Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d1be422-43b2-39e9-98a4-8a38845e38d1.roa
File:                     5d1be422-43b2-39e9-98a4-8a38845e38d1.roa (raw, json)
Hash identifier:          z2fNmSfX6vmvyG8ABw7axQP1yIQLNqmEj1SRdT8fQG4=
Subject key identifier:   23:B2:88:F6:EE:A4:4C:20:94:46:2A:41:C1:FD:19:99:B4:9A:A5:A2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABC97F9FB5661206624D40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d1be422-43b2-39e9-98a4-8a38845e38d1.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     44893
IP address blocks:        142.252.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c9:7f:9f:b5:66:12:06:62:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=2c65419d-d2fd-483d-8f8e-6e30abc75693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:ae:e6:b0:99:a4:bd:83:80:0d:ae:cd:40:
                    31:10:c9:83:ed:6e:9c:e6:21:ca:a0:e3:23:08:e8:
                    49:56:9e:19:6a:9c:f1:12:9e:d7:88:31:44:dd:0f:
                    b7:71:72:75:43:ac:78:c5:c9:7d:8b:a4:a2:bd:d9:
                    05:98:e3:e7:be:b2:88:61:19:2a:83:7f:2c:68:af:
                    ae:5c:de:2a:43:e1:a8:c0:ba:5b:11:8c:cd:56:aa:
                    53:f7:67:9e:40:c4:46:c2:fd:32:b2:bb:b4:70:58:
                    96:75:7e:a8:16:e7:35:4c:14:5d:2b:b3:a6:0c:72:
                    13:38:99:5e:e5:0d:14:dc:51:83:4b:05:76:90:dc:
                    d6:d7:61:ca:de:11:95:94:f1:6d:cd:69:a1:5b:ea:
                    93:ed:a5:64:2b:c7:56:25:17:04:5a:14:79:f7:c0:
                    c9:1d:e1:5e:34:e4:81:9f:b8:25:00:54:43:f1:2b:
                    78:ba:eb:25:36:6e:99:69:97:fa:90:91:eb:c9:31:
                    bb:56:75:a0:da:f0:6f:b8:a4:f9:80:c2:8d:ea:8c:
                    d2:ff:a6:61:7e:b5:d7:66:a8:80:fb:c4:f7:d5:84:
                    66:9c:3b:13:09:e9:50:5c:70:8b:f2:dc:51:cc:80:
                    08:50:1c:52:af:c5:01:d4:52:15:9f:82:60:6f:c2:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:88:F6:EE:A4:4C:20:94:46:2A:41:C1:FD:19:99:B4:9A:A5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d1be422-43b2-39e9-98a4-8a38845e38d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:64:33:ca:92:3e:82:e0:2e:e4:c6:ab:07:d5:22:28:71:
         bc:dc:2d:a5:da:a8:05:ab:3f:06:dc:38:9e:52:86:44:31:a9:
         55:6b:6a:ad:ea:e6:81:9a:54:86:f7:07:fc:6a:be:96:b2:9d:
         9e:e7:69:f1:2c:08:2a:e6:3c:7c:f4:14:2e:e3:9f:fc:4e:65:
         50:04:0e:55:0c:b7:93:ff:e5:95:81:92:aa:82:97:3f:cd:e7:
         a6:06:50:96:0c:b9:5d:05:5d:d9:69:5d:50:43:fa:aa:16:93:
         fb:f2:48:cc:00:45:90:00:a7:0c:4f:55:b6:de:be:30:79:b5:
         4a:e9:e1:25:76:73:bf:0c:2c:a5:7d:58:45:a7:9c:03:2b:eb:
         1a:50:53:bb:19:7c:2c:98:52:7c:59:05:2a:76:cf:71:fb:30:
         a0:1b:5d:0d:52:31:54:de:fb:aa:43:02:50:63:0e:58:f7:68:
         08:f7:8a:1d:af:02:0d:e2:aa:5a:72:01:78:46:09:9f:05:82:
         1c:fc:86:90:2d:0c:39:67:c3:87:6a:c2:1b:b4:5d:50:18:2c:
         c0:7c:b4:45:44:a1:43:68:74:92:43:48:42:ed:00:95:8c:8f:
         23:b8:4c:4f:dc:60:57:a9:8f:a8:9c:00:67:28:47:3f:4a:3e:
         de:d2:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:27 2025 by rpki-client