Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a44390b-f397-3c51-927a-4c38d9b76526.roa
File:                     8a44390b-f397-3c51-927a-4c38d9b76526.roa (raw, json)
Hash identifier:          mJyWVywPLnl3LwLuD7gaDIcvVEvkX+AwKGaI2YPNgno=
Subject key identifier:   69:1C:73:BE:73:43:83:52:0B:39:D4:D3:11:38:82:C7:D7:9C:ED:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF7A3E64868243F956CC4600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a44390b-f397-3c51-927a-4c38d9b76526.roa
Signing time:             Wed 19 Feb 2025 14:51:23 +0000
ROA not before:           Wed 19 Feb 2025 14:51:23 +0000
ROA not after:            Tue 20 May 2025 13:51:23 +0000
asID:                     18779
IP address blocks:        45.38.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:7a:3e:64:86:82:43:f9:56:cc:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:51:23 2025 GMT
            Not After : May 20 13:51:23 2025 GMT
        Subject: CN=38f49bdd-ef8d-4fe8-aa16-67f050b1d3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:57:95:d5:31:36:60:66:cf:53:12:36:83:
                    04:b0:a3:6d:2a:da:89:b3:63:80:23:62:41:8a:cc:
                    7f:ed:86:b6:eb:97:d4:f7:dc:0c:e8:c9:81:c8:62:
                    91:bf:9b:52:a5:21:8c:b5:71:a5:1b:9a:28:7a:d5:
                    87:fd:07:ce:ff:39:c4:fd:4a:e3:52:8a:e9:f8:0d:
                    6f:81:a0:39:ca:07:65:53:47:00:17:53:d9:a0:46:
                    3a:98:b8:39:fd:a2:f6:cc:fe:e3:ef:8d:58:39:3d:
                    f8:c1:80:7c:98:67:67:ef:3a:d7:5f:8d:c5:d6:e1:
                    95:e3:4c:dd:55:88:bd:21:70:34:cf:f9:6f:84:b6:
                    c6:4c:35:e6:f1:d2:72:58:dd:35:22:5c:61:61:69:
                    3d:f0:88:b8:06:66:77:a7:e6:1c:21:f5:24:93:6e:
                    77:f1:7b:e8:42:e1:96:4b:6e:7e:eb:92:63:c6:77:
                    da:7c:b8:98:53:65:a6:e3:d9:a4:1e:95:33:d7:95:
                    40:c1:a9:1a:6f:e2:f3:3a:e2:83:b5:4d:e7:a0:d5:
                    15:66:6f:d6:6d:43:7e:5b:79:ea:06:a3:15:98:62:
                    07:20:58:43:5b:89:e9:aa:13:d0:6a:38:e4:1c:ea:
                    39:b7:ea:d1:52:99:f9:2c:45:b7:4e:25:5d:53:99:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1C:73:BE:73:43:83:52:0B:39:D4:D3:11:38:82:C7:D7:9C:ED:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a44390b-f397-3c51-927a-4c38d9b76526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:4f:87:26:6c:f2:5b:17:2d:f9:17:f4:7d:48:4c:e5:b0:
         8a:d2:f7:4d:c7:13:66:4d:27:6b:63:14:75:b6:a3:27:34:84:
         4d:c4:66:2d:6f:3e:de:c4:7c:04:a4:1d:5f:9b:72:00:c6:90:
         9a:f0:ea:40:e4:dc:e8:1b:9c:e1:37:62:e9:a8:56:4c:d7:5f:
         5b:d8:81:49:d9:ef:7a:25:3a:5d:82:8d:83:55:df:23:e8:04:
         47:48:d7:62:35:4d:96:e1:d1:bf:cd:dd:ae:e5:25:62:78:24:
         b6:f2:2a:a1:5b:56:57:16:1f:67:1a:76:a9:ef:e1:5b:9e:34:
         fb:00:61:aa:77:ad:88:d0:3f:e0:f5:ea:ca:bd:ba:6c:4f:ce:
         d4:c7:ac:3a:d6:86:11:b2:f7:db:ff:bc:ef:88:5c:7d:d0:74:
         4f:6f:27:45:ad:c3:9a:52:2e:ee:78:66:14:af:57:c0:a5:5f:
         9d:24:a2:56:6c:a7:f8:89:21:a9:f7:b4:f0:03:0c:2b:fd:25:
         5a:98:39:44:6e:dc:93:e0:fd:1b:69:5a:56:1a:21:c2:ab:08:
         c0:02:ac:42:26:6d:73:9a:5f:2c:a6:18:05:ba:2d:b5:0a:86:
         fe:28:7a:f6:b5:98:22:52:fd:b0:8c:25:1e:f5:59:3a:61:87:
         1b:9e:e9:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvej5khoJD+VbMRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxOTE0NTEyM1oXDTI1MDUyMDEzNTEyM1owLzEtMCsGA1UEAxMk
MzhmNDliZGQtZWY4ZC00ZmU4LWFhMTYtNjdmMDUwYjFkM2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphRXldUxNmBmz1MSNoMEsKNtKtqJs2OAI2JB
isx/7Ya265fU99wM6MmByGKRv5tSpSGMtXGlG5ooetWH/QfO/znE/UrjUorp+A1v
gaA5ygdlU0cAF1PZoEY6mLg5/aL2zP7j741YOT34wYB8mGdn7zrXX43F1uGV40zd
VYi9IXA0z/lvhLbGTDXm8dJyWN01IlxhYWk98Ii4BmZ3p+YcIfUkk2538XvoQuGW
S25+65JjxnfafLiYU2Wm49mkHpUz15VAwakab+LzOuKDtU3noNUVZm/WbUN+W3nq
BqMVmGIHIFhDW4npqhPQajjkHOo5t+rRUpn5LEW3TiVdU5mELwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkcc75zQ4NSCznU0xE4gsfXnO1cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGE0NDM5MGItZjM5Ny0z
YzUxLTkyN2EtNGMzOGQ5Yjc2NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSavMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+IT4cmbPJbFy35F/R9SEzlsIrS903HE2ZNJ2tjFHW2oyc0hE3EZi1v
Pt7EfASkHV+bcgDGkJrw6kDk3OgbnOE3YumoVkzXX1vYgUnZ73olOl2CjYNV3yPo
BEdI12I1TZbh0b/N3a7lJWJ4JLbyKqFbVlcWH2cadqnv4VueNPsAYap3rYjQP+D1
6sq9umxPztTHrDrWhhGy99v/vO+IXH3QdE9vJ0Wtw5pSLu54ZhSvV8ClX50kolZs
p/iJIan3tPADDCv9JVqYOURu3JPg/RtpWlYaIcKrCMACrEImbXOaXyymGAW6LbUK
hv4oeva1mCJS/bCMJR71WTphhxue6ZM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:29 2025 by rpki-client