Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cef55e6-1486-3f03-b070-4dadad2f55b1.roa
File:                     5cef55e6-1486-3f03-b070-4dadad2f55b1.roa (raw, json)
Hash identifier:          KEn2zHLhEUXm57aOuq7DHGCuRmtgG1egh930Wn/7qiw=
Subject key identifier:   43:F3:2B:81:ED:D2:3A:02:E3:3D:08:47:C4:A7:5C:4F:94:9C:3C:3E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858494C4365DBFE4D0B72F71872C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cef55e6-1486-3f03-b070-4dadad2f55b1.roa
Signing time:             Mon 24 Mar 2025 20:31:03 +0000
ROA not before:           Mon 24 Mar 2025 20:31:03 +0000
ROA not after:            Sun 22 Jun 2025 20:31:03 +0000
asID:                     18779
IP address blocks:        45.39.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:43:65:db:fe:4d:0b:72:f7:18:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 20:31:03 2025 GMT
            Not After : Jun 22 20:31:03 2025 GMT
        Subject: CN=1568501b-a198-4c77-ae8f-9fc43c9f30ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:61:fd:46:34:26:c9:69:20:a0:08:77:4e:
                    ae:b2:f6:6c:a7:1d:bc:6a:d6:d9:0a:28:3c:3a:57:
                    0d:0b:85:dc:f4:4f:1c:53:23:57:17:5b:88:16:19:
                    2c:23:c1:00:00:22:3c:64:52:9a:a0:92:95:c6:70:
                    34:9f:0a:4f:d2:26:b3:a0:26:68:30:53:3b:6a:8d:
                    03:54:95:43:1a:9c:fc:32:f2:c6:e2:00:d4:bd:00:
                    81:56:43:b6:43:19:15:e9:42:74:e5:89:e4:b6:02:
                    dc:ab:9c:9b:ff:b3:6c:36:ad:63:98:dc:a4:7a:a1:
                    d4:e3:44:3d:8b:e1:66:48:da:35:5c:a4:f3:43:d3:
                    86:cc:2d:40:04:97:1d:a7:be:fd:a4:08:db:e7:cc:
                    ee:1b:90:01:53:76:bf:64:54:d8:5d:40:5b:3c:cc:
                    32:31:5e:9e:68:42:25:71:5d:08:d8:18:5a:96:66:
                    58:eb:45:3b:c8:20:e4:1b:b0:13:cf:fd:f0:f0:64:
                    ba:97:a4:92:e9:a0:64:11:67:9e:c6:17:34:56:d7:
                    e3:cb:9e:3d:35:12:9b:a2:3b:83:f8:db:c5:42:5a:
                    ea:f1:50:8e:34:7f:f3:98:07:89:af:f9:6e:74:44:
                    dc:10:a1:0f:24:a3:69:77:e9:22:42:a8:87:84:36:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:2B:81:ED:D2:3A:02:E3:3D:08:47:C4:A7:5C:4F:94:9C:3C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cef55e6-1486-3f03-b070-4dadad2f55b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:49:34:bd:0d:79:16:54:31:4a:f0:97:5b:e0:f8:83:88:a4:
         ec:03:b0:2d:45:76:5f:17:b3:eb:41:db:10:a4:12:26:8a:e6:
         c5:14:95:e3:ec:a5:cc:cf:d6:ea:c3:e5:11:3d:6a:cf:96:34:
         0e:3c:3e:5a:18:2c:ee:a6:39:5c:f4:a2:49:85:bd:54:10:2e:
         3a:45:98:54:8b:1d:a6:23:99:f6:7f:68:a5:c9:96:dc:87:41:
         5f:c2:f4:dc:ab:79:f7:6e:24:98:94:76:5d:7b:8b:f5:ee:07:
         e1:2c:a1:fe:1d:62:be:fd:00:cb:f9:29:e9:3e:7e:dd:d7:1c:
         3c:e2:47:dd:90:94:ae:01:68:e0:7d:3b:1a:8e:9f:66:77:c6:
         72:ac:8c:16:42:c7:df:7c:54:11:73:35:be:7a:76:80:cd:5d:
         b8:30:81:4b:03:6c:fc:53:1e:14:72:8b:a2:e3:9c:f0:b4:d4:
         f5:da:08:c9:47:58:08:09:44:fb:83:52:cc:93:78:e5:41:ac:
         b2:d8:e5:2d:8d:f3:14:c9:19:33:58:1c:88:9b:5e:99:42:fc:
         9d:75:ab:ac:e7:07:44:06:39:5c:27:17:eb:71:0c:33:ef:9c:
         8d:c2:c5:d6:b8:53:fc:23:33:f0:64:d8:39:03:03:6e:6e:82:
         01:39:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:02 2025 by rpki-client