Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/deecae30-e658-36cf-8d5c-3184cd5a490e.roa
File:                     deecae30-e658-36cf-8d5c-3184cd5a490e.roa (raw, json)
Hash identifier:          GANLIphvJXjGz1tcMuFdUtnILjT3eX3VbAcAT0rZpr4=
Subject key identifier:   56:2C:22:EF:3A:01:38:9E:D1:8B:55:DC:F1:01:17:92:32:E1:F8:11
Certificate issuer:       /CN=de0cc6bd-e920-421b-822f-9be354b0d759
Certificate serial:       010D0C9F43285848F926A7CD399711570DDC53B8
Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/deecae30-e658-36cf-8d5c-3184cd5a490e.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     400618
IP address blocks:        45.45.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a7:cd:39:97:11:57:0d:dc:53:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=a8b1538c-757f-48a4-a208-89e95e5473a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:ae:09:74:29:bf:74:2b:8f:7a:d9:31:61:
                    e7:0e:ff:89:bb:39:c1:d0:f6:50:75:2f:30:52:bb:
                    29:55:cc:4a:43:e2:2f:39:5d:52:fb:8f:50:d7:20:
                    58:a5:8e:08:06:b5:6e:b2:a5:1e:d2:7c:d3:c2:c9:
                    56:00:d7:c8:ba:65:bc:9e:b8:8f:14:4a:94:fe:c1:
                    fd:c4:09:e3:00:f6:e4:15:a2:53:db:1f:44:63:db:
                    77:7a:d3:c5:1d:9f:af:eb:b2:ba:38:39:67:70:92:
                    fd:00:74:82:2e:8f:b3:3e:a7:d3:35:05:0f:e7:13:
                    58:f4:16:2d:df:ed:e3:1c:d4:b4:be:b6:7c:81:01:
                    61:80:8b:97:49:e4:de:39:b8:e9:6b:08:0e:bd:ec:
                    29:7b:0c:44:89:8b:47:6f:51:57:59:32:e1:06:ba:
                    63:ee:ff:76:6f:bd:5e:0d:26:87:f0:a3:f4:73:04:
                    95:98:45:c4:c4:12:6b:92:62:84:2a:18:03:e2:47:
                    c1:bd:c3:75:df:de:db:1c:c0:cb:2c:0a:4e:fb:8a:
                    2a:68:99:4a:bb:aa:18:d6:63:14:c0:ac:d5:5d:3b:
                    40:86:4c:fd:4e:40:7b:ad:06:09:d1:54:38:8a:b5:
                    69:b3:90:b1:d5:24:dc:1d:be:f3:aa:21:4f:26:2d:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2C:22:EF:3A:01:38:9E:D1:8B:55:DC:F1:01:17:92:32:E1:F8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/deecae30-e658-36cf-8d5c-3184cd5a490e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl

            X509v3 Authority Key Identifier:
                keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f3:9a:a7:e5:9b:3b:83:4b:5e:77:84:d9:de:0f:83:61:43:
         81:7b:80:ab:a2:e8:47:4a:29:05:81:24:43:3d:c7:8a:39:1c:
         ee:0f:c8:b6:31:c7:8e:4c:94:54:a3:78:c5:2a:87:7d:1e:f4:
         2a:21:6b:43:af:8c:57:35:89:3c:7b:c4:d8:ec:38:f1:d6:46:
         7c:33:a3:67:a9:ac:6b:d3:a4:c3:d7:02:66:e8:fc:ae:06:30:
         a6:f1:82:04:c1:64:71:a9:ed:a0:13:1c:5b:b8:bd:88:3f:67:
         93:f3:12:3b:b5:15:d0:ca:cc:8b:ad:30:47:db:ff:5b:2e:a1:
         0e:b7:ca:15:87:61:49:cb:18:16:58:6c:cb:38:ff:7e:c3:c7:
         14:e0:73:e9:ef:57:fc:4e:f4:a0:f4:33:ea:0b:d1:4c:e2:1f:
         bc:2d:b0:03:ff:6e:3e:b7:99:8e:a1:bf:92:3d:d0:b5:2d:22:
         b3:c9:17:fe:1d:ea:eb:f6:2a:ce:de:41:ef:4c:a0:0d:9b:b8:
         82:6a:8c:be:64:7c:c2:9f:ed:38:c8:fc:53:e1:80:f2:16:5d:
         27:9e:c4:61:6e:90:a2:b7:9f:7d:83:e6:52:9d:7b:87:35:da:
         ed:73:86:1e:d5:49:20:db:ff:59:b7:4f:52:38:23:91:28:21:
         93:7e:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:18 2025 by rpki-client