Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/4bc2631a-c853-389b-a376-f5f87b9cd012.roa
File:                     4bc2631a-c853-389b-a376-f5f87b9cd012.roa (raw, json)
Hash identifier:          6BYqDlDvgBeRS1wyc0x6DtPIi016lVQNRXXhQarBT2M=
Subject key identifier:   4D:F8:F2:20:A3:F2:97:87:45:79:C8:4E:12:D5:AC:B5:36:F6:10:9E
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584953C41E4F81A5B2AB4ACF3760
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/4bc2631a-c853-389b-a376-f5f87b9cd012.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     393653
IP address blocks:        104.128.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:1e:4f:81:a5:b2:ab:4a:cf:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=5c2d07d2-7da4-4124-802f-7946853c620d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:0c:bd:25:41:a9:0b:ef:74:13:d3:0d:56:
                    9e:5a:20:ce:98:d9:2e:3a:df:3a:d1:b3:bb:23:21:
                    09:e4:f9:05:c9:f8:cb:a0:35:d5:12:67:65:a5:c4:
                    30:bb:51:48:45:fc:4c:f4:db:54:4f:9a:17:40:90:
                    9a:aa:db:bc:ed:5d:e6:51:a8:61:fd:96:f5:f9:3e:
                    cc:5d:46:84:4b:e9:25:7e:29:d0:24:c5:3e:43:ff:
                    40:09:74:d5:9c:3d:bc:c8:b5:34:a8:24:72:f5:47:
                    e6:b3:d8:c8:db:b4:72:f2:e7:3a:f6:8b:96:71:2b:
                    df:a5:89:65:23:df:b1:36:c9:40:39:16:ff:61:09:
                    7e:b2:a1:fc:51:2f:06:14:6d:4f:19:af:bb:1c:07:
                    4b:5c:40:6d:bc:73:dc:e1:3d:f5:57:7f:a8:e9:3f:
                    15:dc:59:35:c8:f4:e4:58:ae:d7:17:a3:d0:d5:e7:
                    74:81:23:c0:e6:20:c7:93:d3:e2:d5:9f:42:7a:f9:
                    27:c9:e5:84:04:f3:56:f1:56:08:fe:3d:f8:9e:02:
                    6c:31:7d:8d:ff:7a:51:db:51:fa:60:89:31:66:22:
                    70:d0:11:69:62:17:30:3d:e0:91:1b:0f:a9:b1:b3:
                    d8:c9:08:ed:29:d4:be:78:98:1d:9b:39:73:2c:27:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F8:F2:20:A3:F2:97:87:45:79:C8:4E:12:D5:AC:B5:36:F6:10:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/4bc2631a-c853-389b-a376-f5f87b9cd012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:80:ca:59:4d:7e:2b:09:ea:06:98:b2:4a:d3:f7:c0:57:90:
         39:28:3e:0e:3e:a4:3f:b9:f5:6d:df:34:ae:3f:85:a3:b8:10:
         c1:73:42:18:20:80:60:4e:2f:22:b9:2c:42:92:0c:5e:9d:6d:
         8a:5a:49:57:0f:e4:62:8a:dc:53:10:07:6c:61:0a:c3:00:e5:
         fa:e5:cc:7f:df:4d:b8:f6:f2:17:9f:14:b0:9f:65:89:0a:a0:
         00:3d:c3:fb:7f:ec:ca:af:76:97:43:96:54:51:21:3a:61:bf:
         18:95:3d:2b:8e:f7:4a:17:c0:ce:81:5b:00:38:49:f8:13:f4:
         e7:fa:8a:df:1c:43:03:e0:28:97:78:09:6d:2f:0c:3d:07:55:
         36:9d:9e:32:a2:46:87:f5:fb:3d:f8:90:4b:df:14:47:8b:62:
         36:54:82:fd:c1:c9:4f:d6:4a:6a:0b:ba:0d:a6:77:2d:47:9b:
         9d:19:e2:b1:52:c9:0b:80:48:5b:6c:7d:c2:9f:bf:ae:a8:cb:
         79:d6:4d:97:cc:34:8b:04:8d:f0:89:db:de:f9:d0:eb:12:79:
         87:6b:3c:75:cb:7f:09:bd:a8:26:fc:9d:08:06:4c:fd:5a:c2:
         49:39:f0:61:9c:80:23:0f:eb:ff:09:f3:ac:33:da:f1:67:79:
         1a:55:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:11:01 2025 by rpki-client