Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6747cde6-6457-36e7-94d0-d8cd076d0f74.roa
File:                     6747cde6-6457-36e7-94d0-d8cd076d0f74.roa (raw, json)
Hash identifier:          HhCl/HgrbMsFbTWev/zcpKRTm4ZMb63dhBV+XyzNh3U=
Subject key identifier:   8E:58:54:5C:FC:DC:A1:4F:02:E1:24:E3:06:25:46:AC:5D:C3:4D:44
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96A8F0AE55B188F07DD280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6747cde6-6457-36e7-94d0-d8cd076d0f74.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     50131
IP address blocks:        45.39.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a8:f0:ae:55:b1:88:f0:7d:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=22517492-c480-4d3f-9fc3-54813cfabb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:44:44:90:94:d9:b1:44:9d:79:32:de:6b:56:
                    93:45:54:cd:dd:54:8f:65:f2:06:36:99:95:5e:ec:
                    f8:03:25:76:4c:1e:ff:d3:fd:ef:4e:98:e9:ca:5e:
                    43:fb:98:7b:f4:00:e2:3a:ce:bd:80:b4:f7:db:4a:
                    01:0c:c9:d4:71:68:cb:8e:1e:fe:e9:64:c9:0b:43:
                    aa:03:e8:ce:8d:f2:9f:4e:44:f8:81:9b:3c:37:41:
                    fc:25:5b:55:1e:3c:58:93:69:60:c2:fb:79:6d:23:
                    d4:76:e1:38:18:03:54:13:80:65:a4:4d:da:92:9e:
                    fa:6e:f0:52:b5:ae:ff:3e:f5:70:0e:46:96:81:40:
                    9c:8f:07:fe:37:5e:8a:68:7d:19:12:48:7c:92:32:
                    2b:0c:34:7d:ef:95:59:d9:59:bc:70:2b:3d:d2:70:
                    12:af:64:c0:5a:a4:44:df:63:85:90:85:32:53:06:
                    8a:7a:52:54:fb:5a:2e:93:8d:0c:99:0a:e0:f8:29:
                    55:be:e5:64:59:62:99:f5:60:be:60:0a:83:89:62:
                    0c:f1:b6:51:06:01:05:30:f5:84:86:22:ff:a3:d5:
                    39:16:e1:b7:7c:3c:e7:41:e6:ad:a6:8f:00:12:5f:
                    9b:e9:0f:99:45:fc:4d:d2:f5:d2:3d:19:17:35:4f:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:58:54:5C:FC:DC:A1:4F:02:E1:24:E3:06:25:46:AC:5D:C3:4D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6747cde6-6457-36e7-94d0-d8cd076d0f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1c:41:6c:2d:a9:a7:17:22:3a:54:d2:66:44:e1:27:3b:26:
         5c:0a:dc:2f:af:9a:1c:a1:83:39:fe:1a:48:ea:be:c9:53:c1:
         5b:61:62:08:57:a2:a2:fb:df:ae:28:cb:ec:38:89:8f:18:d4:
         0e:b2:67:fd:86:59:45:9b:af:84:15:fa:d8:0a:cb:1f:f3:a3:
         16:36:80:f5:8e:d1:91:f1:54:91:9a:6a:a1:0f:62:cb:e4:65:
         50:3e:2a:9f:a7:23:de:0f:de:bb:e3:df:d9:41:d1:4a:c8:52:
         22:72:60:be:8c:a7:08:d1:18:46:e7:ba:58:78:91:e7:1c:12:
         34:5e:43:f9:d2:ec:9b:cd:9d:cb:de:de:cc:40:7f:fd:42:5c:
         ea:00:51:84:d3:1a:6a:63:da:3e:76:99:6d:60:aa:43:20:00:
         83:eb:1f:74:42:e9:65:5b:19:94:33:c1:4a:7c:d4:dd:77:2e:
         75:64:b5:1b:e4:8c:ef:aa:56:eb:ca:91:c0:ed:2b:3d:77:33:
         84:dc:52:df:40:70:71:18:c7:7a:09:56:d9:7b:f1:12:fa:32:
         7e:d2:bf:00:52:44:33:dc:5a:b7:90:59:fc:3b:7c:5a:f6:a2:
         8c:6c:b7:13:89:fe:9b:e6:3d:82:d9:bb:78:b4:5b:39:53:c3:
         31:37:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:23:00 2025 by rpki-client