Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa
File:                     01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa (raw, json)
Hash identifier:          JhX6vYNpSJWpn0JMDZm7w1bEQKISx2qfE9KxDudbNns=
Subject key identifier:   A0:D8:8A:B0:99:BA:8F:AB:F7:5B:48:1F:D8:98:1B:46:7E:2A:7C:4E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584863CB129D516CC34430DFA400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     206264
IP address blocks:        45.74.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:12:9d:51:6c:c3:44:30:df:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=2d5c5cd5-4c47-4caa-85d8-54107232dbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:53:86:58:5b:1c:d5:cc:8e:ad:a6:fd:01:
                    2d:55:59:f9:f4:6b:af:cf:1f:43:b4:28:2f:23:2b:
                    63:4f:92:9e:eb:18:98:37:f7:1d:80:6c:31:e2:e1:
                    80:4d:44:04:22:7d:f8:8e:95:f6:aa:ce:0d:30:03:
                    2d:38:ba:af:df:c2:1d:74:d6:ce:65:e2:be:2e:c8:
                    bf:48:80:40:2c:0f:df:60:bd:7a:bc:70:49:c0:9a:
                    ea:22:ec:64:a6:3b:20:7e:72:26:80:21:56:a1:28:
                    cc:7f:80:0a:08:2d:f8:4b:28:e0:6b:09:0d:c9:84:
                    ae:5a:9e:e0:3a:f8:e7:42:88:ec:b9:f2:ca:06:fd:
                    da:71:04:f5:66:61:c9:53:f2:3c:9c:db:80:98:27:
                    48:59:90:3d:25:14:2b:ff:91:65:64:38:1b:82:83:
                    ce:04:b1:2d:60:35:05:bf:e9:80:07:b4:d5:66:5f:
                    02:5a:74:71:82:30:04:f7:c0:c0:54:56:66:4a:07:
                    6a:f0:74:17:f5:43:f9:fb:99:b1:e4:03:59:b6:53:
                    8a:46:9a:41:cf:73:aa:20:76:b8:82:94:e6:0d:45:
                    c8:4f:f8:7a:2a:13:36:05:51:24:49:a8:aa:81:55:
                    1c:3c:b7:1d:01:8d:62:de:8b:f9:39:55:0e:8c:5b:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:8A:B0:99:BA:8F:AB:F7:5B:48:1F:D8:98:1B:46:7E:2A:7C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01a8e0d0-c87f-353d-8382-1d4f0267ccd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:b0:3f:62:4a:6b:4f:18:42:72:56:bf:75:61:19:56:98:
         71:5d:c3:36:b3:0c:60:0d:c8:bc:aa:76:6e:78:3c:3c:34:56:
         53:f8:06:1f:3c:91:b9:1d:cd:49:f0:ec:ed:4c:2d:b0:60:9a:
         a7:ad:6d:85:9d:4f:21:66:3b:37:2c:99:59:9d:32:3f:aa:70:
         e0:98:71:b6:97:c2:17:ef:70:ec:42:cc:cb:ff:5a:66:0e:db:
         6f:69:ec:e0:d7:e8:ed:5b:61:39:8d:13:c6:34:b0:dd:96:1e:
         fd:4d:4e:33:b0:0a:6f:20:61:c7:a8:50:4e:33:67:f3:3b:15:
         44:d5:b9:54:52:8e:4d:45:08:be:d8:62:3b:0f:89:95:6d:4f:
         2d:c8:cf:96:c3:6f:92:33:39:3b:dd:ae:42:d4:71:a6:52:3a:
         61:8f:f7:02:b0:9b:6c:9c:e6:21:5c:35:ed:e7:72:71:be:0a:
         1c:91:96:8f:a3:3a:3f:ce:b5:be:a4:6a:bd:e7:a2:06:a6:22:
         a9:fb:1f:11:b9:3d:84:ca:eb:0e:46:12:3c:9f:18:68:56:9c:
         90:77:9b:4b:62:e5:a6:23:26:e7:37:55:1e:58:4a:93:7d:ac:
         36:5f:13:95:b6:13:9b:8a:74:0f:c5:18:ac:6b:fa:55:6e:0d:
         ae:7e:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----