Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad41c3eb-94dc-3a1b-8175-afb9de0fec1d.roa
File:                     ad41c3eb-94dc-3a1b-8175-afb9de0fec1d.roa (raw, json)
Hash identifier:          LJIKoBdEHjMdNBEs4djtalP1O533HpFl/qmWkG2xmdY=
Subject key identifier:   A4:B3:C1:73:27:19:C3:93:D6:54:91:6B:54:9D:71:88:1A:7B:43:1C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848CDE0FEEABCE9FE53B1833000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad41c3eb-94dc-3a1b-8175-afb9de0fec1d.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     11404
IP address blocks:        45.38.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e0:fe:ea:bc:e9:fe:53:b1:83:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=80677a93-2b1b-4e40-a04a-c4c1d67eb2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:0b:4c:75:c7:22:64:c7:29:3b:51:b6:ed:
                    81:fe:52:f3:59:cf:66:a4:39:6d:65:e5:b8:a6:47:
                    16:1c:60:d9:5d:34:2b:ee:ad:af:36:34:b2:a2:2d:
                    79:d0:f7:76:cc:4c:a5:a8:82:1f:57:85:98:b7:22:
                    7b:65:53:7f:61:03:3a:66:06:21:31:97:44:f0:1a:
                    eb:40:cf:9d:22:06:26:f0:4b:0f:cf:5e:17:b5:ab:
                    07:7f:35:0e:d0:27:f3:8a:77:8b:b1:a6:9d:3f:45:
                    0b:25:1a:21:61:03:62:2a:14:e1:d1:36:79:92:64:
                    52:95:9c:35:44:ef:83:43:d1:55:23:81:ee:93:8c:
                    e7:2c:11:9d:df:b8:cc:bb:49:fb:7a:f8:af:fc:46:
                    df:c5:9d:8f:70:a2:26:89:17:9f:41:81:d3:75:6d:
                    4b:ed:27:d6:ba:d4:55:81:e4:f5:7c:2f:5d:19:e1:
                    af:2f:24:0e:ec:25:d4:e5:0a:a4:e1:4e:b2:8e:70:
                    ec:40:31:03:94:32:d4:78:78:e5:04:30:e8:26:d3:
                    6a:b7:1c:b6:95:ad:b5:b7:ec:99:de:12:78:d0:df:
                    58:01:63:04:57:6a:bf:2c:06:f0:92:ae:d0:58:0e:
                    1d:2e:97:f6:77:89:40:ac:c8:a9:c1:81:e2:e7:0c:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:C1:73:27:19:C3:93:D6:54:91:6B:54:9D:71:88:1A:7B:43:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad41c3eb-94dc-3a1b-8175-afb9de0fec1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:a4:e9:d7:0c:81:44:d4:27:11:42:46:36:00:1e:6a:77:
         50:56:71:ad:d0:1c:66:28:b8:fc:e5:36:da:34:d8:83:d0:ec:
         1a:4a:a8:39:93:1d:1e:a3:00:db:98:9b:fb:c9:64:2b:ad:c2:
         14:ad:c9:1a:ba:bd:d8:4d:17:54:fb:7e:df:f5:75:cd:6c:c2:
         4a:63:28:ce:7b:17:e2:b2:66:d4:d0:cc:80:bd:a7:51:6b:e1:
         d4:c0:f1:f9:ca:2d:8f:b8:17:fe:1c:3f:f5:07:0a:5f:ed:12:
         01:9c:02:72:cc:3a:2e:50:71:3e:4a:06:ce:bb:54:d3:e2:bb:
         5b:f7:03:53:7f:2c:f5:f4:32:eb:79:5e:e4:c5:c0:97:4f:79:
         2c:8f:7e:c5:74:08:cf:10:95:83:6d:d0:55:a8:ff:6c:c3:b4:
         25:3c:98:e5:21:90:64:f2:a3:19:28:10:a8:c2:7e:e4:a1:f7:
         cb:b3:b8:34:48:73:b0:bd:18:a3:52:96:25:6a:d9:1f:1a:77:
         c5:a1:f4:b8:67:c5:78:c0:c8:d8:26:e1:41:27:02:ad:2d:f7:
         be:f9:e4:df:be:f7:16:6f:06:1e:10:fb:55:a1:70:ea:89:28:
         49:40:ef:fc:a9:ec:63:ec:77:71:ed:de:82:96:14:41:fa:8d:
         df:96:4a:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4P7qvOn+U7GDMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
ODA2NzdhOTMtMmIxYi00ZTQwLWEwNGEtYzRjMWQ2N2ViMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn80LTHXHImTHKTtRtu2B/lLzWc9mpDltZeW4
pkcWHGDZXTQr7q2vNjSyoi150Pd2zEylqIIfV4WYtyJ7ZVN/YQM6ZgYhMZdE8Brr
QM+dIgYm8EsPz14XtasHfzUO0CfzineLsaadP0ULJRohYQNiKhTh0TZ5kmRSlZw1
RO+DQ9FVI4Huk4znLBGd37jMu0n7eviv/EbfxZ2PcKImiRefQYHTdW1L7SfWutRV
geT1fC9dGeGvLyQO7CXU5Qqk4U6yjnDsQDEDlDLUeHjlBDDoJtNqtxy2la21t+yZ
3hJ40N9YAWMEV2q/LAbwkq7QWA4dLpf2d4lArMipwYHi5wyIwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSzwXMnGcOT1lSRa1SdcYgae0McMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWQ0MWMzZWItOTRkYy0z
YTFiLTgxNzUtYWZiOWRlMGZlYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqypOnXDIFE1CcRQkY2AB5qd1BWca3QHGYouPzlNto02IPQ7BpKqDmT
HR6jANuYm/vJZCutwhStyRq6vdhNF1T7ft/1dc1swkpjKM57F+KyZtTQzIC9p1Fr
4dTA8fnKLY+4F/4cP/UHCl/tEgGcAnLMOi5QcT5KBs67VNPiu1v3A1N/LPX0Mut5
XuTFwJdPeSyPfsV0CM8QlYNt0FWo/2zDtCU8mOUhkGTyoxkoEKjCfuSh98uzuDRI
c7C9GKNSliVq2R8ad8Wh9LhnxXjAyNgm4UEnAq0t97755N++9xZvBh4Q+1WhcOqJ
KElA7/yp7GPsd3Ht3oKWFEH6jd+WSj4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:26 2025 by rpki-client