Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
File:                     fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa (raw, json)
Hash identifier:          CV3Wr2slDYpcJiBwcVvDFP8XhcBmz6y4wrUAS6eeB8M=
Subject key identifier:   BB:0F:34:A6:C5:38:40:61:E4:1E:77:E9:4A:D4:F0:37:7B:92:90:28
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F43285848DD3BAA67A212D6CB4569F140
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     53414
IP address blocks:        45.72.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:aa:67:a2:12:d6:cb:45:69:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=6cd8e890-06f7-4861-826b-8c1f20261d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:fd:c4:ee:1e:b9:66:fc:71:a5:07:1f:57:
                    40:70:69:1b:a8:76:73:83:95:48:8c:21:b0:f8:16:
                    b4:a8:f9:45:db:c8:fb:9c:fd:38:18:62:69:54:a2:
                    f7:f3:bc:cf:a2:33:b6:78:df:30:24:c5:84:c4:48:
                    d6:8c:39:9c:02:af:f2:5e:56:b0:01:44:2a:8d:67:
                    ce:13:df:86:75:f3:9b:eb:7f:da:4d:ce:77:7f:be:
                    30:7f:f4:1e:bc:29:3d:ee:5e:a9:93:40:5c:e8:1d:
                    f7:12:8e:3d:bd:5d:ae:c9:3b:df:b3:ec:47:6a:a8:
                    bf:dd:6c:c3:7e:99:6a:23:23:fd:8b:5a:35:f3:96:
                    e2:65:50:b8:87:9b:dc:0f:68:53:4f:75:df:a6:76:
                    c8:26:3f:17:71:63:ba:ae:8b:45:0f:1c:48:a2:4f:
                    92:7d:16:bc:14:4d:02:1a:69:06:50:aa:29:68:28:
                    45:4a:dd:d3:48:9b:2b:7d:5b:7a:d1:41:c3:ce:b7:
                    b1:c1:16:9b:ba:57:d2:dc:77:1b:a7:18:de:6d:5e:
                    62:ec:6f:43:5f:5d:e0:2f:16:98:16:bc:e7:da:8a:
                    54:fe:4b:bd:95:20:85:d2:fd:93:93:36:f9:d1:01:
                    bf:7e:0b:a5:c9:d5:b4:12:8d:53:7d:38:2d:ec:bd:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:34:A6:C5:38:40:61:E4:1E:77:E9:4A:D4:F0:37:7B:92:90:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.72.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:73:ae:a9:5f:af:45:db:9c:d7:2a:53:19:1f:1a:a6:ea:
         ea:ae:61:c8:7e:e1:fb:44:6e:8e:cb:d0:2c:9e:e9:f9:74:62:
         4b:52:f2:1c:15:48:27:32:97:27:30:d5:f4:7c:05:ea:12:b0:
         ce:d9:07:c3:2a:07:0a:47:1c:16:61:a4:c3:7e:a6:f9:2a:a6:
         b0:65:a5:df:a8:a5:f5:42:69:a9:d1:a1:d1:5e:da:32:10:6f:
         24:8d:1a:fc:38:f2:4a:cd:f1:12:00:b7:73:03:c5:04:1d:8f:
         a4:73:cb:12:3b:49:f5:ef:3d:6e:9f:24:b6:5b:69:95:6d:cd:
         98:ef:7f:7e:d6:d2:ad:78:cb:9a:c9:c5:cb:46:40:ff:ec:80:
         d7:6d:59:ad:bc:a6:c5:d1:28:48:29:4e:58:62:1c:8a:14:a3:
         19:ed:62:db:b9:9a:4e:11:47:b7:d3:56:f9:18:6b:e8:bc:93:
         63:1a:10:e0:e5:42:fc:5e:3e:ee:e4:a5:9c:71:31:14:bb:8d:
         ad:ba:4d:85:f4:59:45:42:34:8a:a1:08:76:13:40:f3:c6:be:
         86:83:a9:eb:cc:5e:95:06:6d:5d:74:d5:8b:d5:87:57:67:11:
         4d:04:05:ab:b7:27:9a:85:db:eb:34:3c:04:99:78:59:75:46:
         0a:16:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:11:21 2025 by rpki-client