Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa
File:                     e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa (raw, json)
Hash identifier:          HXbkOPQ/014ZZPB6AzxOMpBxf6JL/yizhhVpOlqWiRo=
Subject key identifier:   D9:EA:E8:A0:35:E6:6F:EF:1C:70:ED:BA:0B:B7:ED:25:96:55:61:F9
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285848F22C6215D6F98B3D804475C0
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        205.201.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:62:15:d6:f9:8b:3d:80:44:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=86d84cc9-f3d2-4314-953b-154e44046911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:92:86:4a:70:49:09:de:84:81:ff:26:81:
                    e4:a8:7f:3c:61:94:1f:de:29:57:75:33:2b:34:7e:
                    94:3b:31:f7:4d:93:19:26:0d:26:af:0b:0c:bf:ae:
                    80:12:11:f9:4a:e8:ab:a0:c5:6d:04:59:bd:6c:c2:
                    82:21:a2:df:43:7a:d6:21:92:9b:06:33:df:98:cb:
                    a3:40:bd:bf:52:e5:69:dc:50:f8:6e:6f:db:b0:10:
                    21:cd:95:80:1b:c8:a7:92:aa:c4:f5:6e:0a:17:33:
                    ed:46:6e:e4:14:0f:1e:f5:03:d6:6b:40:87:22:b9:
                    b8:05:9e:ed:ce:37:8e:3d:e0:64:1b:22:0f:02:2e:
                    2f:24:46:b7:aa:cc:06:6a:18:0e:52:dd:da:f5:50:
                    f8:c0:0d:bb:ec:0b:6b:45:bf:4b:13:76:de:9e:f3:
                    ec:5a:e0:37:7d:3e:99:cc:5b:39:ac:f2:87:d3:f0:
                    16:d8:53:fc:ab:fa:ed:cc:98:a9:78:3b:ea:01:0b:
                    64:91:47:98:d0:aa:13:26:e4:13:07:d0:97:65:d4:
                    11:ba:f2:73:ff:47:7f:31:5f:01:b1:42:ff:12:0e:
                    46:a3:09:a2:bd:63:37:e1:3f:57:aa:a4:35:f5:ec:
                    fe:5d:f5:2c:0b:a4:7d:b8:38:e5:e0:01:28:e3:38:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EA:E8:A0:35:E6:6F:EF:1C:70:ED:BA:0B:B7:ED:25:96:55:61:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e08544b9-0f1a-3ba9-90f2-f0bf38ca082f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:48:02:56:31:95:ef:c6:cb:af:c4:63:22:1b:d3:ff:3d:
         2a:c4:7e:d7:46:4b:fe:79:22:f4:65:33:8f:53:90:6f:8d:b4:
         b7:3d:8a:ab:63:49:ea:b8:fb:86:65:f0:5a:17:46:79:2c:c1:
         0a:24:4f:3b:50:a7:27:0f:e7:44:47:65:3a:99:fb:97:df:e5:
         89:44:9b:6e:cb:fe:7d:b5:78:a7:cc:5b:90:32:0d:6a:24:14:
         cb:96:b9:b6:a5:52:78:74:5e:a0:80:35:37:b9:9a:0b:86:32:
         0a:17:62:05:ce:94:01:88:00:98:bc:3e:2e:6d:9e:dd:98:cd:
         77:1a:b4:08:ce:e4:ea:c3:aa:cc:14:b5:57:df:61:12:8a:5c:
         43:8c:82:26:e5:1c:a1:0e:6b:c3:c8:02:45:d0:c4:a2:67:12:
         1d:da:ab:65:3d:af:d9:87:95:2f:a2:31:23:fa:b2:a3:14:a7:
         f2:5f:f5:46:06:ab:c6:80:93:08:2d:34:0d:34:d7:52:05:4c:
         00:6b:0b:bb:6e:5c:2c:42:30:0b:4a:3f:6e:4f:ae:2a:9a:f3:
         84:e0:3e:9c:0a:da:2d:9c:ae:bc:60:e2:57:8c:ef:61:3f:bb:
         8a:62:a3:35:b7:d1:f1:55:42:e9:29:fe:d2:83:53:41:d2:44:
         46:e5:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:20 2025 by rpki-client