Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa
File:                     5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json)
Hash identifier:          xc20VNXLR6UAcV9MuyDnV60U+8ZAidqybdXFTcXvaqI=
Subject key identifier:   54:5D:4A:B6:41:53:BF:FA:CB:97:96:7E:A0:78:AF:70:15:1B:49:8C
Certificate issuer:       /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17
Certificate serial:       010D0C9F4328584845158A91E5A17FF32E5C17E0
Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     399769
IP address blocks:        45.45.158.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:8a:91:e5:a1:7f:f3:2e:5c:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=d25182a5-2b07-4fa8-afa8-fe30d0326193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6a:30:49:72:c8:b2:7e:64:62:a2:21:dd:1c:
                    3b:bb:64:71:d0:df:ed:99:37:0b:7d:6b:86:cd:54:
                    5d:3a:b9:ec:a6:1c:37:ae:7c:b2:fa:ac:fe:56:07:
                    f5:64:42:ef:fd:9c:cb:0a:98:9d:ea:98:10:16:6b:
                    e5:d7:3c:20:75:1e:f0:cd:c2:fe:6c:7d:d9:3a:49:
                    cd:30:24:c6:77:29:46:62:8f:af:63:6e:11:fa:b0:
                    6f:01:05:d6:88:7a:f0:f3:b0:41:d1:c2:ea:50:f4:
                    30:c2:af:c9:1f:3a:c9:b1:96:c9:bf:a6:1b:e3:f5:
                    47:37:ad:3c:34:1d:9b:e5:7b:77:41:89:a1:ea:8f:
                    1b:07:f4:b3:f1:84:55:3f:54:28:ce:32:dc:4e:0d:
                    b0:23:85:12:e8:b6:18:17:2e:0b:8a:dc:ca:1a:ae:
                    52:67:8c:6a:d8:ab:08:91:f8:0d:6a:c3:5c:25:d0:
                    5d:3c:6b:07:fe:e5:2e:f0:9e:66:1c:ca:00:d0:1b:
                    7f:49:b5:12:84:30:84:fe:1a:b0:5d:20:0d:f7:fd:
                    5c:f3:32:b2:8a:0c:72:ea:38:b0:aa:3c:a6:0b:18:
                    ef:01:78:8a:cc:21:5e:71:ec:ba:03:bb:9a:f4:7f:
                    f2:5a:98:72:d8:13:25:e0:51:07:21:be:ef:2d:81:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5D:4A:B6:41:53:BF:FA:CB:97:96:7E:A0:78:AF:70:15:1B:49:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl

            X509v3 Authority Key Identifier:
                keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:60:a6:e5:12:fa:02:57:ee:39:9f:0c:d4:fd:5a:70:72:
         0f:fd:6e:61:99:43:eb:92:69:38:de:f9:5d:72:52:cc:5b:f1:
         e0:ae:81:46:b5:ba:07:47:15:06:a2:94:f3:76:dd:6a:44:e1:
         2c:ee:0e:51:18:32:62:e2:00:21:23:2f:5c:42:b1:a2:5e:2a:
         85:9e:c9:c3:3a:0b:fa:e4:ca:99:bf:01:f7:09:53:a1:d5:01:
         b8:60:36:53:27:ad:f8:0a:16:bc:94:3e:e3:99:35:46:de:f1:
         90:7b:c1:04:66:cd:6c:a4:24:0f:65:40:8f:d2:50:98:42:35:
         37:3b:7b:a4:c2:dc:2e:2e:4e:90:bd:71:5f:bd:76:96:61:41:
         2f:c0:85:13:18:5c:5b:a7:8e:3e:0d:95:2f:71:b1:32:84:ef:
         19:4c:13:21:20:84:bb:3f:e4:6b:ce:d1:87:8f:eb:c2:7d:4a:
         80:3c:42:b3:72:cd:99:46:dc:f7:fd:92:c8:eb:1c:75:e0:05:
         d4:b2:9e:4c:92:30:90:1a:79:92:f6:b9:1e:64:c0:25:cd:11:
         3f:3c:dc:36:99:73:5a:21:5c:22:6e:a6:0b:b7:39:b0:bd:16:
         8c:ac:bc:cf:03:55:c0:f5:b4:2f:80:a1:c5:dd:97:b7:f0:14:
         e7:55:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----