Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/70ac0f19-e0fc-3fc5-8219-1baf18611199.roa
File:                     70ac0f19-e0fc-3fc5-8219-1baf18611199.roa (raw, json)
Hash identifier:          PtFfBj3j1do5OFu8qiSp0IAbW5UjDX73pVaFIw5GRlk=
Subject key identifier:   B2:38:3C:D3:11:A5:AC:E9:F2:80:21:A7:CD:3D:28:E8:F8:99:C2:8F
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858484EECB8705E61638B41B17C20
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/70ac0f19-e0fc-3fc5-8219-1baf18611199.roa
Signing time:             Tue 24 Dec 2024 02:36:54 +0000
ROA not before:           Tue 24 Dec 2024 02:36:54 +0000
ROA not after:            Mon 24 Mar 2025 01:36:54 +0000
asID:                     136557
IP address blocks:        209.145.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:ec:b8:70:5e:61:63:8b:41:b1:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Dec 24 02:36:54 2024 GMT
            Not After : Mar 24 01:36:54 2025 GMT
        Subject: CN=4344e426-e09a-4b28-9d1c-4524ec9a29e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:95:b0:c0:6e:4e:8b:1c:7e:2b:4e:66:a4:
                    e7:ea:48:79:e7:59:b6:32:03:e2:55:05:88:f1:5c:
                    89:f4:61:ae:e5:e0:67:76:6a:9e:c2:a7:af:33:b0:
                    ff:94:33:0f:92:49:9f:c5:2c:67:21:06:c3:d6:2f:
                    be:ce:bf:86:f5:6e:92:25:94:83:ed:5f:32:e2:6a:
                    ec:f1:54:c1:24:9c:8b:5a:49:fb:55:bb:15:23:7a:
                    bf:f7:b2:66:09:03:9e:59:d9:52:ae:d8:d7:1a:e3:
                    b6:dc:d3:0c:3f:eb:7f:8f:5e:90:9d:5f:d2:21:a9:
                    93:01:b8:98:56:8a:79:8b:26:be:e8:76:0c:15:be:
                    07:81:25:d4:fa:d0:dc:7c:cf:57:12:44:df:83:02:
                    fc:1d:a4:bb:90:e7:d4:76:5c:ee:ce:df:21:69:76:
                    b7:a8:77:45:c0:ed:aa:bc:82:00:18:df:4d:24:2e:
                    78:8c:d8:59:f8:f4:49:08:33:f2:c1:e1:94:53:53:
                    89:08:27:b9:ee:a5:21:27:74:d9:2f:0d:90:89:aa:
                    6f:26:bf:f2:c0:4d:38:59:6a:1b:c7:e3:b0:3e:b8:
                    9d:a9:ad:12:39:8c:14:36:f8:9a:4f:2b:05:ad:b6:
                    47:8f:00:69:35:0a:bb:86:a9:82:36:33:c4:0f:04:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:38:3C:D3:11:A5:AC:E9:F2:80:21:A7:CD:3D:28:E8:F8:99:C2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/70ac0f19-e0fc-3fc5-8219-1baf18611199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:62:32:2f:a7:2e:04:8f:16:ae:a3:d4:a0:dc:7c:b4:fb:
         c1:b4:93:60:76:d2:7a:e5:41:87:ac:87:00:85:69:d4:03:50:
         52:c9:b6:6d:91:d8:1e:51:8d:85:db:ea:ae:57:26:86:8b:5e:
         a7:a8:cd:0c:f1:8d:f0:76:98:4b:90:8d:95:ca:6b:ed:6a:0c:
         40:13:fb:a0:27:e3:58:b9:46:55:58:fa:c3:3e:60:bf:e3:b5:
         3c:74:e8:d3:d1:c5:1a:42:d2:b3:13:6c:01:33:e1:5b:d5:75:
         23:4f:9c:19:37:01:31:05:75:88:ce:3c:da:20:97:cb:23:1f:
         32:e4:75:00:50:de:df:c0:38:6e:6b:a1:15:98:67:72:4d:46:
         9e:83:13:bf:23:f8:ff:e8:d5:00:4b:5a:90:37:04:07:86:f1:
         e3:5d:e6:aa:bb:af:db:1b:b9:96:bc:79:25:86:7f:e1:9f:35:
         eb:6e:81:2e:7d:46:7b:16:05:b7:7e:d4:34:b4:f7:e1:d5:f2:
         f3:cf:9f:58:4b:f7:80:15:09:59:b8:2c:37:6a:c2:94:88:88:
         78:f3:bb:a3:91:23:06:5b:7f:8c:44:98:d4:a1:47:03:c3:17:
         b0:88:03:4c:66:ac:77:2e:bf:f3:36:4f:b0:ef:83:cf:a4:64:
         2c:25:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:01 2025 by rpki-client