Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
File:                     53331bc6-138c-3866-b898-40211d5855b6.roa (raw, json)
Hash identifier:          mlX3C0z5icPJW87RjFDGDHF8q3riWdA3wOLLaLTKa6k=
Subject key identifier:   62:E5:BC:5E:AD:12:A2:66:85:48:90:94:8C:57:5C:38:8A:97:5B:A2
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F43285848E16BEDD20CCB1A3011D86640
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     5511
IP address blocks:        167.100.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ed:d2:0c:cb:1a:30:11:d8:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=6f1eefc2-7bbf-413a-8c2e-093e28c1dbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:f2:64:6c:f1:41:00:84:79:f3:a7:c3:9c:
                    74:33:45:2b:9e:36:2f:83:f6:76:c5:f2:47:c5:60:
                    71:e4:0a:8b:59:51:c7:63:14:05:da:06:5a:b3:8e:
                    d3:24:ea:88:af:49:ab:b1:ec:58:41:5a:da:7d:a4:
                    76:32:0d:44:8a:b3:57:8c:ef:ea:20:d6:57:30:01:
                    ee:c0:76:92:b2:7a:27:85:6b:1c:e0:f2:16:cb:e0:
                    5c:19:14:0c:f7:30:59:5c:1f:46:6b:e2:f9:dd:54:
                    af:3c:6d:1d:6d:c4:46:b1:c1:1c:94:10:d3:0a:cd:
                    80:1b:94:2c:2c:51:74:d2:e1:d1:ca:b6:73:3b:aa:
                    68:04:02:10:9e:7d:f6:ed:3d:46:34:e1:48:78:99:
                    d8:ae:e1:d5:53:40:f2:f5:55:4f:ae:fb:be:0a:1b:
                    5e:96:e1:3b:4d:89:61:ac:15:73:42:78:dc:bb:3b:
                    79:7a:3e:b0:8e:c8:45:4a:26:76:d8:ce:b2:c9:95:
                    a3:85:69:6d:e0:63:c5:56:29:c3:92:33:19:1f:78:
                    b3:c3:69:de:e9:6e:f8:4d:ba:ee:5f:69:99:e0:35:
                    88:1a:61:f6:68:cf:99:41:b9:7c:e0:8e:a5:b0:3f:
                    2e:e2:62:af:80:9c:45:42:79:79:88:6d:47:08:8a:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E5:BC:5E:AD:12:A2:66:85:48:90:94:8C:57:5C:38:8A:97:5B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:72:85:54:b6:f2:ed:dd:ab:61:1f:f3:8b:b7:28:3f:2e:
         41:1f:42:6f:d3:31:6d:88:99:ac:c8:9b:d4:a6:6b:5e:ba:59:
         21:0f:31:04:3b:7d:69:29:68:4a:18:77:40:34:ad:cb:5c:75:
         09:87:39:56:82:dd:4b:09:cb:87:d2:67:e0:69:93:ae:fb:34:
         90:d0:fe:4c:17:bd:08:d6:ea:cb:46:fb:d2:76:bb:2c:c0:a9:
         b0:4f:c3:81:df:a6:0c:d7:07:a2:ba:bd:7d:d7:04:6f:84:90:
         d9:f2:63:13:5e:e2:72:83:55:53:94:9d:b5:34:bf:87:df:84:
         ec:ae:71:10:cc:c9:aa:6c:66:2d:86:76:3e:ff:60:7c:fa:c8:
         55:be:08:55:57:ef:39:96:da:69:19:0f:72:06:01:5e:41:2e:
         a1:09:ee:2c:a7:c7:39:ac:2c:2e:c1:0b:7e:41:fd:33:c0:a7:
         82:d5:44:68:5a:d3:02:79:bd:7f:61:22:45:c3:d6:2f:87:52:
         f8:5c:93:45:5b:6a:e5:c1:89:ef:6a:11:8d:f8:b0:86:62:cd:
         1c:6c:b5:0a:29:fb:07:24:c2:02:0e:44:22:e3:43:34:e1:31:
         2d:81:68:a7:11:16:fe:48:5c:27:94:30:dc:21:4f:29:ea:d1:
         e1:24:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:18 2025 by rpki-client