Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0c0999a-7e78-39d9-bd0c-10c3780a3f59.roa
File:                     d0c0999a-7e78-39d9-bd0c-10c3780a3f59.roa (raw, json)
Hash identifier:          gxN65PkUQpk2UCi8i3jz0/ky/OjDtbnY0z+2SBZ4K3o=
Subject key identifier:   CE:7E:90:56:29:E4:2F:93:17:1A:D5:C3:CD:21:A5:58:D0:B9:ED:A7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF7DB8A16D26FDD809B61580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0c0999a-7e78-39d9-bd0c-10c3780a3f59.roa
Signing time:             Wed 19 Feb 2025 14:58:24 +0000
ROA not before:           Wed 19 Feb 2025 14:58:24 +0000
ROA not after:            Tue 20 May 2025 13:58:24 +0000
asID:                     18779
IP address blocks:        45.39.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:7d:b8:a1:6d:26:fd:d8:09:b6:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:58:24 2025 GMT
            Not After : May 20 13:58:24 2025 GMT
        Subject: CN=8a98de88-547f-4d1e-a512-c15acf939df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:b0:c2:e5:72:de:cd:45:db:af:be:8e:03:
                    ae:4f:c4:21:29:72:22:13:a4:e4:51:61:07:e0:b9:
                    72:15:69:03:b0:7b:8c:34:e1:ca:56:56:a1:61:e2:
                    91:01:7a:ec:a9:52:e7:f9:08:d8:f8:76:0d:3f:f1:
                    d8:b1:f7:18:95:df:f3:3b:e4:c4:4f:3f:90:46:ad:
                    83:22:63:2c:66:29:7e:b2:3a:71:bd:fe:c5:a3:a5:
                    02:78:27:79:5e:25:f4:d5:3f:4c:85:2e:80:25:ff:
                    79:45:00:b9:79:26:69:75:86:e6:9a:44:16:eb:7d:
                    05:5b:78:11:3c:e8:91:f4:53:09:99:57:0c:77:f5:
                    5d:a6:50:21:85:00:12:9c:58:41:6b:e8:aa:75:37:
                    e0:39:65:f7:fe:0f:df:62:be:0a:4c:25:f2:74:8a:
                    1a:ff:77:37:f7:3a:17:70:59:e3:94:62:75:4d:55:
                    93:b2:56:da:76:47:4b:fb:7b:0b:6c:3b:3a:46:bd:
                    92:90:67:db:b5:4b:38:bf:eb:4b:c9:53:34:6c:13:
                    20:65:00:c4:33:66:c2:60:38:a5:50:1a:51:91:77:
                    7c:f4:2d:2c:03:4b:76:8c:31:c0:cc:82:9f:fe:84:
                    dd:f0:aa:f2:e0:37:4b:da:15:29:94:fc:1c:d3:78:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:90:56:29:E4:2F:93:17:1A:D5:C3:CD:21:A5:58:D0:B9:ED:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0c0999a-7e78-39d9-bd0c-10c3780a3f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:bb:11:06:c3:0d:a0:b8:77:09:40:71:ab:fa:c2:f8:ca:
         be:64:ba:5f:3c:08:a0:83:c7:cb:4f:b2:0d:67:8f:ff:32:14:
         c8:6d:4a:f0:1d:84:7c:cc:e2:7c:07:f8:e1:53:aa:2e:95:b4:
         2f:a5:95:20:46:8a:85:ed:76:f5:f4:d9:ec:9c:65:59:ed:c6:
         94:06:7b:42:bb:0c:61:46:7f:ca:09:9f:53:07:00:0d:8f:31:
         d8:db:33:23:65:29:6b:0a:e8:f2:5a:e9:56:94:e1:fc:95:51:
         4d:82:d7:df:77:fd:62:67:aa:1c:7b:07:af:e8:da:5f:b9:7f:
         0c:30:ef:b0:af:34:e4:69:51:95:c0:c8:22:76:22:91:7b:f6:
         7f:b0:81:fe:04:d8:ce:4a:f4:ee:9a:10:4b:5b:d6:ed:aa:54:
         d1:e6:aa:61:f8:20:b2:35:22:8a:7e:37:57:b0:fa:08:54:de:
         05:12:16:0a:70:45:0f:65:e9:f4:35:19:b2:56:8b:52:4e:26:
         09:ef:2e:56:8a:89:3a:21:c7:b6:4a:ed:7d:27:0c:67:5e:2d:
         0b:d8:68:df:56:4b:cb:fc:88:1f:21:4c:51:9b:d6:cd:1e:8c:
         cd:ff:a7:2f:ef:f5:d6:94:31:35:2e:bf:ed:6f:3e:52:5c:3c:
         57:ea:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:14 2025 by rpki-client