Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa
File:                     ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa (raw, json)
Hash identifier:          0UoC6vYYRakSSt/4o61b9QI2a0JZ+e9lig28PnU22Jk=
Subject key identifier:   A0:4A:AD:C5:22:20:82:A8:DE:5D:53:DF:CD:38:20:8E:71:72:81:59
Certificate issuer:       /CN=dbd6bd60-20b4-40eb-8504-81745a54a188
Certificate serial:       010D0C9F432858487A20823FC22EE30D2CEA6280
Authority key identifier: FD:EC:4C:94:07:B1:6F:EB:08:EE:BE:DF:60:11:7C:6C:80:39:A0:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     20454
IP address blocks:        45.62.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:82:3f:c2:2e:e3:0d:2c:ea:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd6bd60-20b4-40eb-8504-81745a54a188
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=9f162721-d8fb-4499-8b35-86e53f9dfa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:b3:43:0b:1d:1d:e1:86:a7:6e:fa:00:bf:
                    99:a1:3d:86:6f:94:b6:25:98:5c:f5:0f:b5:d7:15:
                    3e:f3:26:2d:2c:e1:f3:ca:c4:8a:61:96:95:9d:a7:
                    75:ba:5c:ef:ac:28:3e:22:85:4a:60:ea:d1:fb:2b:
                    b7:8f:a3:46:70:5c:1e:28:ba:37:3f:bd:d1:e9:f6:
                    d8:d2:4f:4c:78:00:ae:11:0f:22:2b:a4:f9:9f:dc:
                    ed:f7:b3:a1:db:13:34:e0:e4:e8:34:91:f1:c1:4d:
                    21:09:69:21:69:39:87:50:d7:72:ef:4f:d3:92:86:
                    41:49:ca:f2:8b:61:59:c9:8f:df:80:6c:ca:71:fd:
                    d6:e4:87:1b:7c:84:36:fc:24:b8:dc:2a:1a:fc:5b:
                    25:d6:12:f7:d4:c6:0e:0e:5c:30:a0:0f:2d:da:be:
                    5c:77:9e:88:8a:d0:f6:be:d6:7d:c6:f0:9a:04:f1:
                    17:e9:55:1e:73:2c:02:49:9b:64:91:67:75:55:cc:
                    30:fb:e8:2d:18:8e:9d:9b:99:de:1b:d7:9a:2e:34:
                    68:59:d6:e6:b8:0e:1a:a9:b7:d2:9e:3c:28:0b:7b:
                    1e:a4:4a:05:f4:a4:e8:e5:93:2e:8f:31:cc:ca:29:
                    5e:85:76:b8:ee:14:f3:56:df:67:db:e1:93:66:a1:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4A:AD:C5:22:20:82:A8:DE:5D:53:DF:CD:38:20:8E:71:72:81:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/ad9bf542-20c9-3fc5-906d-19ac1d52975b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188/dbd6bd60-20b4-40eb-8504-81745a54a188.crl

            X509v3 Authority Key Identifier:
                keyid:FD:EC:4C:94:07:B1:6F:EB:08:EE:BE:DF:60:11:7C:6C:80:39:A0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbd6bd60-20b4-40eb-8504-81745a54a188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:30:23:e0:f6:31:69:eb:b2:0a:3f:41:6b:46:e0:c7:03:69:
         c3:73:94:7a:99:da:69:8c:5b:0d:c3:26:c9:ca:32:ab:bd:4c:
         82:11:ff:e8:c9:86:ad:ae:09:e6:01:ac:29:bf:72:8f:68:fb:
         10:21:b8:58:dd:5c:b7:5e:ca:b4:6d:7c:b8:db:2d:b6:21:d2:
         6e:10:7d:cf:dd:7a:34:9e:00:a7:c1:eb:c4:d1:84:b6:61:c9:
         b3:99:da:e5:31:53:a0:41:a6:b2:57:c8:d2:28:4b:b5:a9:d2:
         64:65:42:16:bf:92:bb:7e:87:f6:7b:19:3e:ca:be:ae:35:66:
         6e:b6:b6:c9:2b:a2:62:fa:3f:2d:2e:b4:ff:53:3d:9c:3e:d8:
         89:a4:1b:e0:45:48:e9:33:c1:93:1b:6b:cc:2c:d3:ce:66:af:
         94:8e:3b:6a:04:81:e3:f8:0a:3c:b5:c7:a0:96:de:b7:90:ab:
         87:64:d4:3a:59:b3:88:3e:0f:19:41:61:69:bf:ec:19:1f:57:
         29:7f:93:9a:21:af:25:ed:f5:93:27:be:bd:30:db:47:51:4f:
         61:34:98:86:10:b7:bb:3f:b6:d9:b8:2b:94:33:0c:9a:4f:c7:
         73:3d:29:a7:46:4c:59:73:83:26:c3:54:2e:a0:86:85:25:b1:
         23:cb:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:44 2025 by rpki-client