Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa
File:                     a104e0ef-bc59-3bf4-807f-36926a598f6e.roa (raw, json)
Hash identifier:          1RqHrccKNqb2B8MNCiqLYXVpIEAeXzHVAOnKhYCY4nU=
Subject key identifier:   81:F9:CA:FF:AF:08:7B:63:DF:F6:B0:BC:84:3C:A0:69:B3:12:05:B4
Certificate issuer:       /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial:       010D0C9F432858491ED6D7C1CA92157628DF30C0
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     398712
IP address blocks:        52.128.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d7:c1:ca:92:15:76:28:df:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=eda6e505-4a92-40ff-a325-2dec1cfe46e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:65:db:b5:1e:54:8f:e8:79:21:5c:0f:eb:
                    d0:69:78:f8:b8:b7:f6:2b:d2:be:92:b9:b2:ad:81:
                    f7:66:33:50:b0:a5:19:b7:c9:7c:09:64:1e:40:99:
                    2e:52:3f:6b:17:b0:7b:fb:65:3f:e6:5f:4a:2b:9d:
                    c4:cd:0d:a6:89:5b:52:be:e6:1d:be:11:20:99:44:
                    29:a9:2c:d1:83:ea:6b:ed:55:02:e5:1a:27:65:2a:
                    e1:9e:9c:36:38:4f:a8:fc:5d:7e:2d:24:bd:63:4e:
                    92:c0:eb:fd:24:2e:a8:c6:6e:ba:e0:42:ec:e5:11:
                    5b:e3:38:f0:4c:68:c4:14:d6:e6:ef:f3:c8:29:b6:
                    0c:d9:85:c2:37:e3:89:a3:05:bf:dc:15:3d:94:da:
                    5a:f8:81:33:cc:d5:0d:90:d3:8e:db:1b:03:49:be:
                    96:ec:dc:83:18:b1:dd:c5:16:a2:ea:88:4c:c1:5c:
                    b1:6e:d5:df:c6:5a:c4:80:a3:9a:42:7e:7a:50:cb:
                    a4:9b:15:a7:1b:08:5e:a0:1f:39:0c:ce:42:e7:62:
                    a1:21:49:9b:8c:93:4f:d5:b5:6f:06:f1:de:e3:95:
                    95:a8:c9:0b:58:81:45:54:6b:b2:99:a8:5d:0c:07:
                    e7:08:3a:ec:53:44:a6:f9:1e:9c:32:1d:3a:f0:42:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:CA:FF:AF:08:7B:63:DF:F6:B0:BC:84:3C:A0:69:B3:12:05:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/a104e0ef-bc59-3bf4-807f-36926a598f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl

            X509v3 Authority Key Identifier:
                keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:3f:26:f5:6f:ae:13:65:23:25:d7:e6:c9:63:cc:17:08:
         53:64:bc:ed:b6:df:76:9c:90:af:74:e2:48:f5:69:ff:ba:ac:
         dd:54:37:6c:c2:e4:48:b0:f1:78:b0:8e:30:2b:25:32:2b:ad:
         bc:73:13:7f:60:58:2a:73:f4:3b:89:ca:76:a5:4a:c6:8a:97:
         91:86:be:c3:7f:ef:0f:71:48:7b:d0:1e:ea:b3:61:db:60:56:
         02:d7:dc:6d:6e:67:9a:e4:ea:04:c2:c9:2d:9c:6b:1f:c4:4d:
         e1:f3:43:49:c6:01:a6:b3:aa:45:09:03:b6:c5:a3:2c:fc:60:
         bc:8e:36:7d:be:ea:99:5a:76:e5:54:f7:0e:75:b5:d5:cb:12:
         d2:cc:bf:85:70:53:bd:8d:19:b1:b6:ea:18:28:69:b8:e9:41:
         f8:cb:77:bb:78:23:f4:97:ad:be:dc:2e:7a:40:7d:38:ea:76:
         60:02:f8:0a:e9:c2:53:6b:d7:ad:42:35:8d:1c:ce:62:6d:49:
         cb:3f:a9:1c:d3:a1:bd:a3:ec:42:15:a8:96:2c:ac:c7:fc:ef:
         75:af:94:4e:18:fb:18:78:fc:3a:15:64:f5:58:36:4e:15:24:
         00:c6:8e:85:05:8e:21:5b:06:10:0e:e8:4c:41:4e:ed:87:38:
         e1:42:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:58 2025 by rpki-client