Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90abd97d-0268-379e-8309-b6e2ac132e20.roa
File:                     90abd97d-0268-379e-8309-b6e2ac132e20.roa (raw, json)
Hash identifier:          CyrlYzG+ODsCrzFH++2t4sU5/rjitfIm4gzCPj811nA=
Subject key identifier:   92:08:43:61:47:62:88:62:08:51:1D:63:37:05:78:BE:BE:8E:18:2E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858489D05E50F74EBE7440D8EF8C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90abd97d-0268-379e-8309-b6e2ac132e20.roa
Signing time:             Tue 21 Jan 2025 02:00:39 +0000
ROA not before:           Tue 21 Jan 2025 02:00:39 +0000
ROA not after:            Mon 21 Apr 2025 01:00:39 +0000
asID:                     400536
IP address blocks:        45.38.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9d:05:e5:0f:74:eb:e7:44:0d:8e:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 21 02:00:39 2025 GMT
            Not After : Apr 21 01:00:39 2025 GMT
        Subject: CN=121d7f69-463a-48ad-82d9-cca4ab4c612f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:bd:e6:93:12:21:6c:12:af:94:73:66:85:
                    38:fb:fc:13:02:f1:ff:9e:d9:fa:d4:39:5e:69:81:
                    e5:1a:f5:f6:fb:76:cd:dd:51:6b:cf:d1:3d:93:38:
                    da:ed:a6:31:4e:c3:a8:3c:32:29:ab:f2:99:3c:c7:
                    8e:89:00:5a:7a:97:16:2a:10:a8:ed:04:d0:68:73:
                    8c:15:b3:99:bd:da:03:5e:1f:1f:7c:f9:24:c2:6a:
                    53:cd:fe:58:90:88:db:de:de:30:6f:5d:da:a7:8a:
                    42:79:91:ec:9d:0f:39:55:5e:91:1e:a3:5e:3c:63:
                    31:a6:db:57:a3:40:e5:d2:47:e5:b2:2f:b7:93:9d:
                    88:0f:ef:96:72:6a:77:16:ca:cc:45:84:93:d2:b8:
                    65:2a:a9:85:1f:af:18:89:f1:3e:2b:a6:08:c6:1c:
                    c1:da:f8:72:a8:7a:54:25:40:76:40:f1:b1:a0:72:
                    83:94:1d:5a:26:eb:73:f7:3e:f1:0e:20:e1:d2:19:
                    69:fe:49:70:23:1e:19:77:60:58:b6:84:67:8b:1b:
                    52:d6:18:05:ff:71:cd:f7:bc:90:f5:b0:e4:96:9a:
                    63:76:55:bf:46:68:4d:3f:d7:45:ee:7f:89:90:55:
                    db:59:62:be:a0:87:47:15:82:47:88:14:09:31:5e:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:08:43:61:47:62:88:62:08:51:1D:63:37:05:78:BE:BE:8E:18:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90abd97d-0268-379e-8309-b6e2ac132e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:d4:6c:ae:39:be:b3:d1:05:e9:7f:a6:af:4f:bb:5e:85:
         03:df:c9:95:fb:cd:11:96:c4:82:f5:f6:2a:dd:8a:3f:78:75:
         4b:26:93:b0:34:03:aa:cf:7d:45:78:09:65:d3:bd:a6:de:38:
         6a:6d:c2:8b:3b:1e:31:ad:92:23:63:81:81:c4:c1:2f:66:2f:
         70:f1:55:66:c0:ac:8d:56:99:00:a2:34:98:70:7d:a2:f9:b8:
         59:16:47:ec:b5:e6:4e:b7:00:2f:7f:fa:2c:f1:44:5f:45:fe:
         20:78:c4:01:2c:5e:d7:a7:5d:36:b2:f5:f8:e1:04:ff:90:b7:
         4c:83:ba:93:2f:9a:fa:af:ba:4c:63:ab:83:a5:69:99:b2:80:
         e8:d4:b3:c5:6e:bc:a0:4a:81:b6:dd:56:26:05:4c:7c:d2:f5:
         55:44:15:f9:05:3a:fc:66:05:73:72:fe:f5:d4:b5:ae:21:77:
         af:86:ac:aa:dc:d0:81:c9:c4:73:df:d8:14:62:54:58:5a:a0:
         a9:44:35:8c:8d:56:4d:63:c8:50:30:90:97:a6:1b:46:10:c5:
         40:dd:28:08:bf:32:ab:34:11:cb:68:b7:79:0d:a2:81:e3:43:
         06:e9:0d:30:29:80:f0:3c:91:c2:49:b4:30:0f:9f:f1:ff:ff:
         8f:b6:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:39 2025 by rpki-client