Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa
File:                     6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa (raw, json)
Hash identifier:          shnYEIp9RQQtwJDRVnDqdbZZp87f+oJaxg5cMEqPG3w=
Subject key identifier:   CF:C0:02:66:9D:DC:92:2C:81:DD:15:25:E5:B3:24:E4:27:55:11:D4
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285848F9269AE4116892C5C3C41B80
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     3356
IP address blocks:        45.43.4.0/24 maxlen: 24
                          45.43.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9a:e4:11:68:92:c5:c3:c4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=97698723-e993-4e30-a332-b6b03466bf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:88:76:39:42:b3:8d:6a:33:a8:f6:f8:ff:66:
                    e0:14:6a:49:02:3d:df:6a:25:81:17:dc:99:00:7e:
                    0d:6f:f3:98:80:4a:fd:a0:aa:02:bf:56:09:f0:30:
                    7d:6d:e1:00:38:9c:ab:53:96:aa:9e:ca:01:ec:94:
                    16:29:2a:e7:4d:a1:90:96:b6:db:4b:82:74:49:43:
                    94:96:8b:3b:8a:72:e8:12:36:35:be:f9:1f:bd:a4:
                    a6:fb:5a:12:f0:16:31:42:cc:b2:fe:dc:72:91:f6:
                    b8:69:e1:79:cf:08:fc:8e:58:46:76:c4:4b:dc:2e:
                    31:b2:4e:45:7e:52:ee:c8:60:b2:df:f1:bf:c5:d4:
                    13:c9:a4:ee:09:d5:fc:f0:23:45:b0:50:36:53:fa:
                    9d:3d:b1:b6:b7:2c:86:f1:7a:1c:12:95:ae:9c:6f:
                    37:03:af:54:82:d9:26:1f:01:13:e8:50:e3:6d:35:
                    16:c9:db:2c:e0:60:01:15:fd:7e:be:21:ee:3b:43:
                    ad:12:84:c5:63:75:e7:36:7d:47:c0:97:cb:44:e6:
                    49:14:aa:4f:3f:9d:5e:f9:9a:da:20:4a:bc:e3:69:
                    2c:fc:d0:4a:00:d9:46:b5:9b:c5:f8:f8:bb:71:34:
                    1c:3c:33:9a:92:da:e8:83:b0:23:03:e6:3b:aa:10:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:02:66:9D:DC:92:2C:81:DD:15:25:E5:B3:24:E4:27:55:11:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/6f7856c2-df7a-3840-b8a2-53d9ed510ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.4.0/24
                  45.43.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:2f:82:8c:3f:27:e6:55:31:65:08:b5:e6:cd:f1:a9:ee:
         01:1f:60:f1:b8:1d:f9:2d:42:07:f2:e8:4f:88:65:08:62:1d:
         ce:49:e9:d6:0a:ad:23:a2:3a:32:fc:49:07:7c:8a:9c:dd:94:
         3f:00:c4:b9:c8:5d:0d:05:5f:86:92:ae:80:d4:5c:78:2e:b3:
         9d:54:65:1c:29:b1:38:57:24:67:2c:c3:4f:04:28:d0:f1:13:
         07:3e:50:ea:b3:c6:23:06:53:2f:d9:12:fa:34:fd:29:2c:4f:
         1a:5b:a8:fe:a8:2d:fd:63:6b:fc:2d:ea:b0:cb:df:07:d5:9f:
         7f:3b:ef:58:be:3c:a0:da:48:d2:e1:14:67:cc:5c:15:d2:f4:
         83:e3:ce:d0:fa:29:9b:cf:db:8c:b2:de:30:4f:7b:f6:ee:f7:
         43:61:19:fc:50:d3:4d:6b:70:83:d3:71:ed:48:22:84:75:9a:
         ba:95:28:0b:2f:4e:11:93:98:6c:62:2f:24:cf:eb:87:8e:e3:
         02:c3:5d:62:ca:b5:e8:a7:7c:1a:60:6d:cb:0c:5f:72:c2:23:
         b6:10:63:61:35:51:4a:54:2c:ee:de:ea:02:40:c0:f9:fd:d6:
         36:3c:26:a0:61:9c:dd:2e:25:d7:97:5c:2e:d9:fb:9e:65:c2:
         a6:ea:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:02 2025 by rpki-client