Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa
File:                     29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa (raw, json)
Hash identifier:          UkYMNQW7VYvkKOAljmUdgSY4FBTDZOTaqvE0P+y4tGE=
Subject key identifier:   24:27:73:0C:27:FD:3A:07:E2:45:74:EF:B9:92:09:08:ED:DD:F4:52
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F432858486C2B1E78AFF7532271CC5600
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     46906
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:1e:78:af:f7:53:22:71:cc:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=ceea5211-c99e-41d3-97bf-6f41c992eb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:dc:92:11:88:e5:a1:46:91:12:da:83:8f:
                    62:f1:80:82:1f:4f:53:3c:0d:8a:ef:8d:70:de:2e:
                    4e:cc:71:03:4d:c4:5f:4c:20:2e:d9:07:af:69:b2:
                    6b:3f:5d:b7:de:af:4a:a5:20:80:f9:c7:06:5d:01:
                    58:da:a2:21:91:40:64:ec:ef:4f:03:56:45:60:16:
                    45:1b:98:de:ce:5e:a7:8b:d9:c6:b5:da:4b:c8:b2:
                    7f:91:8c:fc:22:3c:fd:04:76:d5:1d:55:a2:b8:57:
                    d9:a0:f7:cb:93:01:6a:0b:2b:6f:66:32:89:38:79:
                    94:e4:95:3d:74:d3:a5:c9:d4:8e:51:ba:ee:0e:25:
                    0d:08:d3:0d:e9:06:c0:fb:c0:5b:9e:f4:b5:e7:cb:
                    5c:ea:0e:b1:cf:1b:b7:e8:94:e0:e3:8b:fd:2a:84:
                    6b:10:9a:f5:65:22:ae:40:25:6d:8a:be:10:4a:38:
                    29:e3:41:4c:10:8e:d7:dc:c2:93:e5:ca:6d:ea:62:
                    50:71:33:47:17:e2:8d:fb:33:ab:70:aa:ac:2b:0c:
                    14:7a:9e:d3:70:1a:55:db:3c:5b:43:e9:28:75:de:
                    22:28:87:d8:40:e0:ff:a5:8c:5d:11:3c:a8:1c:fd:
                    38:5d:3f:48:24:bf:ec:29:f7:d0:6b:d7:31:b4:03:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:73:0C:27:FD:3A:07:E2:45:74:EF:B9:92:09:08:ED:DD:F4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/29b35c82-6a1b-3d11-b7f4-5f90d6b3d4b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:38:da:3f:52:ca:94:a5:7f:af:06:67:84:40:38:4d:28:
         a8:61:6e:b5:90:47:55:8a:a9:fb:c7:cb:0d:42:dd:f0:e6:2a:
         28:ed:94:33:3e:5d:0b:b6:6b:a5:ab:e9:56:46:62:f4:54:24:
         75:6b:ac:f8:2a:c8:82:b4:c4:2a:0b:18:ba:90:37:42:99:54:
         9e:b2:81:d4:73:75:69:7a:8a:3d:2a:3c:70:f4:e8:46:47:21:
         86:37:2b:92:90:ee:47:9c:cc:d9:f9:ee:22:35:4f:f6:a1:59:
         97:f0:25:47:9c:2d:52:2e:53:d3:ea:d6:91:70:e4:af:88:6e:
         9b:1c:ec:7d:56:b5:2c:7a:1d:bf:bd:94:0a:62:8b:9a:e6:9c:
         57:36:67:38:39:f2:bd:18:69:72:d5:2b:72:52:ff:c2:86:27:
         b1:f0:d2:05:3f:54:39:ba:6c:74:12:44:51:df:2e:af:f5:74:
         b8:d4:b5:7d:84:e4:0f:0d:36:e0:f8:ce:67:68:ec:f5:fa:65:
         22:b4:a6:be:1c:2c:50:dd:bd:73:75:a6:3c:f4:25:e0:b6:9b:
         f7:2a:d9:97:e9:b9:bf:81:c0:93:88:41:c1:bb:a7:79:0f:2a:
         43:08:10:b5:66:6d:e9:70:d0:14:bb:e7:3f:99:0c:c4:f0:7f:
         dd:d6:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:58:14 2025 by rpki-client