Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
File:                     089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa (raw, json)
Hash identifier:          I2IVup8JCvXMGkqnLbqNxUqn+mip1m73oRtZelmo+C4=
Subject key identifier:   14:A2:14:B5:DD:55:95:E2:BE:32:3C:37:0B:02:C1:2F:5E:35:3C:2A
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285849446937FDFA5D68F3DA02F800
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     46261
IP address blocks:        45.59.22.0/24 maxlen: 24
                          45.59.29.0/24 maxlen: 24
                          172.102.207.0/24 maxlen: 24
                          172.102.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:37:fd:fa:5d:68:f3:da:02:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=8571135b-c1fb-4455-9651-5788f96ccd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:41:2d:46:43:15:c0:8c:7d:ce:9a:1d:c3:
                    7a:cb:f5:a4:a9:8e:b6:e4:4d:10:c0:91:ff:45:c7:
                    d7:b5:0f:5c:66:5f:15:4e:2d:97:bc:bd:1b:a5:d4:
                    6e:3f:27:e9:91:9c:28:fc:7b:4e:fa:2a:90:82:1b:
                    9f:ac:61:4b:79:0c:6c:d5:25:8e:f8:97:dc:11:21:
                    eb:25:7f:9d:e2:c9:20:2b:39:61:b7:ce:e9:36:c0:
                    32:b4:2d:38:98:ed:9a:7a:b2:8d:71:c2:b9:18:44:
                    df:b5:08:68:45:5e:7e:18:d6:18:46:0f:e4:b9:0a:
                    b2:7f:f7:29:22:02:b6:fc:57:b5:3e:43:d1:05:f5:
                    c6:80:c5:a6:10:ac:5e:22:80:e5:30:68:ee:c1:86:
                    29:c8:7f:7c:2c:73:e8:fc:70:01:8c:d7:65:34:3e:
                    1d:4c:cd:b1:4c:ba:30:b3:a1:73:03:9a:4b:80:9c:
                    b2:44:66:a8:1e:bd:ab:4b:73:7d:7b:2b:8f:a5:6c:
                    6b:ce:a5:f1:80:1b:7e:fb:c2:aa:1a:e1:8c:21:93:
                    e1:e4:45:42:fe:d0:1b:e9:87:2d:78:2c:d9:ac:a7:
                    59:32:1b:66:86:68:50:17:27:87:37:07:68:b1:b5:
                    5b:7f:0f:19:12:c6:64:01:73:61:01:bd:20:7d:7c:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A2:14:B5:DD:55:95:E2:BE:32:3C:37:0B:02:C1:2F:5E:35:3C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.22.0/24
                  45.59.29.0/24
                  172.102.207.0/24
                  172.102.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:08:0c:2b:5b:c4:ca:67:85:91:3e:05:9a:9c:6d:11:89:4f:
         f6:2a:48:33:c1:be:de:9e:54:77:8f:b5:25:11:ec:85:63:47:
         80:cc:23:ba:77:de:b7:d8:10:00:90:e2:e1:7c:b2:cd:db:74:
         3f:c4:ee:6a:74:06:76:d0:fe:e6:7a:06:bf:78:9c:97:03:f7:
         df:8b:96:d7:a2:34:50:4e:72:15:fd:b2:96:ba:92:a7:fa:5b:
         84:cc:85:10:8c:fd:9d:68:c5:37:74:2a:92:6c:59:ea:c1:04:
         58:8b:21:41:7f:52:0b:63:c9:e8:19:fe:97:56:0e:20:0f:4a:
         77:e6:5e:52:54:c8:40:47:4c:af:64:e0:a0:18:3c:53:d3:df:
         b6:95:64:14:75:d7:f9:cd:e3:db:8d:c7:7f:fa:4d:fa:5d:15:
         81:c2:cd:1c:29:28:dc:37:7e:87:c3:55:03:ac:28:ca:44:54:
         a6:7e:b5:ac:17:e4:71:31:f1:93:c2:04:fe:c9:e4:49:69:eb:
         31:b5:c1:e2:0f:25:0e:27:9a:32:db:ee:04:1e:97:bb:b5:92:
         79:2e:34:c5:66:b7:2f:7f:7f:cb:03:3d:fa:b1:2d:28:3e:8a:
         f3:0d:96:b2:3f:65:14:a1:d2:17:a5:84:b7:cd:0e:c4:25:0d:
         96:6f:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:06 2025 by rpki-client