Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d878cc7-7e4a-3a92-90a9-a71316770c40.roa
File:                     2d878cc7-7e4a-3a92-90a9-a71316770c40.roa (raw, json)
Hash identifier:          E+zdWbUsRHirdR1clPvnlEeBMAngAFFhlqAD0ib4qdM=
Subject key identifier:   6F:1A:79:5A:53:86:8B:D1:E9:1B:00:C7:98:B8:06:22:37:C5:AE:C0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584924071B2043A1CC295468ACE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d878cc7-7e4a-3a92-90a9-a71316770c40.roa
Signing time:             Mon 10 Mar 2025 10:37:15 +0000
ROA not before:           Mon 10 Mar 2025 10:37:15 +0000
ROA not after:            Sun 08 Jun 2025 10:37:15 +0000
asID:                     21859
IP address blocks:        45.39.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:07:1b:20:43:a1:cc:29:54:68:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 10 10:37:15 2025 GMT
            Not After : Jun  8 10:37:15 2025 GMT
        Subject: CN=930e3b4d-1da3-421c-a3b4-18a0e60dc8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:47:bc:88:f1:57:53:db:29:b5:c1:9c:da:
                    74:9d:03:ec:ab:2f:5d:48:e7:aa:a7:5e:0c:d9:08:
                    9f:02:86:54:4c:c2:e5:1c:d7:6e:8b:54:dc:43:c9:
                    8b:59:75:23:a9:35:15:f1:0d:b4:49:cb:17:fd:f5:
                    ec:a3:2d:65:23:04:26:1d:3a:a9:2b:a0:43:05:42:
                    96:5f:a5:07:aa:56:c3:f2:c0:84:44:f5:64:35:c8:
                    5f:d6:db:02:d8:b4:e3:ce:53:c4:91:1d:bc:8a:71:
                    8c:4c:3d:37:b9:04:be:22:e1:be:49:fa:d2:66:1d:
                    64:f5:2a:7e:a3:b6:22:eb:d3:00:b2:ab:db:ff:a4:
                    86:67:d3:56:4d:db:fb:e7:bb:93:c9:02:22:c0:65:
                    ae:d3:e2:1b:a0:f0:d3:15:c3:4c:ce:3a:7c:d4:38:
                    56:97:9f:b0:9b:eb:b4:f9:ad:51:7e:47:91:a4:17:
                    94:0c:11:79:c7:a1:e4:d2:dd:50:35:4d:d4:5f:b9:
                    3c:45:49:aa:b5:4e:e7:f5:ca:80:c3:21:2d:d0:27:
                    d4:f1:9b:fd:2f:ac:9b:57:9e:ac:01:00:24:00:7d:
                    36:5b:6c:98:a9:b8:c4:04:c7:d3:0b:3b:b6:df:fa:
                    d0:9d:10:b3:45:54:66:d4:28:da:41:b4:58:26:8a:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1A:79:5A:53:86:8B:D1:E9:1B:00:C7:98:B8:06:22:37:C5:AE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d878cc7-7e4a-3a92-90a9-a71316770c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:4a:17:10:50:50:fa:22:9f:40:5b:34:55:c8:bd:b9:50:
         7e:e1:d2:94:78:c2:87:c7:92:d7:92:75:4e:75:63:4d:d0:86:
         c6:ed:d0:91:f4:b1:f0:85:72:fd:88:a0:e5:db:35:bc:32:65:
         58:1a:9d:a1:03:b3:8b:94:1e:e7:9c:f1:90:02:1a:6c:55:5f:
         29:ac:8e:b3:25:dc:6d:07:56:be:10:0e:65:23:98:7f:cc:f9:
         0b:49:16:c4:31:68:0f:55:56:7e:64:45:a1:4f:db:00:dc:8e:
         e3:96:4a:84:d2:87:f7:6a:2a:ec:30:29:3e:1e:55:5e:2d:9a:
         a8:54:09:b8:6b:86:bf:a5:58:ef:b4:0a:e2:fd:9f:f8:3c:f7:
         0c:5a:2e:50:db:ec:6f:2b:88:ab:05:09:fa:cb:3f:03:a8:82:
         20:a4:0c:ce:86:05:ea:8b:b3:64:c9:1a:73:24:d9:a8:bd:ba:
         ba:51:e4:b4:14:3c:84:73:35:5f:f1:9b:91:ab:8f:44:f2:54:
         7f:9b:d9:7a:fb:6a:61:0a:02:20:74:80:a8:da:a0:79:09:cf:
         0e:ba:0e:87:d2:c7:7d:9b:00:c0:eb:2a:9f:96:da:b7:01:61:
         3e:7b:08:54:cd:94:c9:35:83:29:6f:24:6b:24:ea:c0:b6:24:
         26:03:11:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkBxsgQ6HMKVRorOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMxMDEwMzcxNVoXDTI1MDYwODEwMzcxNVowLzEtMCsGA1UEAxMk
OTMwZTNiNGQtMWRhMy00MjFjLWEzYjQtMThhMGU2MGRjOGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMNHvIjxV1PbKbXBnNp0nQPsqy9dSOeqp14M
2QifAoZUTMLlHNdui1TcQ8mLWXUjqTUV8Q20ScsX/fXsoy1lIwQmHTqpK6BDBUKW
X6UHqlbD8sCERPVkNchf1tsC2LTjzlPEkR28inGMTD03uQS+IuG+SfrSZh1k9Sp+
o7Yi69MAsqvb/6SGZ9NWTdv757uTyQIiwGWu0+IboPDTFcNMzjp81DhWl5+wm+u0
+a1RfkeRpBeUDBF5x6Hk0t1QNU3UX7k8RUmqtU7n9cqAwyEt0CfU8Zv9L6ybV56s
AQAkAH02W2yYqbjEBMfTCzu23/rQnRCzRVRm1CjaQbRYJoqrgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8aeVpThovR6RsAx5i4BiI3xa7AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmQ4NzhjYzctN2U0YS0z
YTkyLTkwYTktYTcxMzE2NzcwYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIP4ShcQUFD6Ip9AWzRVyL25UH7h0pR4wofHkteSdU51Y03Qhsbt0JH0
sfCFcv2IoOXbNbwyZVganaEDs4uUHuec8ZACGmxVXymsjrMl3G0HVr4QDmUjmH/M
+QtJFsQxaA9VVn5kRaFP2wDcjuOWSoTSh/dqKuwwKT4eVV4tmqhUCbhrhr+lWO+0
CuL9n/g89wxaLlDb7G8riKsFCfrLPwOogiCkDM6GBeqLs2TJGnMk2ai9urpR5LQU
PIRzNV/xm5Grj0TyVH+b2Xr7amEKAiB0gKjaoHkJzw66DofSx32bAMDrKp+W2rcB
YT57CFTNlMk1gylvJGsk6sC2JCYDEac=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:26 2025 by rpki-client