Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/94d8ef5c-0b27-3bdd-9ac5-18c729474b88.roa
File:                     94d8ef5c-0b27-3bdd-9ac5-18c729474b88.roa (raw, json)
Hash identifier:          SybQ3KNYh0a5kAi8/C7d12hNci/YM/z5NOkhPifaTRA=
Subject key identifier:   04:5E:3E:08:72:CF:54:D7:3E:6D:68:8F:68:06:54:5D:1B:4A:8F:68
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412BAA02327C57D2B3FFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/94d8ef5c-0b27-3bdd-9ac5-18c729474b88.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        45.38.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2b:aa:02:32:7c:57:d2:b3:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=0749d493-e00e-4e8e-9f61-b39d0d8ca584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:4b:d9:14:ef:c8:62:d2:fb:de:84:a4:e5:
                    cd:f5:98:20:a6:db:f2:39:1a:3d:96:57:1d:6b:98:
                    7b:a7:99:c3:78:ea:f3:cf:52:d5:88:80:1b:db:1b:
                    bb:8c:d7:9d:98:8c:7f:d0:3c:4d:ba:dc:c8:12:35:
                    9f:32:73:58:f0:d7:32:c9:f3:79:fb:cd:bd:84:14:
                    d6:2a:71:f0:aa:e8:36:b7:88:4b:40:ca:49:2d:70:
                    9d:c5:7e:90:ee:52:2e:0f:92:22:e9:93:31:25:96:
                    b4:58:b2:75:9c:bd:7a:2f:d3:c9:5e:7f:a2:22:97:
                    e3:cb:4a:97:e7:97:cc:22:83:73:13:e3:84:ed:0e:
                    de:f9:08:3b:6d:c6:eb:a7:ec:1f:e3:76:e1:0b:bc:
                    88:39:fc:4a:1d:31:f9:e3:86:b6:7a:6a:b2:72:a1:
                    6c:f5:f1:b8:56:db:a1:12:16:d3:3b:11:a2:44:a7:
                    c3:30:b0:78:31:e4:a0:be:55:8f:81:57:f8:d3:f9:
                    ef:b8:ed:41:dc:09:52:2c:0c:1e:96:48:0d:f6:6d:
                    ed:87:11:80:70:e7:e0:cd:4a:95:f3:82:53:e2:b4:
                    b7:3e:17:7c:a0:54:78:81:da:05:73:3d:0f:3b:e3:
                    5e:f3:0a:15:aa:5f:d4:c3:56:fe:58:48:ba:ff:05:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5E:3E:08:72:CF:54:D7:3E:6D:68:8F:68:06:54:5D:1B:4A:8F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/94d8ef5c-0b27-3bdd-9ac5-18c729474b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2d:a2:2a:44:ef:f0:30:11:4f:ba:8f:37:19:88:d2:4f:31:
         79:98:2a:bf:ac:0c:63:e0:34:12:f3:97:1c:b9:2d:75:8e:a4:
         68:04:6f:e9:ae:f9:f3:32:bc:23:e2:61:18:73:06:b0:3c:a8:
         52:c4:90:17:ca:45:82:62:18:95:c3:46:c9:c1:51:f4:91:9b:
         0b:c0:9c:43:e6:18:80:e1:9a:20:e8:5b:d6:a0:0d:12:ee:0a:
         42:19:ce:5b:6b:04:ed:f3:68:29:b7:40:d3:d6:72:74:c7:b5:
         b3:f1:56:4b:c7:54:ec:5f:2b:15:e0:45:62:fc:3d:12:2c:b6:
         ad:5a:0c:b0:f1:42:bb:75:ab:96:fb:5c:60:59:c6:1e:ca:b3:
         9a:11:05:f3:af:c4:3d:f3:df:7b:83:4e:8a:a5:b1:86:bf:d8:
         d6:60:3c:74:94:ef:89:64:1d:d4:bc:bc:f6:3e:25:4e:e6:1a:
         dc:a2:ff:8b:b7:50:82:fa:2b:9f:3e:1b:14:67:56:ff:e9:45:
         f1:7c:39:64:bb:74:b4:8c:6f:d9:97:3e:15:b1:b5:f2:16:42:
         a4:8f:b1:ff:b2:b6:53:81:a7:a0:52:2d:b9:fa:13:71:e8:74:
         bd:56:35:21:38:89:d9:5c:29:f1:a7:3a:0f:d4:62:50:52:d6:
         40:bb:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----