Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4c990fce-6392-3a3c-b87d-e9895b94b2e7.roa
File:                     4c990fce-6392-3a3c-b87d-e9895b94b2e7.roa (raw, json)
Hash identifier:          5v9OHBm1bW6n/p0xgt8WEM3qKPuoeo0W0Syk62z2i4Y=
Subject key identifier:   D8:AD:DD:6B:E5:BE:13:CE:0F:68:B1:F0:31:CC:D8:B0:9F:B1:20:B9
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F432858484C1032C21A445B2608476980
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4c990fce-6392-3a3c-b87d-e9895b94b2e7.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     7018
IP address blocks:        45.45.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:32:c2:1a:44:5b:26:08:47:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=0a824a59-45f6-4090-a30b-99a07d366e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ff:3e:26:53:e6:82:5a:51:c7:47:db:89:95:
                    13:0c:9c:b3:5a:5f:e6:a8:c0:70:dd:26:a3:42:13:
                    57:90:9b:1b:db:d1:d0:ce:32:4c:9f:26:ab:82:ca:
                    3d:58:00:bb:57:57:07:e6:6c:53:aa:57:b2:64:37:
                    ba:69:88:fd:50:a1:02:0b:6c:e8:e9:da:ab:4a:3d:
                    39:b8:68:08:d6:07:fd:a7:a2:0e:d4:65:46:93:19:
                    65:3f:b5:2b:00:f0:2f:d1:85:d7:a8:e8:d7:47:ea:
                    9b:e6:cb:36:4a:87:f2:86:89:6a:ce:18:41:b9:94:
                    5d:e2:b2:92:5e:51:c1:30:b8:17:bd:c2:40:e2:f1:
                    87:80:05:5d:b3:c8:93:13:e9:4e:43:3e:d1:b0:e1:
                    51:fe:ac:42:23:17:87:b8:d5:1b:1c:b8:76:41:6a:
                    ee:42:b9:31:66:c4:a1:c9:e0:f4:c2:04:ce:e4:bc:
                    6b:b9:0c:eb:b6:79:02:a4:5e:f7:bc:dd:aa:e3:3b:
                    9d:e4:83:3f:a0:2e:bc:6f:f4:58:5a:28:bc:ea:3a:
                    ec:b8:43:d4:dd:88:72:ea:56:21:58:0e:fe:0b:aa:
                    ac:19:3e:d7:0d:11:21:c8:65:a5:50:93:10:0e:15:
                    7b:a8:5a:7a:02:09:22:1c:75:7d:95:aa:a6:aa:7a:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:DD:6B:E5:BE:13:CE:0F:68:B1:F0:31:CC:D8:B0:9F:B1:20:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4c990fce-6392-3a3c-b87d-e9895b94b2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:73:1b:d1:35:5f:be:da:41:8b:9a:12:bc:79:11:af:e5:dc:
         57:8e:36:8a:3d:c2:52:ef:b1:9e:ae:2b:68:71:9b:83:5b:e8:
         18:92:5a:93:06:96:d3:cf:e3:c0:3d:b0:21:d0:af:cc:42:8a:
         01:ab:1c:0a:e2:11:1b:56:59:ed:17:6f:77:de:23:de:36:cc:
         d3:48:c5:ac:ee:de:5d:b5:ed:be:99:bb:11:48:19:79:70:57:
         d1:c0:c2:13:75:83:88:e4:03:3c:98:d2:12:3f:2d:1c:62:25:
         0e:ee:c4:f4:ab:a8:fb:f2:b5:5e:6c:a5:2b:fe:e7:ce:91:89:
         a3:3d:1b:08:b2:e5:2e:9c:e3:7c:3d:6b:09:c1:06:fc:bb:30:
         53:7e:4c:16:ad:9d:e4:39:54:b9:f0:2e:27:7f:43:69:48:a3:
         8b:33:18:c2:82:0e:7c:5d:30:62:51:3e:9f:aa:b2:dc:f2:12:
         5f:74:c9:a1:56:2e:8a:b3:4e:62:aa:25:0b:89:3f:43:b6:cb:
         0e:03:27:fc:24:2a:a6:ce:63:50:a8:8d:04:95:f3:b0:af:10:
         41:6c:4b:0e:91:bb:bd:bd:9f:16:bc:92:80:22:1d:b8:54:ae:
         30:83:4c:d2:96:70:18:aa:1c:09:76:6e:c3:5d:9f:c6:4c:75:
         88:3e:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:36:07 2025 by rpki-client