Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa
File:                     eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa (raw, json)
Hash identifier:          oI3FRFmgB4PuwHHIuQYtt4lPX3mrXdto3TQzVR1FTFQ=
Subject key identifier:   B5:89:96:EA:2E:5A:D2:35:B1:BC:50:5D:F2:75:9A:23:CA:A7:53:6E
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F43285848DA70FD9824F201B77F276B80
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        24.52.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fd:98:24:f2:01:b7:7f:27:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=baf22209-9568-40f5-850d-c46f213613d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:13:e8:54:a9:cc:d4:67:17:3b:66:2e:ea:
                    36:fe:cb:70:08:07:4f:7e:31:31:81:98:9b:95:fc:
                    d0:8f:4a:1a:59:31:8b:c9:04:bb:8f:79:7b:0e:d2:
                    9b:59:e6:84:d4:56:8e:35:9e:22:07:4d:15:43:39:
                    7d:db:80:cd:0b:eb:b6:05:37:05:96:42:f1:bc:9f:
                    45:9c:64:bf:5b:36:2c:2c:3b:41:d5:32:ea:07:3b:
                    1b:c5:b5:76:8d:da:af:56:34:49:f2:10:34:d4:ff:
                    79:84:38:6e:f0:5c:c5:fc:b1:8b:cb:70:b1:c6:5a:
                    ef:91:72:33:0c:e3:07:8e:bd:0b:cc:0b:e2:9d:49:
                    ca:83:8f:c5:b6:db:15:d3:41:59:58:f8:50:80:de:
                    5f:3e:ef:33:b1:1c:a8:31:5b:a5:e8:79:27:b2:92:
                    91:ac:d1:50:1c:35:04:b1:20:30:95:10:81:29:2c:
                    09:b7:bb:59:77:4a:dc:78:d3:d8:a5:8a:d1:cf:ab:
                    69:a1:4a:5a:63:b9:44:cd:7a:44:b8:8f:b1:c3:55:
                    fe:ed:c4:d0:ce:0c:1a:e5:3a:f4:d3:e8:7a:a1:bf:
                    34:40:1b:b2:f0:f4:bb:b0:6e:ba:59:ea:58:4a:1a:
                    4a:10:49:56:9c:27:0f:3f:e1:e6:c1:39:42:21:22:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:89:96:EA:2E:5A:D2:35:B1:BC:50:5D:F2:75:9A:23:CA:A7:53:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:ac:9f:58:01:8f:c9:32:1b:49:3a:ef:43:c6:91:02:79:d0:
         5a:d7:5d:0c:56:78:73:67:6a:5e:e4:61:59:43:df:73:6d:0b:
         af:a7:77:52:2f:38:7d:19:da:76:ca:2b:1e:31:ab:09:1f:f2:
         71:b4:9c:c1:f9:75:ab:60:70:d6:0a:a2:4a:9c:a6:6c:0b:24:
         b7:f3:0c:f6:0b:cf:6f:eb:2f:01:70:0f:8c:04:f6:d0:38:f9:
         fe:df:4c:da:f7:9f:bb:82:bd:be:bd:f1:b4:c6:22:51:61:7b:
         b7:bf:f9:54:90:f4:48:d8:97:54:99:17:27:36:d6:d5:28:bc:
         7d:27:3b:36:a1:5a:15:1d:c6:15:6f:c6:f6:d7:15:5d:73:1e:
         a7:8b:90:e2:2b:4a:12:50:ae:64:3d:54:34:46:bc:5f:8c:44:
         c8:34:e1:4f:32:51:6c:d8:25:04:97:69:5b:1a:07:86:43:5f:
         4a:0e:51:d4:b2:ed:4b:a8:68:ef:be:f9:2d:02:98:98:56:13:
         60:c5:1f:b7:f9:ee:7e:18:65:c0:d2:de:a3:95:db:46:a8:1a:
         8c:2b:ef:35:8c:73:82:61:68:f0:64:3e:fb:c2:44:f3:8e:a2:
         9d:c9:ab:40:5b:b8:d0:c1:5b:c7:a8:5a:a2:8d:0f:9b:37:a1:
         2d:1d:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:09 2025 by rpki-client