Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/61668e14-43e7-3e6e-b3d0-ee641dfc5053.roa
File:                     61668e14-43e7-3e6e-b3d0-ee641dfc5053.roa (raw, json)
Hash identifier:          VunyBDaPIUo6ScLY2Ab+vPIkeaFM7HVK8/CP3wmpGfs=
Subject key identifier:   04:A8:35:93:96:0A:9F:98:42:95:7F:45:23:B9:AC:9B:93:55:02:AF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B75085EB6BE787DCE9A8C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/61668e14-43e7-3e6e-b3d0-ee641dfc5053.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        207.236.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:50:85:eb:6b:e7:87:dc:e9:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=4bd438e5-7647-405e-9d0b-74dd6f4b7636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:5f:f8:c8:a7:0a:53:e7:6c:33:2c:fd:c2:
                    f8:6a:8f:50:49:98:64:bf:dd:89:67:bb:15:39:28:
                    d9:10:cb:03:e1:17:b2:6f:3a:6a:4f:78:c6:fb:8c:
                    cf:54:38:bb:b5:88:b2:40:5f:52:8a:f9:c9:4f:d9:
                    ed:de:1e:82:c3:bd:c7:0a:c6:a5:30:38:fb:b2:3d:
                    dd:e3:ca:2a:3c:6e:09:b7:65:ab:2b:6b:4e:fd:d4:
                    cd:ab:ff:ee:f4:cd:d4:4e:03:75:3a:9c:1f:1d:b2:
                    10:cb:db:dd:39:82:1e:2c:ca:4f:2f:57:ec:a3:db:
                    7e:ae:ab:da:47:9b:b9:0b:48:4a:13:b5:59:d1:64:
                    4e:fb:54:70:13:d2:a7:79:eb:cc:4f:64:3b:d2:67:
                    00:5a:b5:a4:d3:cc:0b:6e:c5:ae:4a:be:d2:df:16:
                    3b:05:1b:81:b0:a0:ac:5d:1e:4c:5c:5a:4d:bd:45:
                    0c:a5:51:9e:ae:b9:af:9d:24:bf:ad:0c:4e:a7:32:
                    e3:dc:9e:f1:f1:02:7a:36:eb:e8:ab:79:9f:37:d7:
                    55:55:ad:0b:e2:54:85:8b:ff:e7:b6:eb:f6:1d:00:
                    82:9e:ca:3f:9c:23:4d:ea:fb:8b:3b:fb:27:15:a5:
                    ac:a3:ac:bc:32:0e:f2:ee:41:22:6a:db:6f:86:d8:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A8:35:93:96:0A:9F:98:42:95:7F:45:23:B9:AC:9B:93:55:02:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/61668e14-43e7-3e6e-b3d0-ee641dfc5053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:18:35:4e:40:31:9f:16:e3:a3:25:fb:7f:ae:cf:70:55:
         05:75:82:c4:33:99:43:0f:b9:eb:ea:3a:c6:12:92:cf:1e:b1:
         1a:d5:35:96:1a:60:be:b2:29:c0:ac:80:90:b3:c6:38:d6:63:
         21:56:bd:09:81:09:00:5a:28:35:43:af:69:59:59:59:82:36:
         7c:4e:33:53:e1:e6:07:c2:ff:75:b0:49:23:c6:e1:86:eb:93:
         ab:d7:4d:87:11:bd:00:a7:42:f7:b7:23:ce:3c:3b:6b:3e:94:
         87:7e:78:e8:8f:4d:62:ca:93:f0:c0:35:c9:d5:ee:1a:92:33:
         de:0b:f1:5f:0b:a7:74:f6:d2:8e:88:06:b9:34:59:ed:35:61:
         90:3e:3b:c3:3a:a6:19:d2:f1:55:de:72:19:f3:8f:f8:e4:ec:
         d5:1d:34:47:44:35:d7:e3:38:2c:e1:16:e1:d5:6c:49:b6:d7:
         1c:5b:07:c0:21:f0:e8:bb:47:2c:22:9b:b7:61:50:5b:98:1e:
         b4:96:b8:b6:cc:c4:8f:74:a8:21:1a:bc:0a:24:88:f6:6e:2f:
         f2:49:06:e7:46:3d:19:46:f0:79:c8:4f:cd:17:67:61:9e:06:
         a0:84:2a:57:b7:ae:16:54:e7:a9:8e:f7:6f:ac:b1:3f:62:b7:
         62:e3:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:25 2025 by rpki-client