Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3488373f-b710-320e-8525-5aadba6082fe.roa
File:                     3488373f-b710-320e-8525-5aadba6082fe.roa (raw, json)
Hash identifier:          oHWbMgMtAiEzHD5MpCoCVHGWZ3Q3gtRQw432TQIZamY=
Subject key identifier:   B1:15:50:93:FB:86:9B:CE:FD:92:1B:34:F0:2A:64:EA:67:70:88:04
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858484DE6ED6E2EF50CFFD0692600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3488373f-b710-320e-8525-5aadba6082fe.roa
Signing time:             Mon 23 Dec 2024 17:49:25 +0000
ROA not before:           Mon 23 Dec 2024 17:49:25 +0000
ROA not after:            Sun 23 Mar 2025 16:49:25 +0000
asID:                     212238
IP address blocks:        45.39.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:e6:ed:6e:2e:f5:0c:ff:d0:69:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 23 17:49:25 2024 GMT
            Not After : Mar 23 16:49:25 2025 GMT
        Subject: CN=2b01205f-2c3b-48a1-9b79-16221daec350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:ae:85:b9:ba:17:d2:af:90:83:0a:d6:c9:
                    14:86:a0:21:7a:4d:05:1c:71:f9:d3:6f:47:91:e7:
                    67:b7:61:26:0b:e5:4e:0f:b5:79:df:58:3c:bc:e9:
                    89:e4:83:40:48:40:b3:b5:6f:00:a8:34:ef:b9:84:
                    bd:35:85:f0:aa:f8:e8:d5:40:ca:86:82:d4:16:85:
                    3d:96:91:1b:1a:31:4c:e5:01:91:38:3a:8b:21:fe:
                    07:25:9b:da:9f:2d:07:48:61:40:6a:21:27:07:b9:
                    ed:f9:42:36:67:42:04:4f:ea:7a:38:00:46:12:a3:
                    ad:44:47:f0:2f:94:ff:6c:0e:68:a3:07:27:b4:8e:
                    3c:51:d3:c7:03:ad:3f:8c:17:41:ef:a7:ad:18:b9:
                    d1:b0:b2:66:88:ba:27:17:a0:cf:ce:49:65:9e:c6:
                    af:72:12:65:f6:23:90:54:5a:b9:37:a3:ce:11:ec:
                    58:9d:94:b7:6b:17:b1:d9:49:13:31:1e:2a:b3:b1:
                    ca:12:a4:65:63:3e:bd:8a:cc:3d:ab:03:ab:02:81:
                    2e:19:a1:a4:5c:fd:e3:90:0a:98:70:2d:d3:b0:a1:
                    5b:55:95:18:c5:b0:45:01:f0:52:2e:ee:5a:67:c6:
                    23:85:af:8a:05:56:15:8a:da:a9:3d:5c:00:c4:d1:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:15:50:93:FB:86:9B:CE:FD:92:1B:34:F0:2A:64:EA:67:70:88:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3488373f-b710-320e-8525-5aadba6082fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:69:a4:ee:5e:97:a3:d6:fe:fc:9f:f2:ca:0a:76:39:a8:58:
         79:1c:5e:b1:58:83:61:6b:82:20:3f:3d:6f:13:ad:01:ad:b8:
         e4:90:b1:72:55:ac:f7:18:17:27:ac:ad:cf:be:84:fc:fd:dd:
         21:64:88:99:db:0e:8a:bc:ae:31:9a:53:30:11:19:85:4a:8b:
         7c:46:02:79:67:4a:fe:a5:21:69:fb:2b:6f:5b:58:24:13:45:
         56:3c:45:11:7e:da:9b:0b:ef:db:e5:57:30:ff:86:74:68:57:
         2c:9d:d8:98:79:8a:da:3e:73:8c:98:ab:46:ba:7e:24:05:95:
         71:79:1f:91:51:a6:d9:98:e4:90:9e:5c:d3:69:46:de:28:c7:
         5f:56:ca:97:a8:1c:b4:65:29:54:62:e8:e4:66:ca:ae:44:2f:
         1c:4e:f4:51:7b:56:63:d1:f5:b2:af:3d:9b:4b:ed:11:40:4a:
         01:e0:cd:b9:b7:41:00:10:ef:fb:64:58:59:f1:ac:47:07:0f:
         a1:1f:29:99:5d:5a:64:1e:8e:63:3a:1e:84:29:b6:ad:dd:34:
         8a:eb:00:bc:82:f0:f5:f3:be:f8:f6:ca:7c:08:d8:1f:a5:bb:
         d9:3e:8a:40:da:2b:b8:4a:03:b5:86:07:c9:83:61:df:a1:ef:
         df:8b:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:49 2025 by rpki-client