Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fff6a4a4-a439-384f-83c2-9b17a696ae1e.roa
File:                     fff6a4a4-a439-384f-83c2-9b17a696ae1e.roa (raw, json)
Hash identifier:          pJcZDbaf7R192F/lmPkGtsDrNOmLfsW4Ha+27FUjcYE=
Subject key identifier:   4C:D3:22:46:ED:6C:9A:34:4B:9E:97:CF:D9:21:F1:BD:60:07:4A:07
Certificate issuer:       /CN=fe1d4594-94df-4fba-9cf4-2280ebebbbbd
Certificate serial:       010D0C9F4328584858A05AF84050F1D91C0EFE40
Authority key identifier: 43:2E:78:72:CE:A8:A6:2D:95:3B:7E:F9:AC:BF:89:F5:4C:D8:4D:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fff6a4a4-a439-384f-83c2-9b17a696ae1e.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     399790
IP address blocks:        45.150.58.0/24 maxlen: 24
                          68.68.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5a:f8:40:50:f1:d9:1c:0e:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d4594-94df-4fba-9cf4-2280ebebbbbd
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=e51ad089-fe51-4956-9c8e-dcf4034362af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:08:04:6d:f3:c5:99:73:21:c2:21:95:20:
                    41:b5:c5:a0:98:81:ed:a3:e7:c5:02:f8:44:92:9a:
                    99:45:0e:b3:74:fe:e9:66:d1:87:57:21:83:76:fb:
                    6a:91:34:97:54:35:0d:23:7a:78:d8:0f:3c:0c:ce:
                    1c:14:20:79:58:00:7d:46:f2:f6:66:b6:97:35:17:
                    e6:a3:cd:b7:c0:c0:ea:74:f9:df:fc:e4:65:5d:b8:
                    52:fd:84:e9:b9:89:0b:eb:4a:13:5a:e1:12:ea:92:
                    f0:c1:b0:5e:6c:f9:16:a9:c7:cc:fa:0a:5d:8c:6b:
                    f4:2e:c0:43:17:e3:7c:29:36:eb:7d:af:fa:4a:8b:
                    84:13:fe:82:b0:73:17:3c:37:97:a6:1d:98:19:51:
                    d9:a3:3a:e1:12:7b:b9:69:93:e8:96:a2:2b:aa:eb:
                    d4:9a:78:e0:29:31:d2:11:1a:20:14:1a:fd:32:1e:
                    1e:c1:71:45:da:e4:67:00:0f:64:3a:1e:8b:ed:0c:
                    82:97:63:55:44:33:c0:fe:a1:a3:25:af:c0:f6:7f:
                    24:1d:5e:3f:ab:12:5d:d6:ad:66:11:87:5b:3b:14:
                    14:27:b3:cf:31:bf:4c:b7:a4:32:a4:ba:e4:2a:71:
                    82:e7:51:81:0d:f6:de:bf:7e:4f:f1:6b:bb:46:62:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:22:46:ED:6C:9A:34:4B:9E:97:CF:D9:21:F1:BD:60:07:4A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fff6a4a4-a439-384f-83c2-9b17a696ae1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.crl

            X509v3 Authority Key Identifier:
                keyid:43:2E:78:72:CE:A8:A6:2D:95:3B:7E:F9:AC:BF:89:F5:4C:D8:4D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fe1d4594-94df-4fba-9cf4-2280ebebbbbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.58.0/24
                  68.68.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:29:70:7e:e7:c8:68:f1:3d:55:73:43:42:69:38:d1:aa:
         f8:fa:dd:a4:44:88:d8:cd:47:09:a7:c0:49:d0:80:38:32:5f:
         79:a7:e2:79:0b:00:0e:2c:88:fa:2d:72:80:e3:9f:95:ba:0f:
         fb:d6:69:4a:14:68:2e:44:63:32:dc:58:ae:f4:4e:05:93:a9:
         90:0f:33:af:8a:5f:ee:28:55:14:ea:d1:35:54:7e:e9:69:60:
         ed:ef:b0:0b:97:a6:b1:41:50:de:df:95:c4:e7:e3:31:2c:63:
         d6:7e:6c:1e:21:de:73:d0:88:79:d2:70:32:35:4e:19:f1:d3:
         97:38:ba:fb:50:ac:23:37:77:14:8c:4b:bf:5a:97:bc:bc:8b:
         61:8a:7b:39:d4:9e:45:83:b1:f0:37:00:ee:13:f9:e1:2a:7e:
         c8:6a:1d:a0:a2:60:d5:35:7d:13:b0:a7:13:1e:14:1e:0b:9c:
         ce:18:c9:1c:23:ed:36:7f:59:24:5e:72:ff:c8:1f:91:c0:05:
         71:71:02:04:71:99:bd:66:ca:60:93:67:d3:32:e2:15:ea:cf:
         78:9f:ef:a2:ff:a1:9d:73:78:3c:63:03:6f:93:69:9d:c9:4a:
         70:02:a3:b2:c4:8a:fe:68:00:31:23:0c:32:04:5f:cd:94:a3:
         7d:11:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:25 2025 by rpki-client