Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
File:                     3e223fd6-e6be-376b-be27-58334385989f.roa (raw, json)
Hash identifier:          5zv7/5NW15W2LVAWwadcWBGpJTPHHROFN04ai9NjSJ8=
Subject key identifier:   20:1A:DA:74:4A:4A:06:F6:B9:9A:48:A6:A1:83:76:C7:F8:A7:62:95
Certificate issuer:       /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Certificate serial:       010D0C9F43285849393E7440F6ABCE8BB7ABF720
Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        45.45.214.0/24 maxlen: 24
                          136.175.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:74:40:f6:ab:ce:8b:b7:ab:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=746d832d-c95e-4e08-86b3-137d04ecad15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:01:96:d3:48:50:ed:51:ca:c9:6d:a5:c4:
                    3f:c0:b3:d8:22:c1:06:45:dc:f8:e8:e5:7a:a1:82:
                    ef:00:55:ec:85:96:56:e6:48:b7:36:cf:3a:ba:3c:
                    8c:2c:2c:dc:64:82:ea:b9:b8:73:9a:a6:f0:e8:ed:
                    d3:15:30:c8:1d:41:ab:db:92:9c:39:12:ba:db:16:
                    51:fc:9e:2b:16:eb:b3:c3:5e:c5:36:12:72:80:ec:
                    7f:9d:83:b3:84:bd:11:56:bd:5b:74:a0:c9:b5:96:
                    63:16:73:df:cd:d4:ee:61:fb:73:88:ed:84:9f:2b:
                    56:0d:b7:28:f5:6b:21:06:0c:69:85:c3:14:76:d9:
                    c9:71:65:b8:a6:db:ee:4b:1e:f4:40:94:12:10:20:
                    f8:82:23:77:8b:f9:c4:26:0e:b4:83:33:5c:40:74:
                    10:ee:64:ae:b4:cd:3d:04:ec:97:2b:ba:8e:3d:10:
                    c7:d9:1d:75:28:6b:d4:9a:94:41:f9:1f:17:e7:6f:
                    8b:52:79:a1:d7:8e:a0:cc:b5:92:25:17:d4:86:f2:
                    3a:ab:8f:de:d5:fe:39:04:a0:a7:b6:76:c9:f8:f2:
                    a4:c7:f2:0f:6b:e3:6c:72:29:7b:dd:15:f0:36:a2:
                    4f:41:a0:bb:8f:1c:5e:77:2b:5a:8e:55:42:73:7e:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1A:DA:74:4A:4A:06:F6:B9:9A:48:A6:A1:83:76:C7:F8:A7:62:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/3e223fd6-e6be-376b-be27-58334385989f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.214.0/24
                  136.175.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:63:b5:a7:39:19:4c:97:b8:18:05:a4:af:fd:be:80:ac:
         ce:2a:4c:7a:04:93:d4:38:ce:aa:5e:b2:38:e0:64:27:ac:5c:
         74:4d:9b:03:bc:99:d2:9e:67:07:d6:03:56:7f:3c:c4:63:02:
         e9:b1:3d:85:e2:a7:4a:78:9a:d8:e7:b3:cc:33:e0:fe:2c:61:
         e2:0e:b9:db:3f:46:74:fb:c0:8d:21:dc:7a:19:00:67:9f:0b:
         19:c9:8f:13:e2:f8:2c:81:40:24:e1:e1:0c:64:73:38:c7:6f:
         a7:1b:1e:ae:1b:a8:f1:2a:c9:58:ba:3f:47:27:3a:ea:ba:b5:
         45:53:fc:2c:0d:02:c4:09:17:cc:95:50:df:38:cb:64:ee:55:
         1f:7d:9e:5f:d4:6f:04:cc:cd:9b:bc:91:f2:f7:40:59:cd:ca:
         11:76:66:9e:bb:e8:ce:41:b4:9a:11:69:4e:b4:0a:a7:96:8b:
         85:d3:80:3c:46:1f:7a:3b:92:b3:b4:a4:4d:aa:3e:44:4d:23:
         72:79:22:ca:64:2d:f8:82:c1:35:3f:f4:b2:16:77:15:5e:b3:
         60:f4:03:52:81:1e:28:06:6c:30:2a:9e:d2:3a:44:ac:8b:ab:
         06:29:b9:5c:1c:c7:62:63:6b:da:1e:24:78:a3:2e:13:bc:97:
         80:f5:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:18:07 2025 by rpki-client