Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/327eb619-2e36-3ec0-ae28-411e45003b3c.roa
File:                     327eb619-2e36-3ec0-ae28-411e45003b3c.roa (raw, json)
Hash identifier:          ayWBr4Y84jo833i8aM4WT/w6d33AL+w1dfMlKXy3Y7U=
Subject key identifier:   6D:0C:F2:CB:80:9D:25:C2:28:01:BA:37:D2:22:8E:AC:D1:73:A0:8F
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858494733EC68B55EF62B8E627E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/327eb619-2e36-3ec0-ae28-411e45003b3c.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     9009
IP address blocks:        45.74.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ec:68:b5:5e:f6:2b:8e:62:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=2b5013f2-9fc7-43ee-9768-3ff6ae89be83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:07:55:34:8f:b1:a3:be:67:96:09:e7:1f:
                    6f:32:8f:90:12:41:af:39:f9:18:7e:88:c7:07:6c:
                    87:31:3d:48:e1:3a:55:33:a3:01:9c:4c:b0:bf:d2:
                    ef:05:c4:1d:de:71:c1:18:68:79:f1:46:af:95:c2:
                    37:f1:16:ee:8f:b0:7c:d4:dd:5c:2b:81:d2:ab:19:
                    80:0a:d6:ba:87:2e:d2:5d:f4:cf:70:a8:08:a3:b7:
                    7e:3c:4f:eb:dc:4b:34:02:af:31:31:08:4c:0c:4b:
                    e3:6a:24:31:69:96:e4:52:7d:5d:d9:c9:c0:0e:09:
                    e8:ff:63:8e:b2:69:ce:0b:f2:cb:1e:a1:a3:75:8e:
                    6e:52:f6:06:20:1a:b4:b9:fe:dd:ab:cd:02:73:08:
                    8b:ec:c3:65:d9:3e:83:93:e5:f5:b8:71:33:cf:c3:
                    8f:31:7c:c0:82:2a:ec:a0:e4:9e:63:22:1b:f4:d8:
                    94:e5:4a:17:c0:db:b3:7f:0f:79:49:cb:41:05:23:
                    7d:f5:6f:a4:7d:ee:eb:18:5c:bf:f1:05:eb:60:fe:
                    55:1f:79:b4:f4:0c:c0:b4:8a:5f:46:9d:a9:63:d1:
                    50:51:71:c3:10:1e:de:dd:13:c7:d1:31:c5:5c:35:
                    8a:7b:88:9e:8c:b9:fa:84:da:9c:87:05:f7:a4:0f:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0C:F2:CB:80:9D:25:C2:28:01:BA:37:D2:22:8E:AC:D1:73:A0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/327eb619-2e36-3ec0-ae28-411e45003b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:95:c9:76:14:dc:7e:5e:97:c9:72:a7:17:5e:bd:a6:63:f9:
         5a:fe:6f:e1:6a:be:5f:5a:06:4f:13:bb:6b:95:12:56:66:5e:
         4b:fe:a5:78:62:0b:0b:29:73:5e:02:2e:03:01:1b:f5:03:45:
         bc:b8:98:39:f9:cb:2a:17:e7:7b:da:b3:15:fa:67:b8:4d:08:
         b4:43:83:9c:77:40:9f:22:d5:5e:73:68:c7:fe:a1:a3:90:91:
         00:e3:5b:f9:79:1a:f5:62:08:46:8e:49:03:63:be:8e:64:47:
         d0:c3:07:a6:f7:0d:d9:40:4e:62:fe:a1:71:12:22:ee:0d:bc:
         86:ab:57:6c:e3:43:d2:45:11:fa:8a:bf:1d:cc:e1:ac:46:92:
         55:99:5e:54:46:8f:cc:49:03:a5:5b:f6:55:5a:81:7b:09:3a:
         87:60:47:4d:5b:88:8e:8d:e7:2d:d2:f1:ad:16:db:7a:a2:93:
         aa:fc:85:4c:c6:ab:a0:63:1e:da:c4:0f:88:d0:93:12:ae:e5:
         34:93:ca:03:3c:d8:64:49:97:ad:51:df:5f:27:84:8f:22:e5:
         74:b5:0f:44:cc:10:01:2c:b2:1a:02:eb:9b:d3:91:2a:bb:20:
         cb:0a:9c:aa:49:58:54:e5:10:ce:13:c9:8a:19:93:60:41:cd:
         f3:7c:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:34 2025 by rpki-client