Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa
File:                     c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa (raw, json)
Hash identifier:          ByV8ScpaV6xdRSSIm8wJuzb3wJHImWk/kI93qxpbA74=
Subject key identifier:   4C:87:C2:81:68:68:F0:01:80:CE:9A:6B:1C:AA:79:DB:09:F1:BC:44
Certificate issuer:       /CN=ea05ab9a-d4fc-4641-a614-4f664f460fa5
Certificate serial:       010D0C9F4328584930DE6F369DDB7D5D6D8C0320
Authority key identifier: CE:14:08:DA:A9:44:7B:7A:F9:F3:F4:DE:6E:11:8E:E3:D1:12:82:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     7311
IP address blocks:        45.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:6f:36:9d:db:7d:5d:6d:8c:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea05ab9a-d4fc-4641-a614-4f664f460fa5
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=7d2d668b-c2e5-4bae-8bb9-074756f2b5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:be:b6:c6:23:65:0c:f8:f9:fb:7a:f7:00:
                    e8:c3:c8:38:8a:90:1d:01:d2:b9:33:91:3b:32:c9:
                    db:22:90:87:1d:c0:55:11:4b:0d:b4:29:ce:cb:9c:
                    8d:48:8b:56:fa:82:f8:a0:8b:da:42:b7:42:e3:8c:
                    54:23:b6:53:a5:b8:e1:65:ea:32:95:dd:46:de:92:
                    57:38:00:f9:f6:de:7e:fa:33:77:cf:e9:c5:b3:a3:
                    1c:89:0c:3f:a9:41:a7:9f:90:e3:f2:c4:dd:a2:e9:
                    87:c3:ee:aa:7b:ec:30:69:ea:50:27:4a:d4:5a:9e:
                    77:99:69:55:bf:d8:52:70:81:3f:c2:c5:5e:da:58:
                    8b:16:15:30:46:64:1d:2a:34:60:5a:85:bd:9b:5c:
                    5b:29:ed:4e:4b:fb:2c:d1:55:31:b7:56:4c:8c:6b:
                    85:6d:58:06:5d:5f:dc:32:c3:c3:fd:9f:3c:af:16:
                    1a:b6:52:29:96:28:cc:b1:8b:78:50:d2:63:47:7a:
                    f5:d5:f0:91:6c:49:59:52:c9:3d:a5:f5:ac:20:ac:
                    bc:e4:e3:13:57:2d:b4:78:b9:5b:3d:72:50:3c:59:
                    e2:7a:06:67:55:c3:13:3a:f3:a5:85:0f:c4:69:30:
                    6e:dc:93:f3:2f:e4:23:16:70:f3:3b:74:ad:d0:e0:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:C2:81:68:68:F0:01:80:CE:9A:6B:1C:AA:79:DB:09:F1:BC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/c5e7d673-2631-32f8-b9e6-39bb07a293a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5/ea05ab9a-d4fc-4641-a614-4f664f460fa5.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:08:DA:A9:44:7B:7A:F9:F3:F4:DE:6E:11:8E:E3:D1:12:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea05ab9a-d4fc-4641-a614-4f664f460fa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:8b:34:c9:37:2d:74:2d:b3:3b:9a:af:73:42:b2:b9:f6:ac:
         a5:69:82:46:db:eb:c8:bd:96:f0:47:16:28:95:22:ab:54:40:
         ca:bc:9d:c4:b9:9d:5e:fa:ab:70:d4:e4:2f:8b:98:c8:ed:f2:
         5f:13:d7:e6:4d:26:44:9d:36:b7:4d:ee:7e:af:11:86:57:71:
         26:3c:4f:11:ef:f0:47:14:d6:5e:56:eb:12:7a:ec:89:61:58:
         53:cf:6d:2f:cb:3e:2f:12:5c:21:e7:48:d1:a2:73:0a:40:e1:
         90:48:15:b7:32:a5:35:64:88:41:d6:ea:bf:17:a4:b3:b4:da:
         02:a1:f8:b1:23:6d:39:99:e3:a2:5d:37:ae:54:9a:2c:34:e2:
         1e:cf:f5:d0:a7:17:17:57:65:4f:0d:23:f8:95:37:be:61:29:
         ec:7d:05:e2:a2:50:0b:76:84:95:88:92:ff:c0:16:5a:e4:d0:
         1b:5b:27:0f:76:a8:93:5d:07:f9:f7:4e:86:ce:97:5c:3d:e0:
         a7:e4:e9:7a:29:4f:5f:9c:ae:20:a0:93:e8:79:ae:1c:54:08:
         1a:88:0b:e1:ad:e3:89:bf:5f:15:0b:e4:2d:a9:40:39:7f:23:
         d0:a7:87:10:05:0a:83:3b:37:65:f5:d3:a6:68:f1:86:31:a2:
         f8:d2:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----