Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa
File:                     0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa (raw, json)
Hash identifier:          e8JSyzc+eeJGLe4jGKWQ8xYu52+Oq+nBGfReDxYtrAY=
Subject key identifier:   36:87:27:53:77:55:0C:91:CF:4B:C3:A8:38:EF:EA:2C:63:88:F9:14
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285848617C2FB98A52C1F046624940
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa
Signing time:             Mon 30 Dec 2024 18:10:31 +0000
ROA not before:           Mon 30 Dec 2024 18:10:31 +0000
ROA not after:            Sun 30 Mar 2025 17:10:31 +0000
asID:                     81
IP address blocks:        152.45.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:7c:2f:b9:8a:52:c1:f0:46:62:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Dec 30 18:10:31 2024 GMT
            Not After : Mar 30 17:10:31 2025 GMT
        Subject: CN=07d4981b-7bdc-4df3-905e-8987ffa5f4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:f4:fe:16:c0:27:7e:f2:95:78:82:f1:a3:
                    06:29:48:e1:7a:0a:1e:29:f9:3f:88:67:71:47:ed:
                    6c:b8:fd:e1:23:e1:4e:6d:85:90:ab:9c:03:93:9b:
                    42:28:cf:29:33:35:b3:6e:32:67:ff:0d:da:1f:c5:
                    5e:35:a5:d5:d7:67:c3:66:5f:ab:01:1c:77:e3:66:
                    3e:21:ac:f9:67:4b:b8:3c:42:b0:87:d4:e9:77:ea:
                    77:eb:fe:7e:05:c0:cd:08:93:e1:f6:1f:e3:33:fc:
                    7b:ad:68:59:4e:de:75:4c:47:db:b4:a1:48:a3:92:
                    a3:37:cd:33:71:8c:a1:2c:8b:8d:54:5f:a3:1b:2d:
                    fa:64:a2:e9:33:ec:45:04:83:1a:31:9c:d0:2c:00:
                    64:42:39:63:0b:44:d1:ec:fa:4a:c6:f6:f2:a0:87:
                    42:b4:9d:e0:02:b0:76:77:8a:1e:bc:17:97:99:1f:
                    92:9b:49:93:d9:96:37:c6:a2:ed:03:8a:79:e3:0d:
                    31:d8:91:22:62:05:85:0d:00:83:55:1e:ac:c5:73:
                    87:9c:91:d8:50:d5:83:87:b9:f6:77:bf:12:26:c9:
                    8a:c2:be:9d:59:56:4c:f5:96:c1:63:0c:fc:d0:f4:
                    f6:a1:8b:48:3a:ce:7c:fc:79:ee:58:b1:d2:f5:5b:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:27:53:77:55:0C:91:CF:4B:C3:A8:38:EF:EA:2C:63:88:F9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:2c:ce:55:4b:ad:3f:4f:3c:c9:97:e9:56:11:23:be:2b:
         2e:b3:19:0f:b5:de:ff:da:f6:02:60:52:4c:36:64:a3:8a:df:
         27:3f:bb:79:22:7d:77:4c:3a:af:d4:11:cf:b7:1a:9d:68:cb:
         3c:f0:87:5b:7d:e4:7c:21:2b:a8:38:06:01:d1:94:64:c3:8d:
         c9:2b:48:b2:cc:33:68:00:f7:a7:2a:b5:0d:02:84:0a:55:cb:
         40:83:1e:c5:f6:37:81:c9:9a:88:5e:02:10:7f:8e:8d:81:92:
         59:6e:37:18:fa:06:32:68:a5:48:d4:af:01:73:9e:87:de:10:
         39:8c:35:0e:8d:a4:b4:75:78:e8:db:b1:40:8f:bd:36:43:6b:
         c6:f0:15:c0:da:7d:8f:f1:fd:c7:5f:36:2a:0c:f2:71:b1:43:
         43:82:f8:f2:37:02:55:87:d3:71:56:8b:12:cf:c9:51:f4:8c:
         d0:bb:ac:7e:8d:8a:14:99:cf:ba:de:78:c5:13:0a:e1:f6:2b:
         93:f1:15:13:8a:33:f8:01:c8:37:e8:c0:a6:fd:08:ae:85:4b:
         9a:69:2a:0a:6c:52:51:af:77:a9:9f:99:4a:7e:0b:e5:73:71:
         77:7f:6d:7d:fe:f4:61:ee:d1:2f:c2:98:ce:ad:19:79:55:25:
         0f:26:86:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhhfC+5ilLB8EZiSUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzMVoXDTI1MDMzMDE3MTAzMVowLzEtMCsGA1UEAxMk
MDdkNDk4MWItN2JkYy00ZGYzLTkwNWUtODk4N2ZmYTVmNGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxID0/hbAJ37ylXiC8aMGKUjhegoeKfk/iGdx
R+1suP3hI+FObYWQq5wDk5tCKM8pMzWzbjJn/w3aH8VeNaXV12fDZl+rARx342Y+
Iaz5Z0u4PEKwh9Tpd+p36/5+BcDNCJPh9h/jM/x7rWhZTt51TEfbtKFIo5KjN80z
cYyhLIuNVF+jGy36ZKLpM+xFBIMaMZzQLABkQjljC0TR7PpKxvbyoIdCtJ3gArB2
d4oevBeXmR+Sm0mT2ZY3xqLtA4p54w0x2JEiYgWFDQCDVR6sxXOHnJHYUNWDh7n2
d78SJsmKwr6dWVZM9ZbBYwz80PT2oYtIOs58/HnuWLHS9VvELwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDaHJ1N3VQyRz0vDqDjv6ixjiPkUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMGU5OTAyZDMtNmFmZi0z
YjA3LWI0MmMtYTE4MmZiNjQ3ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmC0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFrQszlVLrT9PPMmX6VYRI74rLrMZD7Xe/9r2AmBSTDZko4rfJz+7eSJ9
d0w6r9QRz7canWjLPPCHW33kfCErqDgGAdGUZMONyStIsswzaAD3pyq1DQKEClXL
QIMexfY3gcmaiF4CEH+OjYGSWW43GPoGMmilSNSvAXOeh94QOYw1Do2ktHV46Nux
QI+9NkNrxvAVwNp9j/H9x182KgzycbFDQ4L48jcCVYfTcVaLEs/JUfSM0Lusfo2K
FJnPut54xRMK4fYrk/EVE4oz+AHIN+jApv0IroVLmmkqCmxSUa93qZ+ZSn4L5XNx
d39tff70Ye7RL8KYzq0ZeVUlDyaG4A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:42 2025 by rpki-client