Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28255574-3062-374c-b764-2c975ecde283.roa
File:                     28255574-3062-374c-b764-2c975ecde283.roa (raw, json)
Hash identifier:          sIaad7v6fVsf0nkqU2T4G8OiSPYrBYD3R0hKA0j0YLw=
Subject key identifier:   D7:D1:CD:31:7C:18:A6:D2:4D:A2:CC:C6:8C:7F:66:12:2C:60:3B:FA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285846F060367060DD8DC499EB4FC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28255574-3062-374c-b764-2c975ecde283.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     9009
IP address blocks:        45.74.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:36:70:60:dd:8d:c4:99:eb:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=e5acae4d-23f5-44a5-93a0-85d355d5b44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:88:99:d3:b4:89:af:46:61:3d:67:3a:1f:
                    bb:bf:3a:c9:e5:2d:72:14:d7:f5:04:be:d5:81:95:
                    53:ce:dc:76:63:7e:e8:c2:6d:aa:71:ba:88:3d:4e:
                    db:94:12:d0:7e:54:0d:b7:eb:95:8b:b8:66:65:fa:
                    64:c8:e8:3a:16:53:57:26:2a:9e:a3:4b:c8:cc:fe:
                    62:cc:80:66:cc:07:d1:21:c9:84:16:5f:46:f4:4c:
                    c1:85:17:4b:67:7e:0b:c6:55:ec:90:47:e1:da:47:
                    d6:8c:a2:a0:5e:a9:7f:f9:1e:b5:c8:35:0e:4c:7a:
                    3d:77:1f:65:4e:9e:bd:d8:ba:a5:9b:e5:75:6d:94:
                    b6:ca:da:d8:b5:a4:51:47:82:eb:37:cf:8e:5d:c9:
                    95:c5:0e:ff:71:a6:7c:14:71:4c:17:3e:57:ea:14:
                    de:33:10:70:42:6c:83:47:08:22:83:95:bf:80:a1:
                    4f:2a:c3:21:a3:6a:c6:7a:f2:3d:c9:34:4d:96:23:
                    22:3a:4f:90:53:75:0a:a1:59:06:73:af:d0:d5:d8:
                    ad:83:82:95:df:b8:1a:7d:de:5d:d3:d0:d5:b3:3c:
                    40:04:4e:88:3f:00:b3:15:d6:6e:81:ea:f5:55:36:
                    9c:ca:50:84:bc:1a:c0:5c:03:ed:47:06:8c:80:cf:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:CD:31:7C:18:A6:D2:4D:A2:CC:C6:8C:7F:66:12:2C:60:3B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28255574-3062-374c-b764-2c975ecde283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:c0:aa:48:e4:87:16:e1:07:61:c4:96:97:0c:07:ae:69:
         79:e5:06:0b:7f:df:a5:1f:f9:ff:7b:70:41:ef:cd:5a:21:a2:
         b5:e3:62:d6:fa:52:72:52:82:be:77:a8:32:d7:1d:70:87:22:
         9b:b9:3a:95:d7:97:7c:a9:c0:f3:17:4c:dd:f1:06:d3:c2:57:
         7b:b4:d5:28:fa:09:f1:3b:58:3d:bb:52:67:fe:42:f8:f5:d2:
         d2:94:20:8d:c8:b8:62:70:2f:4c:88:c2:ed:7f:33:c0:20:bc:
         7f:0e:5a:e3:fc:54:6c:76:e4:27:73:6e:ba:bb:74:6c:03:cc:
         89:2b:2d:b1:03:89:cc:d6:dd:0d:20:e1:bb:02:14:a9:7e:23:
         cd:be:be:a6:e0:9e:3a:bb:ec:a8:15:37:62:6a:3d:35:36:ec:
         ad:21:b5:7c:e6:03:4a:d6:89:bb:8b:db:6b:29:9c:19:a3:9b:
         ea:80:e3:48:ca:63:8e:6b:42:5f:ce:23:2a:56:96:25:dd:53:
         6a:23:c5:08:d4:14:5a:8c:80:f3:a9:6e:29:61:eb:4c:4b:c8:
         29:7d:1e:ed:b5:a9:df:b2:2e:7f:81:f5:f9:7c:23:57:97:b0:
         5b:26:9a:47:91:01:a5:fb:52:c4:8b:c4:69:87:bb:1f:fe:d8:
         76:a6:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 04:27:48 2024 by rpki-client on console.sobornost.net