Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5af64c0e-51f3-309d-8596-64a10958bf50.roa
File:                     5af64c0e-51f3-309d-8596-64a10958bf50.roa (raw, json)
Hash identifier:          zc1cwYOgTlt/okKSK4clN5CqF531rT5Y49oLFNsN8u8=
Subject key identifier:   37:E0:9A:57:A5:33:13:1B:D2:27:BC:55:4A:5B:DE:62:6C:F9:B9:EC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858483D7A3255AE4CFEA5EDDEF780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5af64c0e-51f3-309d-8596-64a10958bf50.roa
Signing time:             Tue 17 Dec 2024 20:37:24 +0000
ROA not before:           Tue 17 Dec 2024 20:37:24 +0000
ROA not after:            Mon 17 Mar 2025 19:37:24 +0000
asID:                     8881
IP address blocks:        45.39.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:7a:32:55:ae:4c:fe:a5:ed:de:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 17 20:37:24 2024 GMT
            Not After : Mar 17 19:37:24 2025 GMT
        Subject: CN=73df75db-4556-4a72-a68e-953f1437a83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:d3:56:22:79:68:4c:17:59:56:6d:48:14:
                    4f:09:80:f4:e3:5e:67:54:64:b4:ae:a2:fc:d9:ce:
                    21:bc:00:3b:ab:cf:d3:b7:6d:7d:00:dc:be:15:5f:
                    17:03:3e:0e:19:17:98:6c:fb:06:5a:2a:39:a9:f7:
                    a8:85:c6:0d:1a:5f:c8:42:b0:8d:27:ee:3b:1b:4d:
                    4e:77:e4:b7:4c:b4:50:2d:bb:2f:32:93:1c:c5:48:
                    0a:1f:92:8f:28:53:3c:db:71:08:dc:1a:7a:e2:74:
                    b5:84:28:f3:1f:8f:14:b7:00:93:fd:7c:a6:39:99:
                    e9:1f:8f:fc:ab:06:9a:75:c2:97:0f:e4:45:6e:3f:
                    14:43:a3:af:7e:ba:05:1b:cc:af:7e:c8:a1:67:9b:
                    7e:fb:1e:a8:2a:8c:e7:11:e4:a6:1f:9c:ec:2f:e8:
                    dc:67:a5:e3:23:34:ab:98:ca:ab:ac:f7:3d:dc:2d:
                    54:c0:45:21:50:7f:cc:73:29:2f:60:ed:07:9d:46:
                    82:67:26:37:ac:5c:24:c5:ae:d3:37:c8:7a:3a:ba:
                    76:5f:21:fb:b6:71:f1:7b:ef:87:6e:cb:ff:e5:da:
                    92:6f:36:df:b9:98:2f:4b:9c:d7:33:14:e7:b2:1c:
                    a9:89:d3:74:ff:66:77:ea:82:29:40:b4:88:8a:9e:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:9A:57:A5:33:13:1B:D2:27:BC:55:4A:5B:DE:62:6C:F9:B9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5af64c0e-51f3-309d-8596-64a10958bf50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:80:0b:06:80:df:7e:38:e0:99:ab:14:9b:c7:01:8d:15:
         1e:c1:ea:c5:23:89:1f:b4:75:90:1d:ac:13:45:81:e9:ac:f8:
         41:26:0d:5f:02:dc:84:90:e1:68:4a:5c:11:5d:e2:70:78:42:
         f9:e1:a8:04:2b:af:67:ba:9c:ee:65:99:5f:af:c3:b8:e2:c3:
         bd:94:b0:ea:0a:1d:eb:af:14:9b:41:6a:e1:63:43:bd:66:0f:
         5e:b3:56:e6:c4:ae:9e:1c:d2:11:46:e4:58:02:a6:12:94:f3:
         d6:92:67:26:20:8a:fe:43:90:60:b8:dd:32:bb:7b:fd:6e:7e:
         fa:07:fa:84:7b:15:47:64:f4:e1:77:71:2f:eb:44:ad:2a:4f:
         31:0e:46:6e:36:83:ec:ac:35:51:32:d1:76:7c:25:42:9f:7c:
         7f:73:e6:e6:62:d5:f2:d9:df:5c:63:18:d3:9e:58:8f:b8:1e:
         ab:4c:31:73:8a:37:db:dd:e5:04:a0:7d:29:a7:f6:b8:4f:c3:
         90:d5:6a:31:12:68:0a:64:e9:03:cf:59:56:17:19:ee:ee:fc:
         46:56:23:6d:17:ce:66:99:90:0c:64:00:30:65:d3:c3:37:2d:
         c2:6c:ca:d1:36:ed:d7:e4:db:2e:e0:67:ea:04:c5:ca:e2:32:
         ac:f0:26:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg9ejJVrkz+pe3e94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTIxNzIwMzcyNFoXDTI1MDMxNzE5MzcyNFowLzEtMCsGA1UEAxMk
NzNkZjc1ZGItNDU1Ni00YTcyLWE2OGUtOTUzZjE0MzdhODNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8DTViJ5aEwXWVZtSBRPCYD0415nVGS0rqL8
2c4hvAA7q8/Tt219ANy+FV8XAz4OGReYbPsGWio5qfeohcYNGl/IQrCNJ+47G01O
d+S3TLRQLbsvMpMcxUgKH5KPKFM823EI3Bp64nS1hCjzH48UtwCT/XymOZnpH4/8
qwaadcKXD+RFbj8UQ6OvfroFG8yvfsihZ5t++x6oKoznEeSmH5zsL+jcZ6XjIzSr
mMqrrPc93C1UwEUhUH/McykvYO0HnUaCZyY3rFwkxa7TN8h6Orp2XyH7tnHxe++H
bsv/5dqSbzbfuZgvS5zXMxTnshypidN0/2Z36oIpQLSIip6ErwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfgmlelMxMb0ie8VUpb3mJs+bnsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWFmNjRjMGUtNTFmMy0z
MDlkLTg1OTYtNjRhMTA5NThiZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSeqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsFgAsGgN9+OOCZqxSbxwGNFR7B6sUjiR+0dZAdrBNFgems+EEmDV8C
3ISQ4WhKXBFd4nB4QvnhqAQrr2e6nO5lmV+vw7jiw72UsOoKHeuvFJtBauFjQ71m
D16zVubErp4c0hFG5FgCphKU89aSZyYgiv5DkGC43TK7e/1ufvoH+oR7FUdk9OF3
cS/rRK0qTzEORm42g+ysNVEy0XZ8JUKffH9z5uZi1fLZ31xjGNOeWI+4HqtMMXOK
N9vd5QSgfSmn9rhPw5DVajESaApk6QPPWVYXGe7u/EZWI20XzmaZkAxkADBl08M3
LcJsytE27dfk2y7gZ+oExcriMqzwJmk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:49 2025 by rpki-client