Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa
File:                     6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa (raw, json)
Hash identifier:          6x4wslBXiSkh1WT+5Y+4Pp4ZXdfiO0Z9Tj5YwzG4U+4=
Subject key identifier:   36:C6:D8:27:8E:07:64:86:BE:CC:3E:9D:C7:09:C7:96:91:69:B8:E2
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285848A6CB6675E837C9179DF63240
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     3800
IP address blocks:        45.59.64.0/21 maxlen: 24
                          199.180.248.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:66:75:e8:37:c9:17:9d:f6:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=3030efcd-5724-4a38-8938-1935f6207126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:72:ec:d4:b8:34:f9:b4:84:ba:38:af:72:
                    d9:97:a3:d9:c2:ca:a0:bf:31:b9:87:19:f0:b3:b8:
                    4e:f0:58:02:30:31:02:59:42:f3:03:05:8c:a2:ad:
                    b2:d4:30:f1:33:97:38:5d:08:78:7c:fe:af:c4:49:
                    80:de:5b:07:87:47:9c:c0:62:94:51:3d:b0:7b:20:
                    ce:c3:a1:5f:f4:4d:f0:4d:cd:6f:e6:05:bd:41:3a:
                    ad:b6:80:ea:0c:6a:09:af:d3:39:44:05:31:ad:07:
                    1b:da:15:be:1a:94:75:6b:82:ad:19:53:b3:be:c6:
                    4c:c4:60:18:57:fe:e9:f4:23:c8:da:49:87:ac:13:
                    03:bb:96:a0:ce:fa:00:e2:1b:18:4c:34:43:0f:22:
                    89:0b:fe:10:33:31:fa:11:91:5b:72:3a:1a:2c:ef:
                    6a:25:a9:48:cc:56:8e:11:7f:ad:3a:ca:68:ec:dd:
                    8f:51:99:ff:db:e8:c2:62:ec:6a:41:f2:21:33:42:
                    3b:50:6c:62:c1:54:80:1c:d0:73:f7:2a:5d:2f:f5:
                    f4:17:a5:87:e6:22:02:7a:74:76:d8:00:45:b2:df:
                    b5:4c:23:8e:b0:29:9e:cc:db:97:0e:20:ba:0e:43:
                    e6:af:df:7c:a5:e6:5f:e5:96:1b:7e:5b:a2:13:46:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:D8:27:8E:07:64:86:BE:CC:3E:9D:C7:09:C7:96:91:69:B8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/6920015b-bb01-392a-9c4a-9c1d6c1833ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.64.0/21
                  199.180.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:63:2a:04:a4:9e:5e:53:a1:62:2d:c3:ca:da:e7:59:dd:
         6e:fc:43:40:0d:c7:e3:5c:41:9e:79:f8:eb:56:5a:4c:b9:58:
         22:72:cd:f1:a9:b0:cf:6e:dc:95:1c:f0:1d:be:73:c3:91:65:
         d9:f0:b4:05:55:7e:6d:77:74:14:08:a6:c1:8b:90:a4:55:41:
         5c:67:a3:51:d1:e5:05:64:50:ca:8e:06:40:47:89:8f:a1:f5:
         a3:a8:30:a5:74:1d:a3:25:5d:10:a1:ae:5a:85:e5:61:12:37:
         b4:26:09:9d:76:31:99:bf:75:1d:90:cd:3f:93:cf:c6:a5:2e:
         ca:9f:0e:4f:dd:8b:ac:6a:44:c6:66:cd:e5:7e:14:9b:40:e7:
         88:ac:d4:c1:99:c3:8e:c0:bb:70:32:82:57:0c:3d:c8:56:fd:
         8b:94:18:a8:0c:f4:7f:7b:8e:c8:c6:57:b1:4b:55:ca:50:f0:
         4b:f6:99:7c:fd:f7:25:b9:27:cb:0e:31:43:b4:f3:ea:7e:be:
         44:78:48:53:b9:bf:76:74:ef:ef:55:80:8a:f7:d2:70:26:ff:
         e6:c5:50:c2:2d:15:23:01:0e:de:0b:c1:fa:c9:5e:bd:40:01:
         5e:3f:e0:85:9c:ed:e6:8b:3f:8e:9e:dc:fe:f2:a7:e3:f8:fd:
         a2:fe:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:39:59 2025 by rpki-client