Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd457c3f-cb42-34c1-b568-b2022678745f.roa
File:                     cd457c3f-cb42-34c1-b568-b2022678745f.roa (raw, json)
Hash identifier:          FqynrYq79vv2hvYKRGOh91Fg4zZF8WBSs+eQffFck3Y=
Subject key identifier:   0D:97:63:BA:E5:28:38:E7:1A:F5:D0:E6:9A:1C:E8:F0:81:D8:C5:3E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858468B3C93696D867F39058E1B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd457c3f-cb42-34c1-b568-b2022678745f.roa
Signing time:             Mon 15 Jul 2024 07:32:26 +0000
ROA not before:           Mon 15 Jul 2024 07:32:26 +0000
ROA not after:            Sun 13 Oct 2024 07:32:26 +0000
asID:                     9009
IP address blocks:        45.74.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8b:3c:93:69:6d:86:7f:39:05:8e:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 15 07:32:26 2024 GMT
            Not After : Oct 13 07:32:26 2024 GMT
        Subject: CN=52519e68-7c58-4828-87a6-7e9f1bc4a884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:2f:14:6d:03:c1:4f:8c:95:a0:77:d6:b7:
                    4b:74:2f:6c:35:fc:b1:27:4c:cd:86:a9:70:74:f9:
                    72:09:cc:c6:cd:8b:c0:87:82:e7:3a:a5:87:3d:37:
                    98:c2:a1:d9:c9:16:48:e2:9f:df:c8:b9:5b:d7:27:
                    8e:36:5e:f7:42:30:d2:5c:17:19:9b:fe:1a:4e:a8:
                    64:5b:9a:f1:c5:e8:de:62:9f:18:ca:68:a8:ad:de:
                    88:5c:64:53:6a:fe:c1:c4:3e:9c:44:94:a9:22:ae:
                    15:1e:be:64:bc:1f:2c:17:2b:e1:75:73:63:a4:6e:
                    d2:8d:ce:a0:47:20:7d:53:b1:b3:e1:6b:15:87:1e:
                    ae:9f:76:4f:b4:b8:6d:7f:56:52:12:7a:d5:de:98:
                    27:99:36:66:e5:35:ba:78:fb:f8:51:4f:23:88:48:
                    5e:3d:45:9f:e3:26:ed:59:41:58:15:7c:81:59:cd:
                    b2:30:30:60:de:0b:d2:00:21:7d:fb:95:0e:8c:83:
                    33:c0:6a:10:f6:99:8a:8a:00:02:7b:10:e1:b0:aa:
                    57:b9:d0:94:2e:48:bd:e2:c9:c0:58:40:7e:c7:46:
                    f3:b9:f9:36:aa:66:17:bf:49:07:2f:c0:f6:75:03:
                    44:12:fa:a3:5e:e3:80:6e:35:dc:e6:4a:b9:c0:41:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:97:63:BA:E5:28:38:E7:1A:F5:D0:E6:9A:1C:E8:F0:81:D8:C5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cd457c3f-cb42-34c1-b568-b2022678745f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:06:3f:86:64:82:74:e4:29:b9:0f:75:cb:2a:69:f5:28:00:
         ac:54:16:3e:50:96:a9:76:af:79:88:9e:90:a2:42:4f:ab:54:
         af:1a:29:34:2e:b6:76:73:d1:b7:a3:16:bf:60:d4:db:5f:95:
         11:dd:18:d3:2f:b3:16:45:9c:bf:61:1f:a9:fc:1f:f0:e9:52:
         79:d2:22:73:1b:17:6f:c2:ce:86:ce:b1:2f:ae:57:ef:bc:66:
         5b:00:be:f8:aa:b1:84:73:b6:d1:70:4b:9a:17:01:17:69:0f:
         1c:6c:0c:06:cd:74:77:4e:79:66:00:31:03:6b:bf:45:15:fb:
         75:f7:f0:96:f0:90:a8:cc:39:58:6d:13:5b:56:0e:67:a5:e6:
         1d:a2:dd:b7:6a:cd:5d:a2:9a:50:d4:2e:6d:2d:b8:a2:d7:a3:
         ba:9d:a7:a4:68:6c:01:f6:8d:fd:a2:a0:f4:09:bb:86:ac:4f:
         a8:bc:8f:c5:b2:da:23:be:51:9f:c6:ba:ae:e5:86:c0:f7:9b:
         44:b7:84:4f:0a:b4:47:29:2c:66:23:29:d0:d8:2e:7f:a3:a1:
         3b:28:ed:f1:52:ec:22:e6:0d:b8:cc:e4:5a:10:b2:91:03:a5:
         ee:51:c4:eb:4c:9f:cd:01:e0:85:21:8d:c5:06:7e:c2:fe:67:
         1b:d0:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:33:21 2024 by rpki-client on console.sobornost.net