Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ef7487b-531c-3a59-8a0a-6f82d29841b9.roa
File:                     5ef7487b-531c-3a59-8a0a-6f82d29841b9.roa (raw, json)
Hash identifier:          mwDerNYgN6G6B049VmjQ4eTH+b9TLd2hAA/9XaHUMg4=
Subject key identifier:   88:1F:92:B1:54:69:66:38:3B:A6:9C:E4:B2:CF:0D:22:0E:9D:1C:B3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848BE861DDA1D7265C209ECA100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ef7487b-531c-3a59-8a0a-6f82d29841b9.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     174
IP address blocks:        45.39.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1d:da:1d:72:65:c2:09:ec:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=71943fdc-470c-4988-a76e-209054e2a2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:ff:fe:40:3c:01:df:9e:63:c1:e2:3a:bd:
                    52:52:6b:09:b2:71:a6:a0:86:50:49:89:ee:96:e3:
                    1d:c5:1e:4d:15:e2:30:31:4e:df:af:8b:f1:c2:be:
                    59:49:a4:c5:0b:66:e2:aa:65:f5:36:4b:91:1c:42:
                    08:9c:f6:2a:de:59:64:a1:e3:43:4c:b6:40:1d:a6:
                    e8:ca:fe:cc:38:a8:8e:16:93:99:f9:54:31:fe:a8:
                    37:17:f1:90:18:20:c4:22:37:87:eb:3c:4a:db:93:
                    8f:45:48:f6:8b:da:65:08:3a:5d:e9:54:b7:5d:82:
                    06:f7:ef:be:42:88:72:8c:ca:51:67:2d:2a:83:4b:
                    2b:6c:1f:c7:99:19:3c:ce:47:06:e2:26:9a:0e:71:
                    55:50:cf:46:63:22:11:12:9c:f9:0e:29:f0:0e:29:
                    22:37:0e:9d:b4:b8:00:47:d8:4b:35:ee:19:98:9e:
                    02:7d:28:1f:03:a9:4c:eb:10:25:58:99:1e:07:c0:
                    92:87:c0:08:4a:46:20:90:3b:97:a5:0e:78:b8:40:
                    84:ae:93:d6:83:ec:79:4b:8f:81:ea:69:00:1a:79:
                    fa:d6:e5:ae:71:d4:ab:0c:e7:07:1d:29:ac:58:5d:
                    b9:d1:db:52:5f:69:27:ed:0e:81:5b:4a:d5:09:11:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:92:B1:54:69:66:38:3B:A6:9C:E4:B2:CF:0D:22:0E:9D:1C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ef7487b-531c-3a59-8a0a-6f82d29841b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:c0:6e:76:90:c1:b6:2a:22:a2:92:28:e5:de:2e:5d:e0:
         fb:ba:6f:36:cd:7d:33:e7:88:cc:d5:cc:ee:dc:5b:ba:08:c4:
         0e:47:1d:5a:4f:29:f3:f7:d5:0e:17:7c:0c:23:e8:81:de:47:
         49:e0:04:9e:a0:50:e7:48:8e:8a:de:67:55:dd:ad:d6:f6:e9:
         6f:33:e8:0b:42:35:60:2c:75:04:22:5d:f7:85:51:44:41:49:
         1a:c3:94:a4:5a:23:0c:39:a7:08:44:8a:1a:d1:5c:ff:ab:07:
         6d:9e:cc:24:70:02:c3:e8:1c:a5:74:de:de:26:c9:4e:53:49:
         03:ea:d1:92:99:8b:88:3b:43:de:5a:f5:98:71:84:1b:2b:1c:
         f6:0c:b3:16:f4:d8:0c:46:53:57:91:5a:02:d8:c2:c5:12:67:
         49:df:39:82:1f:86:66:65:df:ed:a9:bc:fe:5c:0d:7b:79:f3:
         43:81:41:49:e0:09:89:0c:47:48:41:bd:9b:40:b5:b9:bc:80:
         5f:11:48:3d:4c:83:f8:07:ba:d5:50:1d:c8:84:87:f8:f3:70:
         2c:4c:3c:86:07:fb:56:29:21:11:10:9c:b0:5d:26:c5:4f:7f:
         2d:cf:b0:4f:15:9f:c2:d7:56:e3:2b:10:36:67:10:34:61:0b:
         88:99:27:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hh3aHXJlwgnsoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
NzE5NDNmZGMtNDcwYy00OTg4LWE3NmUtMjA5MDU0ZTJhMmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpr//kA8Ad+eY8HiOr1SUmsJsnGmoIZQSYnu
luMdxR5NFeIwMU7fr4vxwr5ZSaTFC2biqmX1NkuRHEIInPYq3llkoeNDTLZAHabo
yv7MOKiOFpOZ+VQx/qg3F/GQGCDEIjeH6zxK25OPRUj2i9plCDpd6VS3XYIG9+++
QohyjMpRZy0qg0srbB/HmRk8zkcG4iaaDnFVUM9GYyIREpz5DinwDikiNw6dtLgA
R9hLNe4ZmJ4CfSgfA6lM6xAlWJkeB8CSh8AISkYgkDuXpQ54uECErpPWg+x5S4+B
6mkAGnn61uWucdSrDOcHHSmsWF250dtSX2kn7Q6BW0rVCRE+zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgfkrFUaWY4O6ac5LLPDSIOnRyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWVmNzQ4N2ItNTMxYy0z
YTU5LThhMGEtNmY4MmQyOTg0MWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSeoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcbwG52kMG2KiKikijl3i5d4Pu6bzbNfTPniMzVzO7cW7oIxA5HHVpP
KfP31Q4XfAwj6IHeR0ngBJ6gUOdIjoreZ1Xdrdb26W8z6AtCNWAsdQQiXfeFUURB
SRrDlKRaIww5pwhEihrRXP+rB22ezCRwAsPoHKV03t4myU5TSQPq0ZKZi4g7Q95a
9ZhxhBsrHPYMsxb02AxGU1eRWgLYwsUSZ0nfOYIfhmZl3+2pvP5cDXt580OBQUng
CYkMR0hBvZtAtbm8gF8RSD1Mg/gHutVQHciEh/jzcCxMPIYH+1YpIREQnLBdJsVP
fy3PsE8Vn8LXVuMrEDZnEDRhC4iZJ24=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:03 2025 by rpki-client