Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/181042a1-5742-38a7-be6e-49cd42bb1de6.roa
File:                     181042a1-5742-38a7-be6e-49cd42bb1de6.roa (raw, json)
Hash identifier:          cq13dtRsMwynzN9/lDjIoH7YXIdjjfgQ+sqekJH5V5Y=
Subject key identifier:   EE:16:C3:4B:C1:7A:87:AE:1A:D3:B9:52:37:8C:BD:45:B2:AA:D5:8D
Certificate issuer:       /CN=de0cc6bd-e920-421b-822f-9be354b0d759
Certificate serial:       010D0C9F43285848DBD66BF8C18E10D3A992D480
Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/181042a1-5742-38a7-be6e-49cd42bb1de6.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     1040
IP address blocks:        45.45.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6b:f8:c1:8e:10:d3:a9:92:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=b12d5b91-6b99-4eb8-a884-25f065d2acdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:25:2b:23:d0:4b:10:57:13:57:de:b6:75:
                    ed:9f:dc:9e:46:e8:69:cb:e9:bd:8e:68:91:2e:dd:
                    65:18:5b:9f:c1:76:b6:9f:ee:fb:e6:3b:f4:db:7d:
                    36:3f:81:34:07:68:bb:16:33:9f:85:dc:57:56:98:
                    55:20:9e:2a:33:26:bc:79:5f:6e:32:0d:f9:d7:81:
                    40:4a:fe:13:7d:c6:31:bb:d3:aa:7a:90:a1:cd:94:
                    1b:fb:d2:c1:e3:fb:0b:20:ea:b1:54:fb:2d:87:55:
                    79:5f:bd:6c:1c:77:f0:a9:28:9b:54:08:16:21:1a:
                    e8:ac:ba:29:53:bb:da:12:ed:23:76:2b:98:b3:85:
                    88:30:46:60:d5:bf:72:a4:95:a9:31:b2:63:0a:9a:
                    ac:89:95:12:40:9e:f4:22:a9:3a:dd:7e:ea:43:98:
                    c3:96:a1:1c:98:7f:37:67:06:4d:e5:85:ab:c2:f9:
                    25:1f:83:e4:96:eb:ac:b9:fe:4b:de:c3:57:04:bc:
                    01:d7:d8:b7:70:87:48:7d:17:ae:ae:58:06:fa:60:
                    49:79:05:63:68:69:74:54:c3:a5:03:80:15:9f:4b:
                    08:30:27:8b:39:b0:df:32:18:f0:b4:80:c0:b5:07:
                    ac:18:0b:74:2c:96:13:5b:30:7f:a5:05:d8:f4:a9:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:16:C3:4B:C1:7A:87:AE:1A:D3:B9:52:37:8C:BD:45:B2:AA:D5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/181042a1-5742-38a7-be6e-49cd42bb1de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl

            X509v3 Authority Key Identifier:
                keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:f1:bb:b6:a0:bc:a2:c3:ab:d7:b9:83:0d:87:5a:fc:0c:
         86:7c:3b:ea:c9:e1:5f:53:1b:d8:79:3f:06:96:4f:07:b6:c2:
         2e:79:79:89:71:98:8a:6c:be:c8:f3:a9:eb:6b:e4:9d:1c:e0:
         19:66:83:26:32:f4:b4:9d:58:ff:5c:57:1a:22:ec:fd:27:eb:
         1b:f3:3e:ae:03:46:1a:6e:cf:2f:ca:53:9b:4c:e9:13:fd:d8:
         a6:0b:a6:81:3a:df:c5:68:33:e7:19:61:9e:3e:4b:93:fc:bd:
         12:d9:c3:70:4a:78:c1:9c:88:75:d5:17:ea:98:5d:56:50:9c:
         c7:57:25:50:70:8c:8e:4c:d7:b8:f9:18:11:ce:73:e0:2d:53:
         df:39:00:68:1c:bc:0a:08:73:1d:4d:1e:da:d2:43:28:ee:ee:
         f6:27:2d:1d:88:71:54:73:58:cb:dd:7a:85:f0:b1:20:8e:51:
         20:7a:97:36:a7:f6:57:32:a2:45:de:f7:8d:c6:c0:37:d3:8b:
         5f:ad:1e:16:e6:fb:8f:63:60:13:18:82:91:47:8e:a2:bd:5a:
         1b:b0:38:e0:97:e0:18:e0:69:47:39:20:b5:2f:f3:7d:1b:3c:
         b0:37:c2:da:11:9b:8c:35:1a:d7:29:16:a1:81:3d:75:ad:05:
         80:fe:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:14 2025 by rpki-client on console.sobornost.net