Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa
File:                     8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa (raw, json)
Hash identifier:          r5+trZar6CRQVk89Fz1c7ZqPWvuC0qZI8YR5wNxyrvg=
Subject key identifier:   52:6C:5D:EE:E3:41:F3:F8:B2:C4:48:8D:0A:B7:E8:E6:B9:F6:EA:BF
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285849393E7BE7910300F87B21E5F0
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     30722
IP address blocks:        47.53.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7b:e7:91:03:00:f8:7b:21:e5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=2bc52f4d-973a-4e1a-87dc-7a3c618892f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:69:c5:8c:2b:4e:75:df:6d:f9:53:d1:0f:
                    c3:8f:36:ac:7d:46:21:2a:d5:c3:82:e3:46:ca:f5:
                    d1:e1:c2:b9:7a:7d:f5:fd:19:c2:fb:4c:fe:e2:d3:
                    29:7b:0e:98:61:26:3e:7a:8b:ef:3b:4a:2d:1f:10:
                    1d:10:3e:71:9c:91:c5:e7:26:58:c6:e9:3b:d9:59:
                    20:c7:c7:8d:f2:83:09:e7:a3:af:54:7e:53:ef:48:
                    46:6c:0d:73:95:74:d6:5e:7b:a4:57:68:2c:5c:19:
                    6f:bd:92:e8:97:40:9c:2f:20:20:00:b9:5f:de:3b:
                    60:26:71:7f:22:d0:e5:66:75:1a:ca:bf:5e:cf:b3:
                    3d:74:ca:f8:38:dc:27:0c:9f:89:38:15:41:16:c8:
                    35:be:9d:b9:8f:1d:4b:1d:8c:e1:ba:70:03:7d:2c:
                    15:ed:bf:cc:ef:42:be:8f:4b:f9:04:7e:72:98:d6:
                    57:e9:b9:d8:0c:5c:3f:50:e4:be:25:52:f6:72:2a:
                    d2:ce:78:4f:87:cd:d4:92:d6:4d:01:00:08:e6:92:
                    59:3d:ef:40:23:47:a1:b9:31:2a:55:31:fd:24:20:
                    a8:ae:ec:76:2f:7b:ad:0f:69:61:13:71:5c:86:50:
                    27:bf:07:56:80:73:d0:89:04:00:1b:e0:a5:ff:80:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6C:5D:EE:E3:41:F3:F8:B2:C4:48:8D:0A:B7:E8:E6:B9:F6:EA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/8217683d-bd86-3435-8f8a-9fa8dd80f8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:14:ed:27:56:38:8c:4c:87:89:f3:09:62:c4:10:64:96:1f:
         ff:d6:cd:bb:d2:4a:23:61:54:be:87:4c:8d:34:3b:b2:63:da:
         b8:d8:a1:d3:9d:77:52:b4:44:ce:0c:5a:e7:5a:9b:c8:2b:ad:
         50:58:d3:7f:d1:68:09:f7:b7:4e:0b:c6:1d:58:da:bc:d7:38:
         62:35:4f:ab:8e:08:93:f4:25:67:e4:2f:41:dd:3c:96:b2:19:
         c4:d4:a9:45:6f:65:de:90:b4:17:db:0f:74:00:a7:fe:65:62:
         ed:6f:b3:27:cc:1b:52:ed:74:7b:3d:f8:a6:1a:16:c5:8c:dd:
         0f:e8:1a:b9:f3:93:0d:83:7a:00:ba:f3:59:d3:41:64:c8:d5:
         36:19:fb:90:d4:77:a2:15:a7:93:c3:e8:cf:7a:a7:72:4c:f4:
         da:83:03:18:4c:11:53:36:85:99:9c:7e:54:b2:8b:91:e2:83:
         c2:7f:88:db:31:1c:94:da:e1:ce:2e:65:66:c9:bc:c1:4c:b2:
         93:64:bf:2e:5a:fd:00:eb:ec:ba:47:8b:0f:21:0a:7f:cf:d4:
         2a:6f:f0:96:ab:8b:1f:28:18:a7:55:2c:18:20:cc:d9:c5:82:
         3e:5b:8a:28:ab:96:38:b9:71:47:01:dc:d7:e6:8a:54:a0:ec:
         4c:1b:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:37 2025 by rpki-client