:
         06:47:f8:aa:16:b9:42:a6:80:29:c7:b9:46:8c:ba:fa:90:39:
         8e:41:3f:f7:27:c8:70:f3:73:9d:50:75:a0:98:04:78:2a:91:
         04:06:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:20 2025 by rpki-client