Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/85c5efff-4417-38f8-8e3e-1f879aacb5c4.roa
File:                     85c5efff-4417-38f8-8e3e-1f879aacb5c4.roa (raw, json)
Hash identifier:          yJzwc1pditzXZyid+Bdq/2m+AInXZ0RhwaiUaS0s3xI=
Subject key identifier:   7D:D3:BA:DF:4A:35:8E:35:17:CD:0F:BD:01:F6:49:50:EB:A2:BA:F2
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584800AFC9CC106391180B22A500
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/85c5efff-4417-38f8-8e3e-1f879aacb5c4.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     31788
IP address blocks:        45.45.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c9:cc:10:63:91:18:0b:22:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=e8110195-1423-4472-a679-c3edf95dba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:33:3e:d6:de:59:67:4f:cc:fb:4e:cc:92:
                    83:d4:23:5b:1a:b6:f2:95:4e:95:a7:28:4c:22:fb:
                    1f:89:c6:09:4b:ac:f3:a6:34:d3:17:a0:56:33:76:
                    dc:94:69:dd:50:46:e8:a1:b3:42:fd:64:bb:de:01:
                    6e:f5:3e:bf:89:58:5c:b8:65:e1:f0:f9:d2:0a:1a:
                    c1:7d:de:68:3b:6b:da:f6:b0:b7:98:1d:90:5c:e8:
                    b6:36:3d:4b:89:37:d1:a5:17:47:32:c6:86:87:4b:
                    fb:2b:e4:93:f8:56:d4:44:f5:eb:b5:21:58:29:c3:
                    bf:f7:86:fb:fa:4f:5c:5c:39:1e:30:ed:45:7a:52:
                    26:88:18:b5:d9:fa:da:65:86:d8:9e:27:b0:e5:2f:
                    ce:33:c7:41:ea:f9:03:99:e7:af:79:1a:c5:e4:1b:
                    92:01:a5:9e:84:af:d0:56:b1:4f:cd:7c:73:34:15:
                    d6:8b:d0:1a:96:d1:a9:d8:b7:13:ab:af:6b:e9:60:
                    12:12:b0:c0:1e:dd:d4:9a:ec:60:06:aa:86:53:a1:
                    a4:1d:bf:c6:0a:38:29:07:91:7f:80:bc:a0:ac:90:
                    28:11:b6:61:7e:a9:ab:0e:47:cc:2d:27:02:62:f1:
                    60:be:48:58:de:53:3e:a6:53:a2:92:7c:36:43:71:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D3:BA:DF:4A:35:8E:35:17:CD:0F:BD:01:F6:49:50:EB:A2:BA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/85c5efff-4417-38f8-8e3e-1f879aacb5c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:00:ab:ee:38:4e:54:d0:6b:b9:ab:62:3a:19:9b:f4:83:63:
         c1:64:03:23:69:21:8b:28:ac:3d:b9:47:1c:53:2a:41:7f:f9:
         f9:0b:43:c4:f3:56:b9:f0:a7:20:d8:ae:96:0e:32:9b:29:f5:
         96:28:f2:0b:80:fe:2e:2c:41:4d:86:1f:5c:0b:a9:ed:30:4c:
         1f:ee:68:aa:49:10:2d:0c:ef:56:3c:c2:51:99:e4:e4:f4:02:
         00:b5:84:52:84:20:be:ca:33:43:8b:9d:68:9d:bc:d3:7b:ac:
         56:1c:44:99:1f:86:36:b7:51:95:6b:f7:12:57:a8:85:70:70:
         e1:0c:bc:c8:c2:e7:b4:19:25:10:2a:28:d3:aa:f4:c8:84:e9:
         a0:69:b2:d0:c7:51:fd:de:34:3f:7d:2c:68:f1:c2:e9:f8:3a:
         4c:43:4a:6a:0c:65:c2:a4:73:52:22:cb:38:36:39:3d:b5:91:
         74:59:e1:1f:c5:ae:0d:e7:9c:3e:a4:90:c7:f0:26:02:69:1a:
         cf:4c:ff:ab:d5:22:06:d2:27:a5:83:32:fd:01:fe:17:80:0b:
         62:58:fc:ac:06:83:1e:7d:b2:db:a9:a7:1c:e3:e9:4d:70:6c:
         03:5f:67:47:b2:ac:35:17:70:8b:5b:75:79:06:75:04:cb:5e:
         bb:93:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:46 2025 by rpki-client