Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa
File:                     30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa (raw, json)
Hash identifier:          MCyulCLuuXANncYofj/AijwuBe2bomqKBHDNIE922gk=
Subject key identifier:   C7:F3:75:7B:EB:5E:47:76:EE:CA:DD:81:AF:72:DC:D4:9F:3E:CF:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848CDE10B6CF181F8E59A274E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        192.177.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0b:6c:f1:81:f8:e5:9a:27:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=9ac6944f-3cb7-41ec-9a77-f7f297a777c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:6a:10:94:5e:8e:c9:8a:73:73:4f:ab:d1:
                    06:a9:12:87:4f:3f:2d:21:37:f0:4e:37:60:62:08:
                    ad:50:19:dc:13:93:1f:73:8e:80:76:45:14:af:f9:
                    5b:37:5d:08:0a:4a:19:6e:74:7f:eb:a5:67:23:82:
                    8c:25:14:c7:2d:bb:a4:5c:d6:76:80:cb:4b:68:26:
                    a4:91:9c:24:49:fe:52:ff:0e:e8:56:ef:00:18:d3:
                    6d:b2:d6:f1:69:f1:88:6b:8c:06:6d:57:6a:c0:7b:
                    f6:63:17:73:97:76:44:f3:36:92:d4:24:1c:c2:4b:
                    2f:2d:35:e1:58:d0:20:27:54:9f:66:97:69:47:f6:
                    ed:ca:59:de:76:01:65:7a:42:07:02:ca:07:ec:35:
                    1a:13:d1:42:28:30:78:af:4a:9e:ff:c8:14:0c:4a:
                    02:d2:3c:0f:56:bf:1a:f5:8c:1b:90:f6:8d:d3:ca:
                    8b:e2:93:19:70:a0:09:97:98:58:1c:4c:4f:18:ae:
                    70:76:37:68:12:4f:25:59:af:d1:6e:12:f7:b3:90:
                    33:e3:b0:1e:f3:4d:ca:4c:3c:bc:68:53:82:84:3a:
                    7e:09:ad:c5:f4:35:55:e3:95:00:fc:c9:6e:35:0d:
                    86:ba:06:72:6e:bd:fa:fc:bc:cc:77:da:b7:15:43:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:75:7B:EB:5E:47:76:EE:CA:DD:81:AF:72:DC:D4:9F:3E:CF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:06:79:f2:4f:3e:9b:4b:a5:8e:c7:67:ec:c0:df:8e:c8:
         6c:1b:50:dd:f9:e3:4d:54:37:25:b5:7d:2b:5e:04:d5:20:d7:
         df:11:d3:18:68:23:df:93:18:24:42:0a:6c:56:d0:11:4d:c2:
         7e:54:0a:9d:a4:eb:ff:83:17:00:31:3e:2e:46:8c:16:fa:6f:
         b0:98:4a:e2:e0:ad:f2:b6:63:64:eb:32:de:ba:80:c9:aa:97:
         5b:66:92:cc:7d:d9:99:a1:df:46:7b:99:06:3c:c3:59:02:28:
         b7:b1:f5:fd:2a:f0:8d:ab:27:2e:0a:04:ba:40:4d:81:9e:58:
         42:16:fe:14:e5:41:5f:0c:b2:06:17:40:e2:c0:8f:c9:dc:86:
         eb:65:f7:9d:b5:40:b0:e3:d0:05:8d:dd:d2:81:00:6b:17:13:
         b5:e6:54:4f:d1:e3:0c:d3:39:3e:4c:79:13:4f:00:39:75:89:
         10:b5:5e:d9:fb:52:06:4b:83:48:a7:21:91:b4:b2:0a:a6:d8:
         7b:a0:48:45:9e:d8:e0:38:9f:08:b6:82:ed:d8:d7:17:67:9a:
         ee:2e:5a:a6:26:34:29:44:4e:60:e6:00:bb:07:0e:62:3a:8c:
         3d:75:ab:ea:e3:37:30:0f:c6:38:41:35:e0:e6:eb:57:df:43:
         f4:d7:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:45 2025 by rpki-client