Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa
File:                     d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa (raw, json)
Hash identifier:          YHDhnSwYQGQu1V6QBodbulohA++hpZtyOjPPDLOau/Y=
Subject key identifier:   7F:78:6C:81:60:D1:AE:CB:1F:5D:3C:86:E8:F4:04:CE:87:A0:CE:CB
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F43285848811B13ADF2A8F979548C3EE0
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa
Signing time:             Sat 11 Jan 2025 02:00:39 +0000
ROA not before:           Sat 11 Jan 2025 02:00:39 +0000
ROA not after:            Fri 11 Apr 2025 01:00:39 +0000
asID:                     400967
IP address blocks:        45.42.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:81:1b:13:ad:f2:a8:f9:79:54:8c:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Jan 11 02:00:39 2025 GMT
            Not After : Apr 11 01:00:39 2025 GMT
        Subject: CN=0bbb64f9-a342-4214-ab2f-884625d5d721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fd:9a:05:8c:60:4e:47:6c:4f:e9:02:76:ea:
                    f1:80:c4:1a:bb:95:35:7b:12:58:87:76:09:a5:d2:
                    f4:dc:50:39:cb:b3:30:ef:d0:c0:7c:20:e3:0b:8c:
                    63:38:9d:b1:df:61:33:f1:d9:98:b4:6a:4a:99:f3:
                    ec:61:3c:8c:a4:ca:89:3d:66:7a:16:b5:18:c9:6c:
                    7b:51:e4:6f:c2:6e:9c:03:6f:9a:70:d3:2c:c9:c6:
                    0c:05:03:b3:ee:32:a6:41:6e:ac:b4:e8:50:40:ea:
                    cb:0c:c1:83:df:09:b8:ed:4e:f5:d3:9b:7a:48:e8:
                    84:cd:ae:03:0c:e6:fb:c4:5d:7e:af:48:5b:e1:3c:
                    af:92:c0:c5:14:51:eb:a2:8c:f1:01:58:3c:4c:b4:
                    bb:ad:87:57:9a:50:70:a7:f4:a7:93:1c:2c:76:fc:
                    7d:10:7f:b4:76:f5:e6:a3:c4:6c:49:d1:09:5f:80:
                    71:78:f6:e6:aa:6f:3b:51:be:a9:fb:80:ff:cd:9e:
                    37:fc:16:94:c0:99:9a:4c:44:c9:7e:09:d7:cd:43:
                    af:8f:c4:f5:1f:db:af:ff:21:2e:8f:4a:cc:d6:ce:
                    ad:c5:13:2b:16:e6:12:e3:b5:7a:1e:39:fc:45:58:
                    41:5d:53:c1:d5:60:00:aa:e9:00:ee:b3:95:da:60:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:6C:81:60:D1:AE:CB:1F:5D:3C:86:E8:F4:04:CE:87:A0:CE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:f1:ba:e1:73:b0:36:94:3e:31:92:d2:d3:8a:ca:4d:e4:
         d0:bc:16:75:00:86:02:9e:24:55:68:88:fd:3c:86:c8:13:c7:
         84:17:3b:a8:61:11:51:94:08:ca:6a:79:86:61:91:a2:05:78:
         8e:75:84:21:8e:4e:a7:a2:a1:45:b6:e8:af:87:24:d0:16:45:
         6a:46:1c:77:a7:7f:4d:ff:fd:02:b7:d0:f8:bb:c9:cc:9a:45:
         ce:15:eb:c8:c3:37:97:83:89:fa:ca:44:af:be:28:6b:a0:6d:
         c0:27:bf:36:30:a4:87:f0:a0:75:b9:59:14:47:de:d0:3e:15:
         a0:0d:30:da:fc:06:c6:30:2a:db:a1:1b:2a:65:60:3c:80:42:
         b0:e0:d7:aa:01:12:1c:31:d3:82:99:37:18:0b:91:a5:28:96:
         c3:fd:d3:84:29:ab:fb:6f:4c:41:9f:83:eb:37:b8:28:64:19:
         87:d0:70:cd:a9:00:0b:f7:1e:ba:bd:0c:49:73:f0:43:d9:75:
         73:bf:12:b3:bb:01:aa:61:c4:58:2e:13:fe:ee:b2:46:b8:81:
         ac:f9:9a:43:98:7c:60:14:b2:f6:5d:a3:f5:85:80:89:80:d9:
         5a:dd:5a:e5:86:0f:72:29:5e:a7:b5:b9:dc:7d:5c:b1:26:10:
         33:67:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:19 2025 by rpki-client