Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/02ecf1c3-bc60-3200-8cdb-300c80711735.roa
File:                     02ecf1c3-bc60-3200-8cdb-300c80711735.roa (raw, json)
Hash identifier:          aUu2igIrrwMiHhFBhE4wzdst0yvFXZh+eUbTx86jcnk=
Subject key identifier:   8E:E4:C1:AF:1F:18:53:EE:26:C6:CD:02:2F:BF:51:15:4E:ED:4A:85
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584953C4107488BD066C788ECC40
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/02ecf1c3-bc60-3200-8cdb-300c80711735.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     398447
IP address blocks:        45.45.210.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:10:74:88:bd:06:6c:78:8e:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=084e00b8-788f-4495-8de9-29aecd7e845f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:57:fb:b8:80:b8:16:50:b6:21:57:ef:b5:
                    86:c2:89:88:29:3a:37:ec:e6:22:d5:f7:df:a2:65:
                    ff:77:49:66:fe:fb:b7:7f:b8:ec:cb:31:d5:36:a0:
                    77:6f:d3:23:82:ad:1e:37:0b:50:cc:1b:cb:d2:72:
                    9d:1a:55:e5:7e:9f:16:eb:8c:db:59:9a:0b:6d:91:
                    f5:72:8b:cd:59:55:ef:16:ba:6d:3a:2f:c2:e8:87:
                    ab:55:a2:d6:18:cf:cf:7b:fa:3e:f5:60:83:48:5f:
                    e6:52:58:83:ee:5c:92:77:8a:30:fc:37:a1:de:6a:
                    c8:c9:8d:29:52:c6:be:d8:1e:b1:e9:f3:1b:ad:fe:
                    3d:30:47:c5:76:a6:6a:ef:b3:c3:90:92:db:49:68:
                    34:fc:84:1c:52:43:bc:cf:17:4b:93:34:d3:2f:c9:
                    ab:8c:41:64:f5:4a:ca:22:f6:17:49:98:f7:2a:0f:
                    e3:82:9a:4a:af:4d:8d:56:3d:0b:7b:18:82:6c:92:
                    76:92:05:03:b3:b4:6a:e0:71:01:79:65:4a:7c:ab:
                    3a:09:e4:b9:11:29:f5:ff:c6:31:da:81:ac:91:20:
                    2f:98:00:11:6f:1b:e1:4b:5a:a7:3f:ff:6b:26:33:
                    42:e2:ae:ed:cc:d7:12:8c:b2:31:ce:53:c3:87:4b:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:C1:AF:1F:18:53:EE:26:C6:CD:02:2F:BF:51:15:4E:ED:4A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/02ecf1c3-bc60-3200-8cdb-300c80711735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:00:e5:12:ce:b6:71:cc:af:8a:60:3d:40:83:41:3a:81:57:
         05:ae:01:9f:40:1b:bd:af:54:c4:d1:47:f5:67:c5:48:8a:34:
         37:a7:86:67:f3:0e:12:25:f1:69:5a:6e:1f:d8:93:bd:6e:38:
         54:06:07:f4:f6:aa:d7:9b:cc:c0:0b:f6:15:c7:a6:6d:9b:fa:
         77:37:6f:08:a2:d5:2a:c6:b0:0b:fa:42:5d:b4:30:28:5f:75:
         18:a8:01:52:dd:3f:92:ed:6c:4d:5b:0d:20:29:7a:e0:1f:5e:
         33:58:1c:d7:27:b6:c4:0b:a7:30:6c:dd:e6:49:0e:d0:83:04:
         42:15:43:54:40:28:6b:81:6f:9f:41:c0:b1:f8:c6:b6:97:c6:
         df:9d:0a:16:9d:9e:4a:f1:c9:92:3b:f0:78:02:79:f3:e8:31:
         28:25:bc:65:50:66:f0:29:61:34:57:eb:57:a7:33:2c:39:f8:
         f2:21:17:d2:e0:54:96:44:1c:7b:3a:a4:35:34:07:8f:65:40:
         a6:04:c4:6f:90:90:47:f2:01:e6:b7:fc:b2:e5:a0:d6:0f:a4:
         9e:93:3a:dc:0d:09:af:b9:31:c7:12:f9:03:11:f4:f9:73:e9:
         94:ae:ba:fa:94:ca:f1:5f:7c:e4:f0:67:a5:6c:30:53:1b:6c:
         6a:d2:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:48 2025 by rpki-client