Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08f681c8-e7c2-30f3-8e4e-e524acd37901.roa
File:                     08f681c8-e7c2-30f3-8e4e-e524acd37901.roa (raw, json)
Hash identifier:          NmtM6W0CZr/f7pt66d3yTi6pfCTZ24IIntREexhYCZ4=
Subject key identifier:   18:43:76:F2:40:21:8F:30:F3:F6:31:64:A9:63:E8:B3:C5:F0:B7:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858480EA504D9F29A2557D1831EA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08f681c8-e7c2-30f3-8e4e-e524acd37901.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     400536
IP address blocks:        45.38.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:04:d9:f2:9a:25:57:d1:83:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=0edc7578-9a66-421d-b3ad-c1a22db27461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:81:44:69:42:d3:0d:21:38:21:0d:58:bf:
                    70:03:d3:84:41:51:39:4b:5c:38:19:59:74:11:b1:
                    d9:e5:ca:80:a2:d5:40:bb:6a:60:ca:9a:12:1a:3f:
                    92:30:da:d5:13:3c:dc:92:7b:7c:4b:a7:34:54:9c:
                    d1:f4:bd:48:46:c8:66:e2:1d:2c:b2:99:0f:1a:1d:
                    13:ab:c6:83:4c:c3:61:9e:94:e5:3b:24:9b:55:dd:
                    be:c2:68:e9:11:2b:3f:cb:09:97:3b:a3:5e:f1:6f:
                    29:36:80:2b:69:9f:aa:d7:f8:18:f0:a9:4a:05:db:
                    c2:9e:81:5b:0c:0b:f5:40:05:6b:a6:36:9b:2c:33:
                    2c:67:b9:4e:db:f5:0b:ec:d0:ab:54:64:09:47:5e:
                    73:02:d2:b4:2f:f1:b7:9c:f7:1c:90:c7:9d:a7:b6:
                    9e:e0:b1:34:28:92:6a:e8:69:c1:b9:50:6b:db:0a:
                    c2:55:15:9e:2c:b6:f4:3f:1c:d6:e7:86:fb:b1:0d:
                    57:dc:e2:58:1e:2d:d6:a1:d2:07:f7:60:45:a7:09:
                    3c:08:7d:08:0b:80:de:ec:31:fd:9e:0a:51:78:8b:
                    88:0d:9c:ef:b2:33:18:55:5e:d9:f0:71:36:d9:b7:
                    90:4c:e3:e9:af:11:76:b1:b5:00:1e:24:2e:df:6d:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:76:F2:40:21:8F:30:F3:F6:31:64:A9:63:E8:B3:C5:F0:B7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08f681c8-e7c2-30f3-8e4e-e524acd37901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:42:52:ca:25:44:d4:af:7e:f7:c0:7b:f6:ee:4f:fb:a1:
         61:c8:e5:4d:04:ca:41:55:c5:d7:94:3d:ed:70:ca:92:42:3e:
         68:89:e9:5b:04:78:c1:64:61:f2:58:07:9f:20:20:38:66:4e:
         ec:5a:eb:f4:96:b0:31:8c:b3:3f:8b:3d:a5:02:ae:46:a8:5a:
         f0:e3:10:8c:00:d4:f6:a9:1f:05:77:e0:7c:f2:1f:6b:f2:49:
         07:2d:52:00:5b:6b:28:e2:cd:bd:18:3a:2e:9e:04:61:91:82:
         87:b0:73:9b:aa:20:20:d0:3b:72:71:6b:1e:ed:e4:65:9d:ce:
         3d:5e:1f:f9:86:d0:05:a5:a1:5c:0d:76:93:d9:0e:3a:84:f4:
         e2:1b:1d:77:ca:23:4f:b9:22:e3:f4:85:5c:d4:02:2f:3c:0f:
         24:ad:38:fa:c4:a7:c8:7c:08:2e:1b:00:3b:5c:ca:ec:8f:63:
         99:74:4b:89:4d:31:f4:85:9a:33:9b:bd:4c:19:5a:2f:b1:c3:
         d7:56:ee:68:a4:db:43:97:8a:f9:90:ce:6c:c7:66:1e:8e:6f:
         62:1f:44:df:13:8a:33:57:c7:09:ab:7b:53:01:3c:65:d7:ea:
         5e:6e:76:22:b6:de:73:2c:3c:c7:ce:38:6f:87:9f:f1:5e:fc:
         4f:e5:3c:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQTZ8polV9GDHqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
MGVkYzc1NzgtOWE2Ni00MjFkLWIzYWQtYzFhMjJkYjI3NDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwiBRGlC0w0hOCENWL9wA9OEQVE5S1w4GVl0
EbHZ5cqAotVAu2pgypoSGj+SMNrVEzzcknt8S6c0VJzR9L1IRshm4h0sspkPGh0T
q8aDTMNhnpTlOySbVd2+wmjpESs/ywmXO6Ne8W8pNoAraZ+q1/gY8KlKBdvCnoFb
DAv1QAVrpjabLDMsZ7lO2/UL7NCrVGQJR15zAtK0L/G3nPcckMedp7ae4LE0KJJq
6GnBuVBr2wrCVRWeLLb0PxzW54b7sQ1X3OJYHi3WodIH92BFpwk8CH0IC4De7DH9
ngpReIuIDZzvsjMYVV7Z8HE22beQTOPprxF2sbUAHiQu321BnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhDdvJAIY8w8/YxZKlj6LPF8LcBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDhmNjgxYzgtZTdjMi0z
MGYzLThlNGUtZTUyNGFjZDM3OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+1QlLKJUTUr373wHv27k/7oWHI5U0EykFVxdeUPe1wypJCPmiJ6VsE
eMFkYfJYB58gIDhmTuxa6/SWsDGMsz+LPaUCrkaoWvDjEIwA1PapHwV34HzyH2vy
SQctUgBbayjizb0YOi6eBGGRgoewc5uqICDQO3Jxax7t5GWdzj1eH/mG0AWloVwN
dpPZDjqE9OIbHXfKI0+5IuP0hVzUAi88DyStOPrEp8h8CC4bADtcyuyPY5l0S4lN
MfSFmjObvUwZWi+xw9dW7mik20OXivmQzmzHZh6Ob2IfRN8TijNXxwmre1MBPGXX
6l5udiK23nMsPMfOOG+Hn/Fe/E/lPAQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:52:09 2025 by rpki-client