Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2296e7d7-e1e2-3e15-b9c6-4690f2826dc8.roa
File:                     2296e7d7-e1e2-3e15-b9c6-4690f2826dc8.roa (raw, json)
Hash identifier:          90c/vivjqVSzBUuyOxJ/QPMMxV3oFQ0vlRlDKC/OMCk=
Subject key identifier:   70:A8:14:F8:D1:52:7A:A5:2E:44:59:88:4E:D3:38:7A:62:52:8F:3A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584860FF91102CBC4C1876957500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2296e7d7-e1e2-3e15-b9c6-4690f2826dc8.roa
Signing time:             Mon 30 Dec 2024 13:59:25 +0000
ROA not before:           Mon 30 Dec 2024 13:59:25 +0000
ROA not after:            Sun 30 Mar 2025 12:59:25 +0000
asID:                     264617
IP address blocks:        45.39.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:60:ff:91:10:2c:bc:4c:18:76:95:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 30 13:59:25 2024 GMT
            Not After : Mar 30 12:59:25 2025 GMT
        Subject: CN=0abec9a7-3752-4db8-b1e7-cb1b9c12eea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:2a:f2:f0:f0:6d:fe:dc:d5:24:ad:7f:10:
                    44:53:a8:6f:45:57:ef:1c:52:15:65:95:46:64:d3:
                    f3:3b:66:ac:2f:aa:c8:c5:a2:03:0f:ea:6c:85:80:
                    a6:3b:e0:86:6e:2a:a8:7d:83:6b:ba:3a:63:45:28:
                    85:75:76:95:c9:b7:0e:d3:59:e4:c5:85:7e:cd:5a:
                    72:7c:ce:54:cc:73:98:13:e8:3c:99:a2:df:c2:1f:
                    22:d6:f6:c7:e5:30:64:40:b6:2c:50:30:d1:e5:ec:
                    30:98:ab:ff:ee:22:4c:eb:e3:c7:52:7b:dd:a5:6f:
                    33:2b:66:94:c8:95:17:2c:73:65:dc:16:b7:26:9b:
                    51:4c:c1:11:b3:c9:48:0f:20:35:13:9f:bf:b3:01:
                    4e:91:5a:38:60:95:dd:47:a9:3f:69:61:20:8b:51:
                    81:77:0e:0b:9e:02:82:27:1a:9a:59:9b:0f:2f:6b:
                    13:ae:25:a0:c3:b1:e8:f1:f8:fe:ab:a2:22:d4:15:
                    9d:54:8e:7d:34:fb:bd:f5:ae:bd:2d:1b:81:bb:7c:
                    a4:91:94:64:53:f8:b3:7d:62:91:a2:a6:0c:c7:fb:
                    f6:f8:96:a7:23:b0:8a:38:e0:07:2e:bf:3f:28:7c:
                    b4:d0:a0:ca:9b:70:67:5b:62:d6:b4:5a:e9:ae:ed:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A8:14:F8:D1:52:7A:A5:2E:44:59:88:4E:D3:38:7A:62:52:8F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2296e7d7-e1e2-3e15-b9c6-4690f2826dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:93:18:64:fd:36:29:1e:b4:7d:ea:4b:a7:86:c8:b5:4f:
         cd:89:8a:94:fd:a9:41:55:3a:53:4c:a1:f7:fa:19:7e:f7:53:
         73:1a:55:21:ca:74:93:86:db:1b:d2:c7:79:06:51:5f:21:a9:
         20:86:f3:fd:05:e0:25:b0:ec:34:59:04:fe:68:3f:fa:c2:9f:
         17:4d:3c:35:13:ed:30:3b:24:1d:34:83:2f:89:9f:5f:57:da:
         7a:fd:e7:77:b5:c3:18:53:48:13:b9:a3:f3:70:80:36:73:b2:
         63:93:4e:ea:6e:43:72:3d:99:19:cf:4f:95:f3:ca:4f:f1:fa:
         40:46:cb:84:8b:ee:38:ed:e6:87:d5:89:f1:92:a4:09:ad:05:
         d7:75:d2:ec:87:c4:e3:20:e6:9b:c9:33:a9:f9:aa:78:8c:30:
         fc:e7:32:e6:8f:04:cc:ce:b1:e1:69:9e:e6:36:19:19:a3:3b:
         59:00:49:78:fb:dd:30:ef:d4:9a:11:8b:72:6c:d6:ea:88:db:
         97:0b:cf:ee:20:92:13:5c:66:11:10:b0:ee:ca:70:e3:7d:86:
         61:48:40:94:44:57:fd:9b:b6:1c:d2:00:da:b1:d3:1a:b8:30:
         72:dd:01:9e:c2:2e:77:86:63:f0:9d:b0:89:53:08:98:bc:4d:
         29:dc:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:24 2025 by rpki-client