Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0909eb65-518d-3900-8340-098afac153ea.roa
File:                     0909eb65-518d-3900-8340-098afac153ea.roa (raw, json)
Hash identifier:          lT/0JG73byF9IlELuRfJ0MN08yW+tul93ePEpAuEHUU=
Subject key identifier:   43:C4:6F:67:5C:F8:2C:AA:35:84:0E:89:94:59:75:48:03:BF:A3:71
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858491D71725D5686EDA5AD2DDF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0909eb65-518d-3900-8340-098afac153ea.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     8881
IP address blocks:        45.38.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:72:5d:56:86:ed:a5:ad:2d:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=a368a8ec-b425-400b-9900-1c9411e9f822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:80:5a:20:6f:04:83:fb:b5:70:d4:9a:21:
                    d1:e1:a2:3f:ba:bd:f7:62:9d:c3:8d:d6:20:87:77:
                    96:b3:f0:34:2a:ad:17:17:26:3b:f9:12:b6:17:88:
                    34:e0:3b:c3:47:0b:be:ae:a9:ca:38:31:45:91:02:
                    47:e9:c0:a8:57:38:5c:18:58:5a:93:ff:78:3a:ad:
                    44:63:7b:69:b2:b5:03:a7:56:cf:74:c2:07:0f:46:
                    2b:35:8a:f0:f9:25:f7:bf:e5:20:3e:cf:e9:7c:81:
                    a1:90:c4:7c:d5:05:b6:06:4b:cf:fa:8a:56:d1:bb:
                    b1:a2:2d:21:c8:ac:58:ec:60:1f:57:fc:0b:65:a0:
                    b6:f4:74:d2:41:5a:94:c2:ee:fd:b7:34:59:09:79:
                    a4:86:0c:1b:b0:95:1f:7c:59:2d:a1:5d:79:1e:48:
                    82:06:47:2e:09:ef:16:2d:a6:32:dd:e4:80:cf:19:
                    ce:73:b9:f3:7b:1f:ea:91:b7:70:8c:24:fa:6b:18:
                    52:0c:e5:05:cc:12:0d:e4:af:87:c0:0b:8d:2b:e9:
                    73:d8:58:db:b3:0c:af:61:13:4f:67:85:14:64:96:
                    f7:54:30:e3:2f:84:81:44:22:49:f4:b3:b5:2d:ad:
                    19:6d:fe:b2:ae:2d:4f:71:a7:02:3f:7b:36:6c:aa:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C4:6F:67:5C:F8:2C:AA:35:84:0E:89:94:59:75:48:03:BF:A3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0909eb65-518d-3900-8340-098afac153ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:19:cd:49:4c:17:8e:ad:cc:70:a0:a9:00:5a:76:9a:40:
         bd:67:89:23:10:23:60:d2:dd:01:f0:54:cd:fe:8c:6c:3b:42:
         59:9e:e5:6f:32:e4:9b:af:58:0d:94:84:05:96:80:f7:a2:b6:
         fc:86:85:95:83:96:e3:0e:75:3d:28:80:21:5d:fc:e0:64:14:
         5e:c3:f9:86:b9:e0:50:dd:f0:cd:3f:b5:c5:b4:c5:11:21:a7:
         02:44:0e:27:10:45:b6:f8:b1:dc:87:50:2f:10:2a:f8:2e:48:
         e4:cc:87:d2:31:c4:4b:e4:0d:5d:c0:b6:6d:d2:8b:67:a0:a4:
         12:d1:23:15:13:6a:4e:bc:65:eb:86:44:4c:4f:5f:ec:36:79:
         dd:c4:10:96:4b:a7:da:0b:7a:dc:ae:6c:e5:ee:30:cf:a3:04:
         d3:d1:04:ea:84:62:c2:de:47:76:1f:f8:ca:f1:a9:4b:dd:c8:
         30:21:d5:10:13:d8:fa:12:83:02:9f:32:44:28:cc:02:15:7b:
         24:da:0f:d6:3e:b9:b8:b9:b7:9d:d6:e7:8f:e3:4b:64:4a:52:
         05:c6:90:9c:cc:02:71:e3:35:9e:8e:b7:16:d2:d2:c4:4c:87:
         55:07:7c:b4:28:de:e0:98:44:f3:a7:19:a2:75:27:49:a9:a1:
         f0:03:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:17 2025 by rpki-client