Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ea02e5f0-f43d-324f-88b1-fcff299c82f5.roa
File:                     ea02e5f0-f43d-324f-88b1-fcff299c82f5.roa (raw, json)
Hash identifier:          GN4KGzar/PQm++TS12wGREVnKEQ1gNSShGaL0zSo5p4=
Subject key identifier:   0C:72:BF:F2:B6:49:D6:D4:1F:60:12:70:1C:E7:B1:78:58:18:D2:79
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584851A578DEB6EDAEC500504C40
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ea02e5f0-f43d-324f-88b1-fcff299c82f5.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     9009
IP address blocks:        45.59.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:78:de:b6:ed:ae:c5:00:50:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=2ace06fe-f0ad-45ba-b192-7f3e3194eca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d3:4b:17:c4:03:d5:3c:ea:5a:1b:d3:bb:83:
                    63:50:24:13:6f:59:2e:90:c1:dc:50:c3:f2:33:15:
                    20:56:8c:7a:3c:f4:f5:5f:81:c9:36:63:b6:f0:a7:
                    6c:13:ec:a0:a5:98:0c:d4:53:7d:b8:d5:52:1b:db:
                    54:f6:29:11:92:b5:86:9d:a3:16:8f:52:51:17:71:
                    a2:ea:43:c6:30:b4:71:ea:43:18:93:ae:94:67:b1:
                    70:20:83:ee:a2:51:70:e6:bb:80:9b:56:af:90:23:
                    7d:4c:a3:d8:91:f0:45:24:4a:31:ca:c1:40:c4:df:
                    42:f1:a0:0b:2f:e5:27:86:3d:b2:6a:77:a5:e1:c9:
                    60:b8:d1:28:f7:64:9e:6f:82:21:88:74:7f:63:00:
                    6f:c5:4b:a3:c9:a2:f3:b0:8c:35:de:03:3f:d6:23:
                    a2:9f:2b:4b:e3:38:d9:81:3b:01:98:ce:86:ea:08:
                    aa:bf:32:15:26:9d:61:97:b0:5f:fb:0a:68:0f:da:
                    10:25:9e:4a:90:52:f5:db:90:90:2d:65:f5:bd:2a:
                    3e:be:39:8f:e3:fb:c3:9e:8a:2e:ae:db:6e:67:17:
                    80:22:69:a4:07:a7:af:c4:2d:8e:c3:6c:1b:98:40:
                    fb:21:0e:28:f8:0e:0d:00:db:a1:02:51:b0:66:71:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:72:BF:F2:B6:49:D6:D4:1F:60:12:70:1C:E7:B1:78:58:18:D2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/ea02e5f0-f43d-324f-88b1-fcff299c82f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:df:5c:51:bd:d5:27:39:ed:67:08:9b:29:b1:c6:47:ee:48:
         00:d4:5d:fb:34:7b:fd:f1:48:b8:d8:81:41:63:7c:a4:49:5e:
         ee:1c:a5:5e:e2:98:b5:38:2a:f2:b7:39:9d:02:49:df:2f:1a:
         fc:19:f0:2a:c0:ca:6b:5a:63:90:0a:a8:10:13:36:6e:c8:d1:
         cc:c5:48:28:20:4b:95:73:cc:d4:92:2f:6c:ca:2f:ae:90:38:
         00:41:de:84:cc:36:5a:b6:b6:b4:da:e7:86:22:bc:a5:fc:e6:
         f9:18:62:06:a4:5f:80:76:12:32:1f:43:5d:25:47:59:7f:00:
         5c:dd:1c:7d:91:c3:89:a9:e6:8f:4e:2b:97:5f:1a:5c:d4:57:
         b1:66:a1:77:b4:3b:da:f4:4c:67:d6:0a:02:9b:96:20:16:53:
         54:d1:3f:80:58:34:d8:82:0a:35:01:1d:45:13:ba:06:8f:26:
         1e:ed:bf:cd:e8:07:ef:1b:df:c4:a7:77:50:19:d7:51:11:40:
         42:13:00:26:9b:e0:f6:75:e2:0a:d7:29:2f:fd:81:9e:a4:09:
         a7:db:8e:44:73:48:6f:13:31:bb:31:b0:f9:14:3a:b9:36:8e:
         dd:1a:5e:87:9a:09:a9:95:6f:b5:ba:e5:79:e3:d1:ec:c8:5d:
         7e:eb:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:10 2025 by rpki-client