Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/011c80ad-ce11-3f22-b422-51fd833fc3a4.roa
File:                     011c80ad-ce11-3f22-b422-51fd833fc3a4.roa (raw, json)
Hash identifier:          zStmHN9EHwyMzmYndfpUQiUDREv56lVua885/xdKYlM=
Subject key identifier:   D5:E3:98:BB:8F:A6:95:9A:B9:E4:B1:E5:0D:48:12:4C:51:3C:96:1F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D641257B1111DF2BAF4F5CE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/011c80ad-ce11-3f22-b422-51fd833fc3a4.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     204957
IP address blocks:        142.252.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:25:7b:11:11:df:2b:af:4f:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=0f50cf7c-b8ec-45a4-ae5b-7ddb8087dc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:e4:0e:c5:f8:9d:7e:3c:87:71:91:27:92:
                    66:3d:c1:dc:d6:a9:86:be:2b:7b:72:c8:d7:3c:fb:
                    e5:cc:a2:c6:99:19:c1:2d:6e:81:b1:b2:0e:ef:36:
                    ca:f5:74:cf:a8:67:9d:5c:6c:b6:cb:10:da:c7:49:
                    34:7f:88:e1:5f:e7:8a:36:0a:25:d6:b9:4b:d2:cb:
                    6b:89:25:04:c9:1f:f9:28:5e:21:cf:4d:23:b6:ff:
                    29:32:36:fe:82:b5:43:89:a4:bd:e7:51:84:c7:cc:
                    74:32:f7:8d:cf:55:d2:ef:24:07:91:d0:d9:d6:20:
                    fe:ad:55:16:ae:96:a9:04:a4:2f:71:38:a5:8b:88:
                    d6:39:d5:c3:08:7b:18:98:2f:63:7f:74:09:73:db:
                    e5:4f:26:3f:ea:78:39:70:35:8b:59:53:e6:16:ba:
                    f7:70:dd:23:80:48:1b:a0:68:5e:5a:e4:30:7f:fe:
                    b0:a9:d7:c3:59:67:a2:4a:81:25:42:64:51:a2:67:
                    f7:19:47:57:27:a1:c7:c9:76:a3:ee:1a:8e:db:40:
                    9a:f1:15:eb:79:3d:75:ad:c7:b5:b7:1d:ea:3f:2e:
                    8a:fc:38:ca:fd:e2:55:4f:d9:ed:8c:97:77:72:7e:
                    05:f9:f8:e3:6d:b9:da:7b:53:e3:20:98:9c:b6:3d:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E3:98:BB:8F:A6:95:9A:B9:E4:B1:E5:0D:48:12:4C:51:3C:96:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/011c80ad-ce11-3f22-b422-51fd833fc3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:15:3a:f1:64:db:22:f4:fc:a3:b7:0c:84:f4:4a:de:4f:b6:
         2b:33:03:06:bf:d6:d2:e5:be:03:fb:2e:20:3c:bb:86:9e:7f:
         36:c7:b2:39:ae:8b:aa:d0:f2:06:76:40:a9:a0:4e:53:7e:a7:
         41:78:99:e5:b9:ad:a1:37:1c:15:11:c3:d5:cd:88:a0:da:67:
         52:3a:55:8c:6c:61:36:7b:eb:81:c2:a6:48:b1:b0:94:ec:8f:
         25:44:42:00:6b:c3:93:8e:7a:0c:ff:b9:4e:66:9e:0b:d7:c2:
         75:16:c1:e1:d3:c2:f9:d5:95:d5:28:f3:91:29:61:0e:a5:a5:
         52:98:26:56:e2:f6:77:f3:94:e9:47:25:43:64:4f:db:60:00:
         b4:fb:a7:9f:34:f8:ee:14:46:51:3e:16:88:6b:1d:b5:3c:14:
         6c:b9:e2:31:67:fc:24:24:b3:7f:99:ac:53:b7:0e:bc:f8:9a:
         be:0d:88:d2:90:41:23:8d:17:e0:e2:88:92:a4:85:e8:a9:2a:
         a2:68:eb:1d:cf:ad:83:42:c7:a6:d7:7f:d1:52:09:07:34:6f:
         a7:3c:be:a3:78:b0:e9:cb:3e:40:e9:bc:03:27:ee:c5:84:e1:
         c6:5e:2d:02:ba:e7:4a:13:bb:c4:66:4f:30:ff:f9:33:1e:c7:
         d6:6a:77:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSV7ERHfK69PXOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGY1MGNmN2MtYjhlYy00NWE0LWFlNWItN2RkYjgwODdkYzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFjkDsX4nX48h3GRJ5JmPcHc1qmGvit7csjX
PPvlzKLGmRnBLW6BsbIO7zbK9XTPqGedXGy2yxDax0k0f4jhX+eKNgol1rlL0str
iSUEyR/5KF4hz00jtv8pMjb+grVDiaS951GEx8x0MveNz1XS7yQHkdDZ1iD+rVUW
rpapBKQvcTili4jWOdXDCHsYmC9jf3QJc9vlTyY/6ng5cDWLWVPmFrr3cN0jgEgb
oGheWuQwf/6wqdfDWWeiSoElQmRRomf3GUdXJ6HHyXaj7hqO20Ca8RXreT11rce1
tx3qPy6K/DjK/eJVT9ntjJd3cn4F+fjjbbnae1PjIJictj1+twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXjmLuPppWaueSx5Q1IEkxRPJYfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDExYzgwYWQtY2UxMS0z
ZjIyLWI0MjItNTFmZDgzM2ZjM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvx5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMVOvFk2yL0/KO3DIT0St5PtiszAwa/1tLlvgP7LiA8u4aefzbHsjmu
i6rQ8gZ2QKmgTlN+p0F4meW5raE3HBURw9XNiKDaZ1I6VYxsYTZ764HCpkixsJTs
jyVEQgBrw5OOegz/uU5mngvXwnUWweHTwvnVldUo85EpYQ6lpVKYJlbi9nfzlOlH
JUNkT9tgALT7p580+O4URlE+FohrHbU8FGy54jFn/CQks3+ZrFO3Drz4mr4NiNKQ
QSONF+DiiJKkheipKqJo6x3PrYNCx6bXf9FSCQc0b6c8vqN4sOnLPkDpvAMn7sWE
4cZeLQK650oTu8RmTzD/+TMex9Zqdw4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:24 2025 by rpki-client