Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4439a8b4-0ab9-3b3f-b7be-392e5219eda0.roa
File:                     4439a8b4-0ab9-3b3f-b7be-392e5219eda0.roa (raw, json)
Hash identifier:          7/8Z9NJsjhzHe6VxzCW+iSyslDyfPOSYkmMDMkNjwPE=
Subject key identifier:   A2:58:7F:0C:D6:56:77:21:1D:80:B6:B7:2D:9C:81:92:D0:92:A4:9B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848A243FAE9F5464B0C0F91D700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4439a8b4-0ab9-3b3f-b7be-392e5219eda0.roa
Signing time:             Wed 22 Jan 2025 23:04:49 +0000
ROA not before:           Wed 22 Jan 2025 23:04:49 +0000
ROA not after:            Tue 22 Apr 2025 22:04:49 +0000
asID:                     18807
IP address blocks:        162.155.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:43:fa:e9:f5:46:4b:0c:0f:91:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan 22 23:04:49 2025 GMT
            Not After : Apr 22 22:04:49 2025 GMT
        Subject: CN=a98e3d53-454d-4ca8-8bab-26edd94e20c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:a1:39:7a:ca:c8:51:0e:e5:ca:3c:69:15:
                    c5:ac:14:9c:ff:bf:d7:24:12:5a:fe:64:65:41:cd:
                    75:87:7a:50:af:00:81:9e:02:e6:fa:fa:a0:48:4a:
                    d8:db:3d:80:ea:d0:91:1f:41:4c:3c:bc:d5:ef:3c:
                    3a:43:c5:1d:e3:2e:f0:53:b9:bd:86:b3:0e:aa:25:
                    32:2b:77:d9:75:d5:04:87:eb:8d:3a:3d:74:34:09:
                    b0:1d:a2:b4:d6:46:0f:ef:5b:6a:5d:2a:3b:b1:b7:
                    d4:c7:d9:97:65:ef:5c:6b:ae:34:41:f6:0f:ed:4b:
                    48:6d:d8:d9:36:5c:fc:01:ed:0b:35:7a:83:8d:b0:
                    dc:b6:a2:aa:25:39:94:e0:e9:08:42:a8:f1:06:c9:
                    bf:c7:6d:34:5c:65:e6:ee:47:30:f3:ba:6c:e3:42:
                    c2:ef:05:e8:57:87:e1:c3:92:5d:5a:0d:f1:1b:72:
                    9e:b3:4a:49:1b:b2:1f:f5:15:39:8d:d3:ef:32:78:
                    a2:b1:ca:36:6d:ad:8b:a3:1c:3a:19:c1:13:96:ac:
                    ff:7e:85:f9:1f:d9:43:ac:25:18:70:7b:a3:d6:74:
                    75:33:24:c0:77:15:93:a6:db:78:d9:71:72:2a:28:
                    1d:16:cf:68:41:79:88:5d:6a:ee:32:76:cd:9a:b9:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:7F:0C:D6:56:77:21:1D:80:B6:B7:2D:9C:81:92:D0:92:A4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4439a8b4-0ab9-3b3f-b7be-392e5219eda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.155.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:f3:fc:a7:f8:ce:6b:00:d5:1f:b6:6a:3b:ea:c3:ec:ec:
         7d:b5:72:e7:b4:3e:3d:21:fb:64:b4:d3:25:66:b9:68:fc:9c:
         f0:00:9f:83:90:ea:f8:cf:98:50:51:0c:ea:3c:1d:78:b3:7b:
         12:2c:84:d2:f3:13:81:4e:c6:87:20:7c:30:0b:00:a3:0b:f1:
         8d:a9:1c:3b:6c:d2:69:76:be:eb:dc:52:98:a1:68:2b:d9:83:
         e3:90:1b:7d:c2:d5:44:a5:5c:cc:9b:43:9c:76:58:da:be:05:
         55:21:86:4a:07:f3:be:42:0d:f2:c6:be:4d:81:22:94:8e:9b:
         01:e2:54:fd:b5:06:e3:1b:61:86:fd:19:78:38:49:29:ef:de:
         47:31:25:bd:1e:c5:df:7e:dc:1b:c0:38:7d:c7:9a:2c:ee:84:
         b1:52:16:f1:d7:9f:06:a4:4b:f8:0e:df:15:27:86:86:db:56:
         c8:46:8f:b5:d6:09:49:fc:9c:6d:e9:69:f5:b6:f8:c2:92:0b:
         a4:ce:f4:f7:b9:a5:2b:3e:84:47:94:fa:7d:30:f2:89:2d:10:
         64:86:09:f9:6f:58:1d:50:11:51:f5:72:d2:d7:ae:89:e3:ad:
         ee:a1:dd:2b:c1:5e:5c:97:1c:a7:f0:d7:25:c7:a9:86:93:dc:
         c4:22:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:15 2025 by rpki-client