Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/570d00db-7324-3812-b2ae-6ad6a8115739.roa
File:                     570d00db-7324-3812-b2ae-6ad6a8115739.roa (raw, json)
Hash identifier:          fedr6mQsuIhlHOlhs6za5XgpZ63j6GVQJTBtX624jYk=
Subject key identifier:   BB:88:76:62:32:F2:F1:1F:9E:0A:93:EB:68:AF:2E:5A:BA:6C:FD:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584953C44F08357E460E8975AA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/570d00db-7324-3812-b2ae-6ad6a8115739.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        45.39.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4f:08:35:7e:46:0e:89:75:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=829cefd0-0be1-4fd2-9ddc-0089c9031f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:52:40:91:eb:8c:0f:b4:f3:49:f3:33:b9:
                    c7:3e:b1:f4:84:88:2e:bf:bb:24:a1:b2:7f:ea:ce:
                    3a:fd:e7:43:5b:f2:9d:2c:da:7b:05:aa:d2:56:2c:
                    21:51:f5:1d:d1:29:46:b1:e4:d7:15:ac:55:31:ca:
                    46:c0:dd:ba:09:a2:d1:5f:d4:0d:63:e0:38:f3:39:
                    a2:a4:39:81:5f:72:de:37:ec:36:a5:6e:75:44:4d:
                    03:e7:ef:2d:13:e5:41:48:7e:6f:1d:1c:41:ef:d8:
                    3e:6b:06:1b:98:33:9e:c3:ce:37:03:63:33:53:b4:
                    dc:bb:18:f5:3e:e2:bb:20:56:f4:4e:7b:75:a4:4c:
                    8d:d1:04:a7:60:7c:8f:23:64:f2:04:05:c3:cb:31:
                    a5:7e:ee:ca:22:a1:45:d8:e2:c9:bb:34:92:e0:55:
                    cc:34:80:ac:e8:dc:49:81:12:f4:f4:02:c4:bf:48:
                    87:8b:d4:7a:2e:c8:bd:37:f5:5c:ce:36:19:61:da:
                    3c:86:e1:af:1d:b6:c9:43:05:e3:0a:46:26:f0:76:
                    56:84:e4:6b:33:f2:d1:df:f0:b2:b9:ae:8b:42:df:
                    e5:85:b2:0b:d3:39:39:a4:04:db:28:fe:7a:d3:ff:
                    eb:0e:3c:ea:f7:3e:7b:d7:6d:d4:3b:cd:52:b0:86:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:76:62:32:F2:F1:1F:9E:0A:93:EB:68:AF:2E:5A:BA:6C:FD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/570d00db-7324-3812-b2ae-6ad6a8115739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:80:5c:f8:0e:ca:fa:03:18:06:fd:8c:c1:82:21:fb:75:
         85:01:b1:25:ca:5c:0b:fa:25:11:b0:46:d4:40:8e:5c:1a:33:
         75:3e:00:87:43:0a:93:8f:1e:a8:a3:44:6f:6f:46:88:e6:b0:
         37:79:0d:53:88:24:03:74:b9:68:55:21:e1:c1:3b:e2:6e:8e:
         d9:b8:d2:c9:94:db:c9:73:03:72:ed:5b:54:ae:d7:f2:44:5e:
         99:58:5d:54:1b:b0:85:70:37:02:e0:4e:a3:0f:df:58:3b:28:
         30:42:44:89:d6:55:74:c5:a5:d0:3a:f4:22:d3:fe:ce:00:47:
         d1:c2:74:49:ce:32:a4:3e:b6:6f:c8:63:f6:00:e7:f3:b4:be:
         bd:eb:ea:e4:23:5f:ce:45:c9:e1:78:92:8e:73:c5:42:b8:15:
         64:d6:0f:70:99:03:82:cb:aa:92:93:47:db:7b:7f:83:1a:05:
         fd:d2:b1:8b:9b:81:9a:48:de:ee:27:3f:b1:45:12:0d:dc:6d:
         06:4c:e4:10:8d:9b:01:87:38:e3:9a:4a:81:5a:f7:78:58:78:
         17:08:23:e8:83:ee:ae:1c:4c:ea:1f:a4:2d:8f:fe:f4:4b:7e:
         4d:08:d8:ba:f4:fc:62:71:b0:19:70:53:9c:bb:c6:0b:6a:fc:
         81:f5:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:55 2025 by rpki-client