Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2dbd9d71-71f3-3f89-9a79-f9ed9d279eef.roa
File:                     2dbd9d71-71f3-3f89-9a79-f9ed9d279eef.roa (raw, json)
Hash identifier:          gb84Ie3BBl81GMfC3pdKUzPVC+FXDDHar5vnkbKK87w=
Subject key identifier:   03:08:2E:82:94:AF:A6:C0:A8:26:24:48:92:90:08:03:DC:09:DB:CD
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848028388836BE237887DCCB480
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2dbd9d71-71f3-3f89-9a79-f9ed9d279eef.roa
Signing time:             Tue 26 Nov 2024 17:43:32 +0000
ROA not before:           Tue 26 Nov 2024 17:43:32 +0000
ROA not after:            Mon 24 Feb 2025 17:43:32 +0000
asID:                     16591
IP address blocks:        45.56.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:83:88:83:6b:e2:37:88:7d:cc:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Nov 26 17:43:32 2024 GMT
            Not After : Feb 24 17:43:32 2025 GMT
        Subject: CN=40d8e111-720d-4408-bf24-9e8a7edf4ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:1c:54:3c:63:2e:27:46:da:d7:76:93:28:
                    64:12:25:cc:d2:13:3e:68:e9:2e:d1:04:a2:a4:33:
                    50:f5:8d:63:a2:64:64:bc:08:93:68:4d:a9:3a:5e:
                    62:58:b4:5c:f9:47:28:33:33:91:96:6c:4d:94:73:
                    15:6c:31:23:3d:bc:22:53:38:62:61:cf:16:2e:61:
                    13:3c:c7:0b:94:df:9f:ed:f6:b6:29:6a:5a:9d:8d:
                    cb:97:74:b6:73:ec:d5:b2:98:65:69:54:70:22:29:
                    02:61:d9:8e:c9:80:6c:1a:93:e3:57:32:2c:ea:a5:
                    de:e1:fc:02:d7:2d:d5:81:ef:63:7f:e1:14:71:3a:
                    ab:2a:05:35:0e:17:49:56:b4:8e:d5:b4:30:bc:de:
                    e5:8a:fd:f4:13:16:8a:6d:84:30:15:a7:ad:74:f5:
                    6d:36:da:e9:74:44:04:4c:e3:b5:bc:7c:14:f1:ed:
                    7a:1b:90:cb:ba:50:df:8e:0e:5f:eb:86:fe:58:40:
                    74:24:2f:52:a7:56:de:20:c5:65:e2:34:1f:09:c9:
                    4f:e6:ef:30:ec:b8:be:62:3c:cc:f7:ab:c7:44:f9:
                    aa:f0:f6:56:6b:00:5a:40:7c:6d:34:2b:f6:0f:9c:
                    d9:a7:e7:18:15:d5:f9:e8:6f:3e:5c:30:46:5a:6c:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:08:2E:82:94:AF:A6:C0:A8:26:24:48:92:90:08:03:DC:09:DB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2dbd9d71-71f3-3f89-9a79-f9ed9d279eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:72:a8:48:63:cc:67:6f:f1:31:10:b9:5d:4d:9d:6a:86:e8:
         67:a7:8e:62:52:df:c9:0a:9d:8c:f4:8b:1c:10:10:01:d2:1f:
         7a:49:45:2f:d2:93:27:c5:6f:ea:b2:29:da:f3:27:45:c2:85:
         a8:b1:49:a9:e7:c2:af:d3:b7:6c:7c:92:b6:9e:34:4b:d8:00:
         83:a8:c4:4e:4f:7e:e4:4b:bb:9d:ce:3b:a1:d4:ab:83:9f:c2:
         69:61:e3:50:2b:41:81:60:68:a0:16:8d:c5:ba:ad:45:2e:b2:
         25:fe:9f:d0:95:e6:91:f3:6a:17:3d:99:7b:92:0b:2d:ac:8b:
         d2:7f:d2:ff:c7:1e:9c:25:9c:9f:7f:07:83:c2:8c:7c:f9:43:
         ce:0d:66:94:2f:2f:76:d3:df:bd:d1:00:2e:69:59:c9:80:71:
         f8:13:8b:ce:90:60:57:cf:cb:75:9a:89:32:ad:d9:67:be:37:
         76:8c:a8:b5:da:a1:ac:71:08:4d:ca:7f:d1:12:48:b2:f7:08:
         0f:ab:be:05:93:dc:cc:14:99:7e:a2:73:c2:c7:25:f8:18:b6:
         3c:4c:be:86:08:93:6b:56:b7:74:6a:1e:51:77:ef:e4:7a:a9:
         9b:07:b3:fe:2d:4d:33:0d:19:7d:b7:52:76:9c:da:33:c2:7b:
         8b:fb:f5:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCg4iDa+I3iH3MtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI0MTEyNjE3NDMzMloXDTI1MDIyNDE3NDMzMlowLzEtMCsGA1UEAxMk
NDBkOGUxMTEtNzIwZC00NDA4LWJmMjQtOWU4YTdlZGY0ZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEAcVDxjLidG2td2kyhkEiXM0hM+aOku0QSi
pDNQ9Y1jomRkvAiTaE2pOl5iWLRc+UcoMzORlmxNlHMVbDEjPbwiUzhiYc8WLmET
PMcLlN+f7fa2KWpanY3Ll3S2c+zVsphlaVRwIikCYdmOyYBsGpPjVzIs6qXe4fwC
1y3Vge9jf+EUcTqrKgU1DhdJVrSO1bQwvN7liv30ExaKbYQwFaetdPVtNtrpdEQE
TOO1vHwU8e16G5DLulDfjg5f64b+WEB0JC9Sp1beIMVl4jQfCclP5u8w7Li+YjzM
96vHRPmq8PZWawBaQHxtNCv2D5zZp+cYFdX56G8+XDBGWmzs3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMILoKUr6bAqCYkSJKQCAPcCdvNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmRiZDlkNzEtNzFmMy0z
Zjg5LTlhNzktZjllZDlkMjc5ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLTgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFyqEhjzGdv8TEQuV1NnWqG6GenjmJS38kKnYz0ixwQEAHSH3pJRS/S
kyfFb+qyKdrzJ0XChaixSannwq/Tt2x8kraeNEvYAIOoxE5PfuRLu53OO6HUq4Of
wmlh41ArQYFgaKAWjcW6rUUusiX+n9CV5pHzahc9mXuSCy2si9J/0v/HHpwlnJ9/
B4PCjHz5Q84NZpQvL3bT373RAC5pWcmAcfgTi86QYFfPy3WaiTKt2We+N3aMqLXa
oaxxCE3Kf9ESSLL3CA+rvgWT3MwUmX6ic8LHJfgYtjxMvoYIk2tWt3RqHlF37+R6
qZsHs/4tTTMNGX23Unac2jPCe4v79aU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:47 2025 by rpki-client