Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cb0232b-f894-3872-9a7e-2985cf99e243.roa
File:                     1cb0232b-f894-3872-9a7e-2985cf99e243.roa (raw, json)
Hash identifier:          j6LvHXKxBSvdzPO4o24EcbK9kBJY8TvXbC7Y10v1qOc=
Subject key identifier:   8B:06:14:98:7D:05:8D:FE:23:E2:9C:92:13:DF:E1:2B:D3:5E:C9:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF78FA833967B41A50BEE980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cb0232b-f894-3872-9a7e-2985cf99e243.roa
Signing time:             Wed 19 Feb 2025 14:48:50 +0000
ROA not before:           Wed 19 Feb 2025 14:48:50 +0000
ROA not after:            Tue 20 May 2025 13:48:50 +0000
asID:                     18779
IP address blocks:        45.38.32.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:78:fa:83:39:67:b4:1a:50:be:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:48:50 2025 GMT
            Not After : May 20 13:48:50 2025 GMT
        Subject: CN=3a5c07b7-9f2b-4e6a-8671-bb38a3bb5336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:4f:91:a6:37:73:d6:e4:07:3c:d7:e3:bc:
                    dc:e9:a1:54:2b:00:02:86:9c:17:ac:fc:59:39:58:
                    29:86:92:15:d8:01:05:4f:09:ff:83:0e:97:31:a7:
                    02:09:55:5c:94:29:91:e4:a5:cc:00:7d:c6:45:2a:
                    8e:4d:c5:0e:90:85:6a:6d:14:d3:f6:d6:a9:41:e0:
                    2f:e6:1f:05:09:e0:f3:b9:b0:28:50:39:93:5c:62:
                    c1:76:44:1f:25:0c:5c:19:7f:93:91:ae:03:de:21:
                    a7:d1:ff:0e:65:39:48:83:fa:f9:11:41:41:5c:ab:
                    63:62:d9:8a:e7:02:ff:7a:9c:14:47:3d:98:cc:a1:
                    f4:b1:91:0c:2f:e8:7f:02:70:bb:13:04:47:8a:74:
                    6e:f6:e6:67:c3:01:5b:ba:08:46:d0:46:7b:48:8c:
                    3f:b9:87:0f:08:40:22:72:d4:fd:8a:3d:60:a5:46:
                    07:22:91:5f:82:b8:36:15:0d:ee:5f:93:bb:2f:b9:
                    b3:7e:d3:ee:25:35:42:e1:91:a1:4e:1b:c8:d8:18:
                    80:ad:08:2f:eb:02:c7:8f:08:f3:d9:19:0d:b7:aa:
                    59:df:c6:64:f9:05:c5:34:ea:b3:17:fc:ca:7a:12:
                    f4:e6:7f:7d:c8:75:10:95:4a:b6:6a:ff:c0:96:bd:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:14:98:7D:05:8D:FE:23:E2:9C:92:13:DF:E1:2B:D3:5E:C9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cb0232b-f894-3872-9a7e-2985cf99e243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:82:c6:a4:55:27:14:e8:b5:57:57:c4:a5:33:75:1e:98:5c:
         41:8a:3c:c7:04:67:c1:4e:48:f4:8a:41:dd:5d:c3:2c:ad:6f:
         b6:f2:e6:53:46:dd:72:c3:8c:7d:7b:60:51:80:cd:69:1e:88:
         83:2b:b5:49:f4:06:ce:72:d0:91:2b:42:89:f4:68:86:3d:02:
         d2:44:f6:f1:e4:1d:7d:d6:04:b9:b6:3d:ff:d3:b2:93:cd:53:
         77:5b:fe:2b:3f:59:4a:13:5d:e3:c6:db:66:94:48:62:c5:00:
         ed:4c:95:95:f3:4d:ff:1e:7a:60:98:e1:6c:78:44:63:18:bf:
         5e:b4:94:ef:9f:61:2e:bd:3f:e3:83:a0:0e:e6:e0:8f:eb:c6:
         1a:34:70:08:1e:11:02:60:d2:55:60:0c:59:26:8d:e8:f2:39:
         b2:7a:3c:fb:75:99:3b:1b:b5:1a:e2:9d:06:5b:62:85:50:5b:
         e4:c3:f1:b2:4f:da:8b:1e:82:0f:5a:eb:8b:e1:19:91:dc:71:
         0a:72:49:9c:9c:82:a0:f4:2c:62:8c:3f:76:be:73:23:b5:c4:
         5a:77:d4:02:f7:50:68:28:53:74:4e:69:4d:50:58:8b:c7:50:
         1e:95:09:13:c3:6b:56:83:19:68:44:60:03:f6:46:7d:0b:d7:
         b4:5e:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:43 2025 by rpki-client