Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9ff2a3d-1b53-3d5c-ab5e-28aa49ebe420.roa
File:                     e9ff2a3d-1b53-3d5c-ab5e-28aa49ebe420.roa (raw, json)
Hash identifier:          2LOlQBxzIAAnkZK+Gdw7ihOSS1gcVbd5UOI6worwQZM=
Subject key identifier:   20:DE:5C:25:C9:EF:84:66:66:7E:22:AA:5B:B5:A5:59:8B:22:A7:6A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858483D79986CB6CD4469858F4900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9ff2a3d-1b53-3d5c-ab5e-28aa49ebe420.roa
Signing time:             Tue 17 Dec 2024 20:36:12 +0000
ROA not before:           Tue 17 Dec 2024 20:36:12 +0000
ROA not after:            Mon 17 Mar 2025 19:36:12 +0000
asID:                     8881
IP address blocks:        45.39.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:79:98:6c:b6:cd:44:69:85:8f:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 17 20:36:12 2024 GMT
            Not After : Mar 17 19:36:12 2025 GMT
        Subject: CN=eb0eb265-2c9d-41e1-959c-63ff6ebda6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:6a:67:ab:9d:61:5b:02:0b:8f:6b:97:b2:
                    6e:ed:85:fc:23:36:d5:f3:51:b4:c0:18:77:e2:0e:
                    22:d9:4e:c1:44:43:3b:bc:a1:1c:0d:8d:cf:92:a1:
                    5f:2f:91:d5:35:04:3e:3f:e1:f5:9e:50:c8:07:98:
                    b3:0e:5c:c1:92:32:76:15:89:58:92:22:98:73:bc:
                    b8:bb:f3:f4:a3:dc:52:7d:bd:77:fe:82:ee:64:c7:
                    9b:d2:f1:2a:09:2c:f8:6c:e1:f4:91:c4:bf:21:91:
                    44:ec:da:79:17:25:c0:1c:7e:3b:a2:b9:41:80:e3:
                    20:e4:d5:07:c8:90:e4:0e:bb:e4:bc:ed:5a:a4:2c:
                    ad:83:02:14:17:dd:74:3a:6a:49:da:d2:1f:3a:2e:
                    e9:c3:e6:ce:50:f0:c2:1e:0c:2a:87:1b:11:57:12:
                    ad:53:25:b2:b4:3d:e6:2b:7c:79:0e:58:cc:18:e8:
                    8d:c7:c4:74:8a:61:09:d4:d0:d1:4c:a7:36:03:14:
                    37:71:6e:94:18:c6:2b:ed:b5:a6:6c:31:02:78:11:
                    22:14:a4:5f:ae:89:f5:37:0b:4e:51:08:b3:2f:05:
                    05:90:c1:a2:6f:79:78:9f:8b:88:eb:74:83:42:55:
                    65:87:29:c6:8e:28:98:9a:71:8f:6e:dd:df:cb:ea:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:5C:25:C9:EF:84:66:66:7E:22:AA:5B:B5:A5:59:8B:22:A7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e9ff2a3d-1b53-3d5c-ab5e-28aa49ebe420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:83:69:7f:16:4f:a6:83:32:21:47:f7:5d:6a:93:d3:24:
         b0:52:9e:a3:d4:ce:4d:44:ae:71:d0:27:27:1d:dd:16:e8:81:
         39:49:aa:cb:e5:48:26:b6:ec:40:c9:77:1a:44:60:67:f2:66:
         cb:8c:43:73:73:9e:85:0b:3d:22:84:fb:0a:61:0a:b7:e3:73:
         19:37:bb:66:b5:65:cb:a6:36:76:77:47:97:bb:32:db:05:c1:
         1d:2f:76:75:c3:99:05:40:23:7b:a8:18:b2:a0:b8:6e:20:db:
         1d:0e:e7:4e:48:23:dc:ca:15:0b:e3:74:a9:29:66:3c:ae:e6:
         7d:44:f7:22:ef:d6:7f:62:d7:60:a5:d0:93:5d:e2:34:a7:cf:
         a6:99:71:30:f5:f1:88:1c:36:41:a8:66:95:de:88:1e:24:f5:
         fd:fe:3f:18:d6:d6:02:f5:59:30:7a:a0:cb:67:c0:6e:5e:cf:
         2f:74:cd:1d:b5:62:db:ff:2d:74:2f:f9:b4:8e:14:33:e9:97:
         88:dc:d7:50:68:9c:38:75:85:57:f8:b8:d3:e9:76:8e:0d:b8:
         9c:f1:c8:49:c8:ec:36:bf:18:6b:78:02:38:11:ca:7d:e2:c4:
         7d:0a:5c:fb:7b:4e:f4:de:84:b0:a3:ed:30:f4:f9:b3:de:a2:
         4b:f8:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:56 2025 by rpki-client