Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa
File:                     f14949f5-5a99-3643-87c7-29825b35b0f2.roa (raw, json)
Hash identifier:          HOy5zEV8sRBpAi/0IoDeHKcr3gwzzUu/DFQIAHT+xhQ=
Subject key identifier:   61:F6:7F:34:6A:5A:69:F4:DD:00:B1:1E:88:74:00:F3:89:CD:E0:FF
Certificate issuer:       /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial:       010D0C9F4328584858A05BF67F86A3C076B7A6C0
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     6079
IP address blocks:        45.45.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5b:f6:7f:86:a3:c0:76:b7:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=8ab2c1d6-1d53-4ac1-8cfb-d70ac669e708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:e3:13:e8:80:2e:58:2f:5f:18:1e:37:f2:
                    15:b4:f6:84:fe:4c:ee:e9:72:ec:5f:bb:73:a8:ef:
                    34:fc:6e:96:2e:4a:ee:c9:8a:04:51:35:da:99:d5:
                    40:83:22:72:c6:97:b4:29:cb:5f:64:95:e6:f1:13:
                    d9:9c:96:23:54:d4:00:0a:46:da:60:a6:24:79:b6:
                    c7:28:3f:3c:ad:6d:6d:96:9d:0e:25:60:36:85:31:
                    25:a4:bd:e7:80:0f:bc:06:0a:79:37:4b:0f:57:23:
                    b8:b4:28:77:6e:77:81:43:30:57:ba:94:01:25:6d:
                    82:31:b5:6c:d9:4f:d2:a4:cf:29:32:cd:b4:0a:f3:
                    1c:cf:62:de:ff:0b:db:95:6c:ac:6a:7b:9a:5e:6e:
                    fe:1d:85:bd:c8:64:8f:03:dc:eb:e6:a9:e4:ae:86:
                    13:36:3d:e2:0a:84:33:23:d9:00:33:1f:36:02:68:
                    f3:78:af:20:ad:35:27:09:fa:2d:a0:db:08:7d:0a:
                    5d:91:4e:57:af:80:82:79:81:fc:64:3c:cd:66:83:
                    dd:c4:4d:99:b2:e3:c3:c0:99:75:9f:e8:f9:0a:62:
                    ba:49:8f:29:91:a5:46:bf:f2:de:c2:fd:9f:3c:58:
                    21:20:62:b2:40:bc:e6:d0:0c:f6:fb:f6:51:fc:da:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F6:7F:34:6A:5A:69:F4:DD:00:B1:1E:88:74:00:F3:89:CD:E0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:a9:8f:29:56:b1:25:ee:b7:47:dc:10:be:74:22:b0:85:
         9f:f7:73:37:9c:1c:2b:42:c3:a3:d8:cf:50:2b:81:0b:9a:7d:
         d2:15:4b:f7:6e:85:fc:11:e2:98:a9:a9:df:01:b6:07:75:bb:
         be:56:ef:70:23:08:a4:a9:fd:ba:6e:0b:5a:c4:59:df:be:85:
         69:c4:25:2b:49:24:9e:08:a6:52:a8:29:7e:81:68:44:a8:bb:
         a6:a2:26:8b:f7:e5:45:9e:80:da:6b:e4:dd:aa:79:95:08:20:
         a2:b9:60:a4:69:21:8f:a4:63:1e:97:1d:6a:7e:95:82:22:fd:
         c9:40:e1:c0:f8:2c:c4:2c:c4:f2:94:70:0c:43:4f:85:bb:35:
         58:34:f5:e7:2b:e6:68:8e:d0:86:1e:06:b5:00:6d:60:ab:77:
         6c:a5:af:b7:7a:7b:42:0c:73:38:77:36:7d:b9:d3:11:d4:80:
         73:94:87:c2:b9:2d:c9:20:c7:aa:94:97:22:50:0f:64:de:a5:
         be:ac:fe:52:d4:9d:cc:37:98:3e:0b:aa:86:41:bd:cd:57:4a:
         f8:10:3a:59:fe:c9:04:8a:77:ac:43:ef:2a:f1:23:40:cb:5c:
         08:ef:48:32:5d:40:b5:84:49:ee:4e:2e:b6:01:b7:f3:1e:3e:
         f8:1f:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:51:14 2025 by rpki-client