Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffd77761-f476-31a8-b80e-d92394261bad.roa
File:                     ffd77761-f476-31a8-b80e-d92394261bad.roa (raw, json)
Hash identifier:          il3Ufu/XhuQpo0LBtk9DgvYtlq020NiUAMEyTCo/+to=
Subject key identifier:   03:77:9D:CE:42:53:3D:DE:45:B0:24:43:73:E7:6A:C7:C5:BC:8C:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858491D7173114C31C7EC5E95F700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffd77761-f476-31a8-b80e-d92394261bad.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     8881
IP address blocks:        45.39.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:73:11:4c:31:c7:ec:5e:95:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=fa5cb0d5-fcdd-44ab-81f5-165bfcca662e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:d3:a7:21:d7:b5:f2:a3:40:42:53:3e:79:
                    87:f1:77:0f:b4:df:72:95:09:98:01:c4:67:09:03:
                    82:81:04:37:70:ec:1e:2e:d0:c2:04:ae:00:70:15:
                    25:ff:72:77:4e:7c:70:98:40:dd:b2:91:bf:29:b6:
                    c8:12:93:69:7b:68:78:8d:b4:30:86:95:8b:f8:a2:
                    a7:d6:14:83:51:11:c2:32:14:04:88:bb:6e:3d:87:
                    88:ff:ee:86:71:d6:d4:ac:21:6c:34:87:36:53:f0:
                    db:b0:b2:85:57:6d:7b:bf:1b:eb:07:e7:ee:9e:95:
                    1d:35:0e:70:e4:76:b2:1d:cf:13:47:cd:ba:d7:f1:
                    cc:fb:cf:dd:f2:89:e9:10:db:8d:09:17:bb:5e:43:
                    89:95:c9:88:9d:05:66:c7:be:48:31:d5:e7:b2:53:
                    5a:ae:f8:59:2d:d5:67:2e:03:1f:9a:7b:af:8b:5d:
                    29:ed:0a:92:ac:3e:4c:fd:61:67:69:dc:47:d3:52:
                    89:28:42:f6:ba:6f:93:5f:c8:e6:05:5d:e6:32:0b:
                    67:d5:bb:ea:80:ac:ad:24:f1:59:06:75:00:34:9f:
                    86:6b:b3:98:58:07:5f:5d:ef:fc:23:aa:38:c7:43:
                    f5:f0:75:6d:5c:70:36:4c:b9:22:e8:1d:75:fb:88:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:9D:CE:42:53:3D:DE:45:B0:24:43:73:E7:6A:C7:C5:BC:8C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffd77761-f476-31a8-b80e-d92394261bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:88:c7:67:ab:03:8f:e1:44:fa:e2:dc:c7:35:79:10:2a:
         cd:19:24:97:9a:fb:a3:ab:00:fb:7d:a5:38:64:88:5b:54:8d:
         aa:f3:c3:fe:7e:09:f1:09:d3:37:8b:bd:c3:dc:56:9c:00:a5:
         56:63:b8:c4:67:ae:df:4c:d9:10:c2:f2:e5:9e:7e:bc:2f:61:
         f8:b7:f9:28:47:ba:82:ee:57:14:52:03:49:fc:94:8e:60:ef:
         03:ae:82:e7:b8:61:6b:67:f1:46:5f:5c:d5:c5:11:95:71:51:
         4b:7c:f4:8e:7e:9c:86:35:bb:3a:47:a4:49:f8:01:71:c1:98:
         a6:e4:5b:61:a3:86:f3:2b:d4:85:c4:89:7b:53:37:81:33:5a:
         f6:c5:93:36:2f:81:4b:9d:26:db:2c:27:ff:f8:af:ab:70:93:
         f6:c9:8f:f5:b7:26:d5:ee:5c:93:03:d6:52:7c:df:2a:6c:43:
         d3:97:29:26:9e:55:17:65:b6:aa:62:a9:25:96:69:a6:82:dd:
         7f:5c:e7:ab:ab:6a:55:8e:89:ae:92:e3:f2:ed:86:e9:94:91:
         62:36:98:f5:01:a1:4f:44:3f:6a:a3:92:c4:52:48:44:84:32:
         15:bd:4a:6a:87:fc:84:16:a4:70:2c:82:87:45:6e:12:ef:1a:
         65:df:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:37 2025 by rpki-client