Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa
File:                     c17bd2db-0678-321a-bb95-79f534638930.roa (raw, json)
Hash identifier:          xnmWiLCTUpHYm+6KGz1bo/0Lr/0+BKQ3GYM1KB2fNeM=
Subject key identifier:   FE:90:25:FD:8B:96:6F:2D:4E:2D:6E:6B:87:E0:DE:5A:B0:0E:CF:08
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858492CAE992D5A18F65C9B84EB00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        45.74.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:99:2d:5a:18:f6:5c:9b:84:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=19fc7adf-7576-465e-9b2b-9d6cd1bb602f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:35:e6:88:11:fa:5e:f6:1f:62:46:26:17:
                    15:ad:aa:a3:d4:3a:a6:d8:38:ec:81:5a:cb:59:f6:
                    23:f8:97:41:7d:21:ff:7c:2a:21:c0:96:e3:8f:28:
                    e4:cf:d5:bd:f5:da:eb:00:8e:72:71:eb:92:99:f0:
                    ef:41:79:8c:18:05:c7:d8:ab:66:a2:e8:4d:67:f0:
                    02:cf:72:b4:91:b8:50:52:4d:e0:f8:56:19:92:14:
                    b3:e8:d6:2c:cc:ef:2f:14:16:2b:bb:df:c5:b8:ba:
                    3f:71:1a:b6:db:1d:aa:b1:d8:39:22:93:28:aa:18:
                    60:6b:4b:0c:cc:ee:d5:17:9a:d8:f1:79:eb:0c:ef:
                    2f:40:a9:4b:be:8e:29:03:0f:d0:ad:15:ca:cc:33:
                    f3:f3:56:01:3c:d8:85:2d:1d:e7:47:d5:ea:59:64:
                    90:77:91:9c:f1:79:f6:2d:66:cf:25:e1:45:2b:07:
                    e8:33:78:7e:0a:18:04:98:fc:16:10:e4:ef:da:89:
                    22:d0:34:f5:f5:79:54:34:6d:74:87:30:06:2d:7c:
                    e8:fd:4f:5a:fe:7a:aa:b2:47:38:ff:2d:52:e6:40:
                    0b:83:33:41:32:bd:2a:b0:c4:8a:ce:e3:e3:ca:02:
                    99:e6:67:19:4e:73:ca:82:4d:f3:bb:11:af:76:10:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:25:FD:8B:96:6F:2D:4E:2D:6E:6B:87:E0:DE:5A:B0:0E:CF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:08:ef:33:11:20:2a:c9:a7:23:ac:88:6c:17:66:67:df:
         fa:54:95:8e:f6:93:a9:08:0b:3e:f8:05:e8:df:4b:c2:4c:7e:
         c2:ab:dd:3d:4c:62:34:26:18:10:2d:6f:64:a8:39:27:95:11:
         60:ac:2c:84:86:94:9b:48:90:b7:b3:9d:94:c9:0a:8a:ed:9c:
         55:fb:f7:58:c0:e0:02:af:ea:6b:d0:8d:bd:de:99:81:92:c6:
         40:94:f3:dd:f1:41:f7:98:f1:8e:35:94:1e:ec:1c:58:21:54:
         0a:f2:8e:bc:12:ae:5b:90:91:9a:0f:b9:a6:9a:c2:c5:32:44:
         ee:7d:df:71:c5:da:fa:91:2c:ea:72:c8:97:10:a9:1d:e3:9d:
         a8:7d:2b:f5:1e:65:31:3d:0a:24:c2:16:0c:08:58:26:66:2a:
         05:00:1c:86:d8:92:12:4b:fe:34:f5:52:ff:b4:e0:23:22:5c:
         ee:60:20:d3:6c:5c:25:a8:a7:61:68:78:ae:0d:9a:1c:60:20:
         91:99:95:c1:98:35:11:0e:c1:6c:3f:29:62:e6:74:f8:19:2c:
         6c:e3:9a:97:9e:fc:21:38:68:12:d7:db:c0:da:3d:ab:b2:2f:
         d4:6b:1e:29:23:ca:28:91:0d:af:e8:f4:7f:ae:45:cf:71:8e:
         f6:2b:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:51 2025 by rpki-client