Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa440a7d-552a-3740-944d-799ea3c6bca7.roa
File:                     fa440a7d-552a-3740-944d-799ea3c6bca7.roa (raw, json)
Hash identifier:          C3oTnFAi88Q5brNuNF8LR1MPSIDB37+hqsAri8/jWWQ=
Subject key identifier:   AC:3B:CE:14:00:64:A2:1D:DA:3C:36:BD:2F:D1:86:4B:7E:88:01:C5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858491C0C21060522F7AEAE1D5280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa440a7d-552a-3740-944d-799ea3c6bca7.roa
Signing time:             Fri 07 Mar 2025 14:00:52 +0000
ROA not before:           Fri 07 Mar 2025 14:00:52 +0000
ROA not after:            Thu 05 Jun 2025 13:00:52 +0000
asID:                     30036
IP address blocks:        45.59.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:0c:21:06:05:22:f7:ae:ae:1d:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:52 2025 GMT
            Not After : Jun  5 13:00:52 2025 GMT
        Subject: CN=6f2b1c98-a588-4017-98ca-025f7af51cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:01:a2:7b:76:c9:82:b8:66:e9:8b:39:ec:
                    37:3a:83:9f:69:bb:66:f3:93:31:56:67:1d:87:4e:
                    46:f4:7e:54:7d:a5:6a:30:b7:72:de:d7:3d:19:10:
                    4f:56:5b:66:06:86:0f:e5:be:47:57:e3:85:dc:32:
                    e0:1a:16:49:43:8a:60:eb:e1:17:87:26:7c:50:61:
                    58:c6:0a:77:11:19:ea:aa:b8:f0:dc:35:03:9b:39:
                    96:e5:30:59:7f:14:6c:3b:37:fe:1e:cf:e2:cb:ab:
                    1d:41:ca:47:9d:c2:af:98:19:49:bf:df:61:80:89:
                    58:1a:9b:40:35:ca:0c:0a:f9:11:a4:ac:4e:c2:28:
                    52:a6:a4:28:e4:e0:99:90:1b:7b:1c:04:16:36:c0:
                    eb:e9:b2:88:a1:e4:42:0c:75:1e:8e:65:51:dc:c8:
                    be:d4:fd:f1:c6:a5:08:d6:ab:27:fd:78:13:c5:50:
                    97:29:90:d2:72:29:d1:9c:b2:67:a5:93:0b:2f:68:
                    30:08:89:90:66:65:c1:fe:79:09:97:16:0a:ac:ed:
                    1b:8a:53:3d:c9:fa:84:71:ef:55:eb:c7:d7:95:b4:
                    dc:01:b7:ba:d9:93:36:94:aa:3f:03:c1:9c:84:a0:
                    9f:99:44:8f:d0:4a:cb:d4:51:8f:09:07:79:ae:cc:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:CE:14:00:64:A2:1D:DA:3C:36:BD:2F:D1:86:4B:7E:88:01:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa440a7d-552a-3740-944d-799ea3c6bca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:f6:96:bc:ad:3f:73:a9:c7:af:69:3f:b3:bb:88:d9:3c:
         0e:2b:d6:54:62:93:e3:2b:f4:c5:8b:4e:01:23:c8:f5:96:b6:
         81:01:78:e7:de:83:a0:e6:7a:92:f9:20:1b:e5:1d:b8:40:88:
         15:4d:46:5b:fd:5b:1e:d3:5a:fe:34:53:fb:6f:07:50:05:aa:
         16:71:8d:db:11:29:26:62:e2:59:c0:fc:0c:7f:2b:e7:cc:d8:
         a9:49:c2:01:66:bf:e9:07:e9:08:c1:fc:c3:d7:3f:df:5a:ae:
         07:70:d8:b7:c4:ed:b4:65:40:60:90:d7:7e:d1:1b:26:fc:d4:
         8f:e0:94:1e:02:b2:d9:73:4e:07:81:3b:8f:3d:4f:8d:47:25:
         3d:f1:20:6e:0b:97:37:53:7e:6b:05:dc:c0:7b:2e:02:f2:51:
         62:dc:96:07:58:7b:c3:ea:32:f7:50:d2:63:01:e0:92:1d:63:
         f5:39:60:1c:df:1a:e9:64:b2:a0:d4:12:88:20:05:99:c2:8d:
         96:be:e7:4d:b8:d4:be:60:ad:2a:2e:b9:a3:a9:65:b7:56:fa:
         51:a3:92:0e:64:b4:6b:e1:8d:39:fb:a9:28:cb:b9:e6:67:ee:
         3a:d0:3a:7d:b8:64:fc:87:4f:e8:42:10:1a:c3:e3:eb:84:49:
         40:e5:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:10 2025 by rpki-client