Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa
File:                     bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa (raw, json)
Hash identifier:          Ple0MoNrfIOGLA/iRqICefh8cGib5FAqxPYLL80tU88=
Subject key identifier:   53:BC:8F:1B:41:93:70:ED:49:94:38:2D:C8:7E:6B:4B:13:9C:97:4E
Certificate issuer:       /CN=30d537f2-f871-4f81-b20b-ae04610c521d
Certificate serial:       010D0C9F432858488815ED27867A596C7E19DA40
Authority key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        45.41.240.0/22 maxlen: 22
                          216.146.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:ed:27:86:7a:59:6c:7e:19:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d537f2-f871-4f81-b20b-ae04610c521d
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=4bdd4f85-cf23-4439-8680-f29763466599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:3a:9a:38:bf:19:3c:48:90:03:97:09:d6:
                    e5:d4:39:88:f2:59:54:ce:a8:3d:52:7d:1b:69:64:
                    b3:cc:68:bc:91:2a:59:57:d4:f3:21:64:d3:79:a5:
                    2f:83:a8:d7:12:85:5c:7b:29:7f:bb:41:0e:89:78:
                    57:ab:fa:71:f1:78:2a:bf:ea:41:c7:28:c3:c0:c5:
                    82:87:ab:cd:db:d3:99:01:55:bd:37:18:46:e3:6d:
                    ab:d9:12:f7:76:9a:ec:41:dc:4e:4b:88:6c:60:55:
                    bc:52:2d:12:66:7f:c9:04:80:b8:84:8a:a2:8a:49:
                    e9:32:81:e3:bf:57:49:f1:bd:db:08:ef:62:27:e9:
                    7e:35:20:b0:e7:09:d5:1b:3a:64:8c:d9:ba:46:4d:
                    5d:ad:14:78:e1:a6:ad:b3:04:f1:ce:e0:b1:af:cd:
                    88:a0:56:4f:de:f9:ed:79:35:df:49:60:20:51:ee:
                    5b:9f:b2:1f:67:a0:48:4b:c5:84:53:fd:9d:31:ac:
                    0b:cd:b5:94:c4:17:49:c7:74:17:16:68:c1:61:86:
                    aa:96:e1:07:77:29:d5:b0:29:9e:02:d6:55:9d:02:
                    de:cf:96:67:03:7a:b2:e7:5a:55:da:d3:f0:87:6b:
                    9d:f1:5a:8d:ec:15:7e:14:03:86:14:2a:ab:64:97:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:8F:1B:41:93:70:ED:49:94:38:2D:C8:7E:6B:4B:13:9C:97:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.240.0/22
                  216.146.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:16:63:a3:07:7a:13:94:45:50:5f:1b:76:ab:62:bf:b7:dc:
         12:90:ac:48:4f:23:99:2b:4f:36:ab:8d:99:f9:86:04:b6:ee:
         d0:59:27:c9:84:cd:d1:22:d7:86:6f:42:4a:0c:95:5d:55:6c:
         74:96:ff:c3:da:79:e5:65:59:79:51:12:d5:02:24:93:4f:e1:
         7a:d5:40:20:f8:b9:dd:12:40:d2:24:76:02:d8:a9:f6:a9:55:
         61:9e:a1:dd:9f:e3:7b:ee:76:dd:06:db:1e:3d:d8:f0:ec:f2:
         b9:31:67:1c:94:2c:26:94:22:f4:7b:6a:5c:bc:e6:96:1a:7c:
         a0:c7:4d:ff:39:c9:4d:19:37:30:43:02:9f:6d:23:19:dc:9c:
         67:52:21:58:ff:2b:cb:89:ab:07:ba:27:64:bc:00:4a:31:cc:
         61:be:4a:73:a5:d1:9e:d0:fd:0f:4f:63:6a:4a:6f:03:6d:fe:
         de:15:87:36:29:7a:8b:da:c3:59:cf:2e:56:c5:d2:f1:8b:cd:
         ee:28:cf:d1:24:88:80:c2:c5:83:01:78:d3:7a:50:5d:1f:4f:
         1a:fe:03:60:c2:2f:ea:93:be:27:4d:50:94:bf:00:da:37:a2:
         ad:e7:79:70:b7:f2:eb:a4:86:04:44:1b:6d:1a:5a:7c:02:5f:
         8b:12:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:44 2025 by rpki-client