Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa
File:                     d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json)
Hash identifier:          y5wLW1UImVAiNvm94HRn6waq5Zv/ZVbu8OnjpEKpIX8=
Subject key identifier:   C2:3A:F2:E8:58:35:99:76:0D:C9:12:44:A7:6B:62:2B:C6:9C:25:24
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858494734025DC0C87FDCE6358880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     8069
IP address blocks:        52.122.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:34:02:5d:c0:c8:7f:dc:e6:35:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=af6bb6f8-8378-49fb-a492-3c91cb4b85c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:61:8c:91:ee:88:dc:90:f8:94:91:0c:33:
                    3c:f4:ec:47:e6:de:99:45:11:7c:63:cd:7b:b4:d0:
                    21:57:53:8a:5c:b5:7c:1c:45:d7:8b:86:c2:ce:28:
                    4a:78:1f:23:98:73:df:79:dc:10:df:8b:dd:09:bd:
                    b7:f4:91:a9:46:10:bf:ae:38:17:11:a2:26:78:ef:
                    bd:23:c0:26:21:07:86:47:a5:30:32:36:1b:8e:5d:
                    a2:df:7c:10:c0:d2:27:84:48:76:dd:a0:c0:c0:76:
                    b3:f0:69:2f:8d:ab:c2:cd:35:9f:13:7e:c0:09:ed:
                    62:41:82:52:9b:e8:a6:ea:d2:b8:51:cc:2d:90:80:
                    67:96:d6:ab:23:48:3e:9a:17:c0:55:a3:ae:6e:3e:
                    b3:67:8b:e1:4b:43:77:6d:cf:5d:ad:b2:32:a8:09:
                    1d:71:0b:ac:47:2c:40:ed:80:4f:4d:4e:83:84:4a:
                    77:c1:b7:b7:59:6b:53:4f:b2:11:4f:1f:89:b6:74:
                    ab:ea:44:ef:08:71:b6:bd:ab:ee:a4:bd:92:f3:38:
                    a4:82:a2:c2:9f:ac:95:9d:22:d8:ef:29:de:0c:d1:
                    b4:4e:bc:ed:7d:b3:3a:d5:52:3b:1c:34:fc:63:1d:
                    3d:0e:45:c8:41:ec:8f:2e:fb:cf:2f:da:6a:ec:e6:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:F2:E8:58:35:99:76:0D:C9:12:44:A7:6B:62:2B:C6:9C:25:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:21:57:57:b0:e0:22:e8:ab:c5:d5:e6:a7:3e:7c:9d:65:34:
         88:08:a3:c8:29:bd:26:d1:68:7f:cc:84:f7:b0:b7:a8:fe:9a:
         6c:e0:92:a8:65:f5:1f:60:5e:42:15:f6:b3:a7:73:42:1b:3d:
         de:c9:99:18:73:ed:f6:1c:68:61:84:c3:4e:c6:04:65:73:f6:
         08:56:f1:6d:9c:db:21:22:70:a0:0d:d1:42:db:3f:c9:15:62:
         bc:72:fe:dc:4a:ee:b1:6d:3f:cd:2e:a9:89:3b:e3:d1:94:27:
         ca:c0:45:d1:97:fb:6b:a0:68:d8:15:e6:fe:53:c2:65:03:53:
         9a:9e:ca:70:2f:65:58:99:5e:37:b3:13:49:4a:ca:25:6e:ca:
         46:b0:17:ec:22:81:95:92:eb:2c:99:9d:07:bb:2d:43:9a:0e:
         84:8b:ab:7a:46:5a:75:56:34:99:07:aa:09:e4:42:e2:51:0d:
         67:05:93:16:09:63:90:c7:88:e1:c4:df:32:1b:39:68:eb:38:
         d8:07:d0:9e:ba:7a:a6:41:3b:84:8b:27:8d:0d:f1:d1:07:73:
         7a:6e:3f:9d:c3:74:47:38:6f:19:ff:f1:ad:5b:d4:13:50:ff:
         26:4c:db:c3:d8:00:c5:61:d7:37:51:27:59:6e:ac:db:0c:91:
         8c:67:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:18 2025 by rpki-client