Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa
File:                     4745e31c-32e1-30eb-891a-95c6ba54d368.roa (raw, json)
Hash identifier:          0lwxnuv0iCIAcaycNWhae4AAYgc3SFMuhgiHSn15420=
Subject key identifier:   E8:B8:9C:BE:41:23:F9:B9:95:4D:BC:6E:29:71:5B:BA:C0:A1:A7:50
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B276FEF76F0DC1D5BECC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     54858
IP address blocks:        162.244.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:27:6f:ef:76:f0:dc:1d:5b:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=e2599795-01c5-4ed4-88d3-7964e60ed416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:0c:88:8b:fb:e8:e8:74:67:ea:36:e0:5f:
                    b4:dd:53:2f:44:92:f3:f6:93:34:e2:3f:26:6e:20:
                    21:b1:e4:72:d1:5f:51:ce:ad:a1:d7:28:68:8f:29:
                    6f:4c:87:f2:31:1a:72:c0:03:07:c3:76:d6:ef:12:
                    82:ad:06:91:52:12:6d:8a:87:a9:33:5c:11:51:38:
                    1e:c0:be:7f:72:fd:48:f3:1b:67:f4:da:c3:0c:68:
                    89:b3:89:03:0b:3a:e5:fd:70:de:5a:ad:b9:8b:0a:
                    04:c7:e5:12:b8:8f:8a:a2:cf:16:8a:52:45:d3:db:
                    1c:21:9e:2a:9f:eb:a5:e4:0d:a2:00:53:d7:e7:2e:
                    cd:64:18:fb:8b:c5:af:56:bc:9d:fe:68:a7:58:54:
                    c6:f3:11:b1:ee:8f:70:42:51:9d:17:b2:78:e0:91:
                    0c:88:2b:7f:42:50:7a:4e:0f:b5:3d:ec:32:fa:f9:
                    69:a5:26:ae:04:23:69:a9:cf:c1:0a:58:f7:35:2c:
                    50:89:3f:c9:df:dd:47:9c:d7:7e:f1:5a:21:ae:f7:
                    eb:8f:46:9d:10:bb:e1:92:0e:59:52:28:c9:1a:ad:
                    4d:3c:6c:a1:67:d7:79:3d:91:38:11:7c:ec:23:a9:
                    42:68:81:2d:95:d3:bd:35:44:cc:18:74:b8:7e:05:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:9C:BE:41:23:F9:B9:95:4D:BC:6E:29:71:5B:BA:C0:A1:A7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4745e31c-32e1-30eb-891a-95c6ba54d368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:71:84:30:77:df:cc:1f:64:10:02:53:fd:38:1a:a7:5b:
         a6:0a:44:71:97:f4:b6:27:11:1d:ce:ba:e4:03:43:6f:b9:51:
         b1:2a:11:55:ab:b1:84:45:3b:e7:99:de:45:c3:aa:69:ad:0f:
         85:3a:55:fe:0d:0b:74:81:f1:dd:5d:c1:98:00:16:de:11:6c:
         f8:f4:66:18:1c:36:a3:91:d2:05:03:c1:06:38:3e:4b:4f:f1:
         8e:ac:e0:44:6b:05:cd:39:82:59:5b:b6:cb:69:8a:77:05:d2:
         64:ed:a9:7c:62:10:93:89:38:b9:e7:4f:99:6e:8c:83:1b:87:
         b0:c2:13:49:14:b9:d8:95:2b:b5:f8:43:ae:0e:04:21:ca:7b:
         51:07:9c:d9:74:93:09:63:2b:96:75:af:b5:cc:12:69:3f:c2:
         53:81:22:60:09:11:f1:49:38:a9:87:24:fd:0d:ec:bd:15:e6:
         6f:92:e7:0f:7a:8f:30:b6:4e:ee:84:d3:fe:30:d2:9e:0b:8e:
         71:1f:b9:cc:14:2e:06:cf:70:66:e5:7d:a3:e3:21:5c:bb:c2:
         34:b3:1f:75:c4:7b:02:5f:a5:10:2d:6b:f1:79:21:78:ff:9f:
         b6:18:90:97:67:b9:0b:e7:0c:88:32:ae:11:a8:00:1e:7a:42:
         ca:a5:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:07 2025 by rpki-client