Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa
File:                     76976d75-ee42-30cf-9881-ba84b1f75bee.roa (raw, json)
Hash identifier:          kthkrhwaXwde9HgXvhjALcH8+t+3Nk0AkAAREvRC6Io=
Subject key identifier:   49:4F:F3:19:B5:CE:35:27:6E:F5:3E:7F:72:2A:5B:0F:92:9E:BE:A4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584944693F4DD728E31F3F5B4300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        45.74.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:3f:4d:d7:28:e3:1f:3f:5b:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=1a067a4f-0783-4d59-a5db-abf9ab9064bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:01:a9:be:63:c5:4d:ed:81:97:a4:76:65:
                    26:e3:87:1d:df:a0:a6:5b:d8:88:7b:dd:7e:86:ab:
                    1c:c1:3b:9e:8a:ea:bb:5b:1b:ef:53:11:3e:8a:5d:
                    1a:a4:f5:31:e2:07:5a:64:c3:1a:6a:65:fc:42:ec:
                    29:79:8a:06:cd:29:6a:ef:ba:2a:a9:cc:bd:c0:41:
                    c7:f9:df:ef:44:c8:cb:33:10:b6:4b:1c:d6:5c:77:
                    47:d6:88:30:d3:c1:88:26:ec:ff:cd:32:c8:b0:f3:
                    2e:21:4e:6b:38:b5:47:e4:8c:fb:5d:ae:73:1d:bb:
                    8f:45:ab:87:12:0b:9d:e9:bf:f6:ce:76:eb:3a:ee:
                    8b:b6:5e:ae:66:77:30:6a:2b:54:5e:d9:7f:65:7a:
                    fa:92:b0:cd:13:67:de:e7:62:5a:82:d2:0a:2f:64:
                    8b:14:f9:62:90:ed:6d:6e:cf:52:38:15:f5:84:8b:
                    e5:d2:6f:80:e7:83:f4:96:ab:a2:09:58:4b:9a:23:
                    a6:b0:33:b1:2e:35:74:06:27:e4:44:88:c1:77:ee:
                    a9:a1:d6:27:ca:9b:2b:55:3e:45:a0:c6:09:bd:6a:
                    ff:ef:e0:de:be:5c:c5:a7:c0:2b:9e:1d:dd:68:c2:
                    a1:f5:c5:70:80:06:fa:10:e6:33:0c:16:19:a0:1a:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4F:F3:19:B5:CE:35:27:6E:F5:3E:7F:72:2A:5B:0F:92:9E:BE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76976d75-ee42-30cf-9881-ba84b1f75bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:c2:32:db:56:d2:45:0f:59:47:19:f5:a6:1c:02:49:d6:
         1e:a2:54:7f:1e:23:55:c0:ae:f7:8c:94:64:fb:3d:d7:58:6c:
         28:bb:f3:3c:7c:f1:ee:f5:13:b1:55:09:15:69:38:0b:f4:28:
         f1:60:7d:10:b3:e2:68:b5:ae:52:0e:01:be:59:6c:5f:c6:90:
         26:bf:8e:68:8c:08:38:b1:26:61:6a:62:35:6c:18:eb:e6:10:
         cc:fc:d4:12:ad:63:08:59:8a:7f:f7:3d:89:fc:6c:8f:2f:31:
         c0:5f:58:3b:c3:bd:0c:3c:29:ee:74:35:4c:5e:bc:87:80:fd:
         60:16:4b:1c:93:8e:2c:f5:ba:ba:c9:81:66:c9:2b:1a:2e:54:
         58:06:04:4d:95:e3:ba:ad:a1:ea:be:72:a5:2f:9a:90:3f:4a:
         c6:34:64:51:14:c2:ca:ec:1e:e6:34:ca:d7:b4:1e:1f:86:e1:
         81:6f:3c:c6:8b:f2:93:57:2e:2d:5f:84:cc:a4:a8:10:89:52:
         f9:be:d4:69:e1:f6:f0:1d:71:14:7e:4e:6e:76:d5:53:04:73:
         53:b8:7b:10:0a:dd:b0:12:b3:31:ea:e9:f4:2e:ca:08:b8:d6:
         53:4e:dc:aa:8b:2a:7c:10:1d:e1:70:b0:c3:98:08:b9:80:fd:
         92:4f:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:02 2025 by rpki-client