Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa
File:                     32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa (raw, json)
Hash identifier:          NdPCwHIDvBikZDT0HOQcfD3GA6Ox+vw9+DUHaNKWCxo=
Subject key identifier:   8C:35:31:EF:9A:79:96:B5:FD:6B:FA:A6:6C:A1:E7:3F:C3:CC:57:C9
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584871C06B831248AC080EF4CA80
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     44016
IP address blocks:        45.91.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6b:83:12:48:ac:08:0e:f4:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=3a34090b-aa5a-44fa-931a-fac0889a934d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:d6:a7:ae:53:99:05:06:ca:e1:f6:f4:c9:
                    1f:da:ae:78:6b:da:9e:5b:a2:6c:e9:93:79:d3:14:
                    9e:25:b3:3e:5b:07:49:3b:54:ea:8d:21:52:fa:bb:
                    2c:87:59:ee:f0:35:aa:81:82:57:7b:ff:2c:33:18:
                    d4:37:57:45:c0:c9:af:55:5d:c7:d7:90:d5:27:03:
                    37:11:a9:a9:42:dd:57:35:96:ff:d7:c9:5e:34:47:
                    d2:c2:8c:79:02:02:03:0e:35:f7:6c:6b:b7:ff:76:
                    b3:65:44:80:d9:e2:2b:57:ee:f7:23:5b:4e:88:07:
                    84:2b:4f:6b:57:8e:cd:ac:a6:74:47:ff:b5:06:38:
                    ff:b7:2f:ff:9a:ac:2c:20:b8:9f:e0:90:82:6a:df:
                    f0:b3:25:9f:be:2d:fd:cf:ca:ea:c0:f0:51:99:c0:
                    42:b2:a3:28:28:7e:29:33:2b:45:53:31:27:a4:0f:
                    1c:98:e3:18:b2:2f:db:d5:8a:ce:7a:a9:91:c5:6d:
                    1b:de:99:ea:03:f6:f4:c4:10:1a:08:aa:4e:ba:9f:
                    0a:bc:d9:ea:29:e2:e4:e4:76:52:74:89:df:8e:cc:
                    ed:79:12:d3:ce:dc:0f:a4:76:46:2d:68:0b:4b:40:
                    b8:a0:04:2c:e5:7f:4e:b2:53:63:1b:83:40:ac:90:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:31:EF:9A:79:96:B5:FD:6B:FA:A6:6C:A1:E7:3F:C3:CC:57:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/32f1e2da-70bb-36bb-811e-18bf24fd1fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:06:4b:f7:5a:98:a0:1c:d2:c2:23:e3:80:92:97:07:1d:31:
         c6:4c:4a:25:58:65:44:f7:6c:ab:11:4f:4b:df:5c:a6:fd:f0:
         db:8a:60:1f:f7:0c:2a:e6:bc:00:8a:b5:fd:70:c1:ed:ef:06:
         32:fe:25:a7:f4:5f:79:07:53:ae:9f:21:42:c4:e2:dc:d3:d9:
         59:3e:e5:d7:8a:bd:5b:ed:54:63:d0:ad:c0:04:be:02:af:fe:
         5c:6a:3e:e1:e8:c0:74:dc:18:8f:bc:18:6f:7e:88:b3:e6:45:
         4c:9a:d7:9f:e7:1e:e7:07:d5:b8:ad:fe:31:24:a8:60:83:6b:
         68:02:b8:3e:73:4c:ca:81:82:e0:d5:da:f2:17:16:8c:36:b9:
         80:21:8e:e8:fc:f1:89:b2:02:3d:03:f1:ec:62:ad:ce:57:95:
         48:7f:11:49:3c:55:45:d7:89:75:00:0b:95:03:df:30:31:e8:
         b2:3a:ba:58:e5:96:62:d4:68:2a:a1:c8:c9:4f:57:c9:a1:58:
         29:30:3a:67:01:31:89:1a:1d:da:00:3a:9b:d4:12:72:e6:94:
         5e:5b:13:75:06:a9:2b:b1:95:cd:bc:f1:03:a9:f1:ee:6a:88:
         37:9f:1c:d9:9a:af:3e:6a:43:77:a0:ef:88:7a:50:74:c9:07:
         32:56:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:05 2025 by rpki-client