Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac2ac8eb-0ce0-3b5d-a652-7b38baa0e27f.roa
File:                     ac2ac8eb-0ce0-3b5d-a652-7b38baa0e27f.roa (raw, json)
Hash identifier:          j8bOIUzb1kqa0hsmfqr5x7Cawb4bnGkivEsNmG7vONg=
Subject key identifier:   DB:28:DD:68:A0:2C:02:0E:B9:5E:39:97:DB:8A:EC:76:EC:23:0B:2E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB4A7ABBC25B9090FEE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac2ac8eb-0ce0-3b5d-a652-7b38baa0e27f.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     9009
IP address blocks:        45.38.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b4:a7:ab:bc:25:b9:09:0f:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=c012f70a-9ab5-4adc-a629-2e7b8e5b0550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:66:8f:0b:33:c6:3c:b7:05:cc:7e:a2:65:
                    d2:0b:5b:89:40:ae:d4:a1:b9:8e:40:ec:87:c0:21:
                    b4:23:4f:aa:7e:f2:77:58:8d:bb:94:02:0e:ef:72:
                    54:c3:95:c0:53:99:f7:95:cc:47:42:7d:25:68:37:
                    fe:2f:2c:48:f2:c7:03:7e:12:2a:46:1f:7f:e3:24:
                    95:26:cb:82:45:5d:a3:6e:16:f2:a9:b1:71:3e:56:
                    99:4c:96:9c:70:a7:76:c4:54:d1:1d:6f:30:fd:7c:
                    9b:e4:c7:8a:54:4f:91:81:d9:9e:b8:55:5b:9f:45:
                    c2:21:be:49:d9:cb:6e:b9:09:cf:ff:2e:fa:3e:61:
                    48:2e:65:f6:0d:98:36:f1:f8:32:65:e6:3f:4e:08:
                    e8:49:66:b0:21:fa:f8:21:8c:81:09:bd:2b:90:dd:
                    6b:3d:b8:6b:3d:57:92:d1:c4:68:b3:74:7e:72:25:
                    9c:6c:c7:90:c9:47:1d:54:fb:de:35:a1:23:7d:15:
                    ed:e5:36:df:0f:39:5f:53:39:5d:fe:ad:44:66:a2:
                    5c:55:79:e5:81:ec:a7:ad:d5:fa:0f:2d:91:40:39:
                    9a:9b:c8:10:1f:9d:79:74:fc:29:ee:ca:cd:73:0d:
                    cf:dc:8a:6d:97:1c:14:bd:31:49:19:b2:fb:17:5d:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:DD:68:A0:2C:02:0E:B9:5E:39:97:DB:8A:EC:76:EC:23:0B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac2ac8eb-0ce0-3b5d-a652-7b38baa0e27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:f8:d6:eb:c5:11:dc:66:9a:2c:63:bc:b9:03:6a:c0:db:
         e0:31:cc:05:be:46:73:22:4d:bc:54:89:2d:0a:a0:c2:49:b7:
         89:25:1f:26:bc:06:8f:89:62:25:36:d6:49:ed:12:03:66:2f:
         3e:8e:c5:01:2a:a6:a0:a4:d1:dc:b1:bf:67:4a:ec:9d:db:8b:
         21:13:b9:63:b7:cd:84:74:d1:40:96:dd:96:f7:63:eb:05:8a:
         c3:52:1a:79:02:96:b5:23:7a:10:7e:71:0f:86:7e:02:6e:a0:
         20:7b:5b:31:6b:3d:1e:87:c6:a6:4e:a2:3b:4f:6d:f4:68:49:
         f2:57:d8:b5:f8:a9:04:24:d8:fd:e5:0a:67:a7:17:44:b3:c9:
         be:13:34:4b:2a:0d:a2:f9:18:f8:42:a4:14:ed:91:9e:d0:22:
         4b:03:08:6d:71:81:2c:82:19:0f:9a:d0:8a:58:07:a2:b0:34:
         b8:16:fa:7e:5e:54:c2:7f:86:5a:2c:67:b5:c2:96:77:38:75:
         33:42:9e:9f:59:1a:de:df:1e:79:8f:7e:d5:f6:80:ba:3b:39:
         c3:b4:dc:09:51:cb:56:d2:81:bc:5e:45:63:d2:c6:dd:f5:2d:
         6d:5a:0d:ae:15:1b:49:5f:ae:52:4c:b3:26:22:30:ca:96:f5:
         62:6f:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----