Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa
File:                     f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa (raw, json)
Hash identifier:          SRmW5M5FuAz8f/hzLfez9AGmdiQfqsZrpSrLifM8VYs=
Subject key identifier:   81:6C:81:DE:96:B8:5F:14:35:4A:78:F4:AD:0B:50:43:5A:9F:42:95
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F432858481C9A803E8B0104806E4A9420
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     399214
IP address blocks:        45.42.168.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:80:3e:8b:01:04:80:6e:4a:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=44abb5be-96f3-44e1-8a8d-522e54e0b6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:37:f8:97:10:b7:ab:b6:04:3d:95:6b:06:
                    c4:d0:24:0b:98:d3:1b:1a:57:54:7c:8f:98:94:0c:
                    e0:59:0f:66:75:e6:59:7e:2f:83:c7:44:00:39:c1:
                    cb:b2:53:6d:e7:6e:f4:d0:61:1b:ab:b8:45:89:38:
                    4a:8d:f3:fa:74:8e:e9:27:cf:1a:6a:5f:89:03:23:
                    49:df:b1:d0:7b:02:f7:21:0e:68:89:2c:c3:b9:0d:
                    0a:9f:a6:d1:25:14:a8:65:b1:47:55:60:99:f3:09:
                    94:9d:c8:bc:5e:a4:5a:86:84:5f:9c:b0:ee:08:f8:
                    33:83:9e:d6:13:19:41:0d:7b:d6:dc:46:b8:ac:93:
                    1d:4d:62:d4:65:8a:0b:ce:29:cd:14:ba:5b:eb:72:
                    ca:0e:d2:46:73:81:35:7c:92:4c:bf:4b:09:ed:2c:
                    42:a3:44:f0:28:a3:1e:6e:84:43:f7:94:d5:50:eb:
                    d9:66:b8:df:d4:35:2c:68:b7:91:89:9b:03:ce:c7:
                    c7:7a:34:ed:3b:f1:e1:82:a5:99:02:9e:39:10:64:
                    27:23:61:24:38:33:b6:4d:4e:92:bb:9a:c1:f5:e4:
                    97:14:5b:1c:26:ab:43:0d:49:72:9e:11:5b:f7:52:
                    0a:ce:3f:b0:6b:b2:e1:41:6b:35:b9:c9:a5:8d:c1:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6C:81:DE:96:B8:5F:14:35:4A:78:F4:AD:0B:50:43:5A:9F:42:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/f3592aa3-f7ae-35ec-952b-6d53541fe11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:20:29:43:0b:a9:aa:9c:2f:0a:87:c6:49:8e:d5:a9:02:b8:
         2c:f3:93:a9:9d:8c:d5:8e:ac:88:88:36:86:be:79:56:a2:1e:
         0a:28:6c:cf:8a:46:83:88:f4:41:76:23:37:4b:e1:3e:74:27:
         25:77:55:7a:99:7a:1e:a1:70:36:a3:9f:ea:3e:ad:f6:18:a6:
         bf:8e:ef:ad:31:be:9d:dc:3d:76:e1:ae:72:2c:de:5a:7b:19:
         42:da:42:2b:3c:d0:b7:a2:ab:aa:49:20:f2:a5:2c:73:51:4a:
         ca:33:4f:0a:69:bf:42:84:ce:cd:a5:c5:19:48:13:d6:85:91:
         35:49:62:bc:fb:c1:8c:1f:96:7e:66:1b:93:83:e3:a6:1f:b4:
         f3:15:a7:db:70:1f:7a:f0:68:c3:b4:e5:e1:c4:f5:bb:15:4d:
         5a:1a:be:0b:de:68:a2:41:f9:08:70:06:c9:42:0b:f5:27:7a:
         ac:7d:e3:8e:36:8e:9e:5a:1a:da:ac:f0:7c:bf:e0:7e:de:62:
         9c:b1:4e:3b:7b:c9:32:5e:32:2f:7b:39:cc:0a:bb:7b:cc:b4:
         54:67:b6:3c:46:cc:ab:3f:26:fb:d5:b2:3e:60:a4:7b:69:72:
         b1:7d:89:d4:74:56:87:a6:e9:07:14:fd:77:2c:60:c4:e3:18:
         49:13:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:14:12 2025 by rpki-client