Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bd1326c4-4806-37c2-bc53-dcb628200a80.roa
File:                     bd1326c4-4806-37c2-bc53-dcb628200a80.roa (raw, json)
Hash identifier:          2vgL2oBfUZ8TmCSrTmqk9S04hGWigpev0hAH+FFrD2w=
Subject key identifier:   FA:AF:75:80:66:D2:53:08:2C:54:4B:32:DB:A0:B8:8F:B5:8D:2C:24
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584925B3AEEB20A434125626AD00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bd1326c4-4806-37c2-bc53-dcb628200a80.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        52.129.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:ae:eb:20:a4:34:12:56:26:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=c6358a33-f9da-417f-ad6b-de39566bbe46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:0c:b6:3c:8f:c8:84:ad:d5:3d:71:1a:65:
                    48:c4:b9:61:13:e3:34:e2:88:b8:ed:ff:63:fb:12:
                    a4:98:95:34:f0:25:3d:73:c8:84:d9:b6:21:37:47:
                    c6:0a:2a:64:c5:56:fa:7e:9e:c0:f0:41:12:d8:5c:
                    12:be:f7:1a:e2:3d:c1:e6:c6:bc:68:ab:db:94:9f:
                    d8:23:27:b5:3f:0f:46:c8:c1:bb:2a:1e:77:3a:54:
                    9a:dd:ce:0c:a9:3b:1e:0c:f3:b1:fb:a1:04:8a:d3:
                    0a:c1:94:80:47:69:5b:bc:81:0b:a0:33:e7:70:a8:
                    ac:b7:b4:fe:d5:ae:2f:19:76:49:23:25:2d:a0:15:
                    99:e4:f0:d3:d9:6e:72:e9:f7:8b:1c:d4:12:44:a7:
                    ea:10:dd:01:e9:c2:86:4f:d7:03:2b:38:70:e0:f5:
                    17:02:81:af:ea:3f:bc:7d:44:be:72:0c:a4:10:33:
                    c5:29:70:25:e5:40:d3:e0:15:c4:5e:91:21:49:64:
                    98:6d:7a:fe:de:44:77:a1:67:bc:62:07:c6:f5:85:
                    f3:b3:d5:c7:1a:38:cd:3f:05:18:d2:df:f2:a2:a5:
                    28:1f:e4:37:87:7a:60:8c:34:31:98:a7:a0:a9:07:
                    32:9e:73:28:ec:14:45:83:07:89:92:aa:02:2d:07:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:75:80:66:D2:53:08:2C:54:4B:32:DB:A0:B8:8F:B5:8D:2C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bd1326c4-4806-37c2-bc53-dcb628200a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:ad:48:12:b9:59:c0:d5:2e:45:03:c7:d5:8f:22:f1:b8:
         19:54:5b:58:df:db:91:d1:89:b1:42:92:93:f6:16:67:f5:43:
         9e:55:be:bf:c5:2f:32:d4:a8:a0:4a:15:48:73:e3:14:ab:ee:
         4b:c0:7d:f2:1f:6b:1f:4f:11:a0:d8:06:c2:17:d8:63:42:26:
         35:7a:60:2e:bc:8e:ed:2f:94:73:e8:a5:0e:00:12:bb:7c:26:
         31:df:10:e2:38:10:8a:03:eb:8e:0a:57:0b:96:e0:a8:4c:17:
         cf:86:11:de:41:1e:dd:eb:74:a6:f3:0b:ad:88:c8:1c:3f:dc:
         63:c7:30:e0:34:4f:c8:87:39:e4:33:34:bc:ce:84:02:14:36:
         d5:c6:b9:ea:56:f4:18:45:b4:3c:ae:17:8b:c9:15:2d:30:d4:
         cf:0d:70:dd:44:0f:8b:2c:a4:3d:53:ec:ad:52:16:fc:6c:0d:
         aa:7e:b4:a8:cd:64:14:76:cc:bc:31:77:bb:8d:15:5d:6f:b0:
         db:71:4c:05:f8:24:a3:02:ed:a9:5e:c2:35:46:4a:5b:2e:fd:
         43:a0:e3:ea:07:49:71:26:c2:f5:18:59:46:75:c5:64:5f:05:
         76:46:d6:e4:76:e1:4c:cb:96:10:5d:d7:49:c4:e6:a8:14:9f:
         ba:de:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:37 2025 by rpki-client