Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa
File:                     3611f798-9a1f-36bf-90a3-e2b14476974e.roa (raw, json)
Hash identifier:          8YGZXT9q9OD+nxjMGaeVm+iHeNzt+rv5ulInh/0ECCQ=
Subject key identifier:   B6:37:09:B7:87:E3:5E:9B:DA:2B:D0:BF:CF:43:F9:C0:9C:A1:5D:25
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858490E16B924E9EFB695C4578800
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     399820
IP address blocks:        45.61.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:b9:24:e9:ef:b6:95:c4:57:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=9fe3a2dc-62c7-42ac-92b5-5a4b3e0832c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:dc:44:5c:31:3a:95:02:58:3a:6f:49:b9:
                    0b:b7:1d:0d:d4:72:8d:04:ca:6f:ac:8c:b7:31:7a:
                    24:8c:5a:ab:89:3b:04:16:44:f1:22:96:b7:9c:22:
                    9e:58:9e:1f:97:46:91:5e:c5:ef:c8:3c:7b:99:39:
                    cf:33:ec:ba:04:0b:49:50:67:46:9f:b1:e1:20:55:
                    02:91:ac:15:9a:f2:97:50:c5:f6:9c:e3:19:d3:7e:
                    de:a4:a5:c4:bc:9b:f2:bb:77:6b:04:43:7a:e3:60:
                    16:cb:9b:95:21:a5:fb:61:84:c0:66:c7:a8:73:27:
                    a4:c5:06:33:c3:23:aa:54:61:82:f0:50:ef:26:36:
                    e0:f4:9f:52:5a:32:00:d9:3a:e7:13:04:aa:05:dc:
                    c8:3b:40:cd:43:7e:94:0d:f3:d9:eb:98:db:57:3b:
                    f1:62:36:09:03:b5:6b:9e:3e:5b:cf:fb:6e:56:07:
                    13:ce:56:6a:ed:ae:94:8d:44:06:e2:6f:04:fc:81:
                    8f:86:01:0d:13:8f:3d:79:12:c3:d5:a3:78:f1:de:
                    d2:5b:56:5f:a7:56:dc:d7:5b:dc:7a:6e:64:bb:42:
                    d6:81:32:aa:31:45:e4:0c:7c:f3:ad:c9:99:83:8f:
                    72:05:04:9b:00:65:e4:34:20:77:d0:4b:00:29:b3:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:37:09:B7:87:E3:5E:9B:DA:2B:D0:BF:CF:43:F9:C0:9C:A1:5D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:07:28:e1:0c:7f:19:b3:95:e4:52:18:1f:7a:1b:df:4c:04:
         4b:14:ef:5f:b9:fb:36:c8:45:25:f6:9c:b6:60:29:cb:91:1a:
         6b:67:6c:c1:84:50:e1:6e:a9:68:98:e3:ee:a1:94:8d:b0:fb:
         d5:19:49:58:73:30:3a:ce:40:96:f4:69:c4:30:10:bb:0f:a1:
         98:99:f0:76:22:75:82:60:e1:16:cd:3b:9f:e0:8e:b3:f2:8d:
         05:14:14:50:ee:45:e8:cc:60:27:c9:24:f5:aa:3b:7f:86:8a:
         64:a0:2a:2a:5d:07:71:50:4d:21:d0:d2:4b:1d:cd:74:8e:a4:
         47:1a:c9:49:65:55:e0:24:43:77:04:1d:64:1d:56:d6:3f:b8:
         94:a4:86:aa:8a:64:fb:cd:5e:ea:2d:45:d9:7a:ba:9f:5c:2a:
         98:6a:a3:b8:43:4a:03:33:a6:fe:ee:cc:b7:a4:16:31:cd:ec:
         12:aa:b3:a8:36:a9:66:57:1a:4c:58:72:b2:bf:d6:30:ab:ad:
         f0:e2:90:5a:b0:2a:cb:04:4d:15:a9:64:f2:d7:10:13:f4:52:
         da:55:36:a4:3f:3f:f7:2a:4c:3b:10:e5:b2:57:35:f8:e5:9c:
         b7:55:77:53:e9:02:1a:50:a9:68:fa:94:28:51:bd:68:1e:fb:
         8e:5d:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:00 2025 by rpki-client