Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b49d42d-820f-3e29-b6d2-9886f559ba0d.roa
File:                     0b49d42d-820f-3e29-b6d2-9886f559ba0d.roa (raw, json)
Hash identifier:          t1oSvKqgT8mMTC0fXghqqz9G0jA4ydVcCDzWsujaUZ4=
Subject key identifier:   9A:D1:AF:B0:7F:CD:CC:64:40:50:06:D3:88:58:BF:87:2C:F3:99:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABC40531BEC8008894AB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b49d42d-820f-3e29-b6d2-9886f559ba0d.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     20473
IP address blocks:        104.165.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c4:05:31:be:c8:00:88:94:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=7bee6431-9f7c-47ef-bd3b-a117cbd923f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:bd:67:af:40:b8:a1:24:5c:f7:5c:b5:73:
                    e1:56:31:10:68:21:b6:43:2d:2d:5a:f3:af:59:2f:
                    45:91:6f:30:33:3d:b5:67:6e:7b:75:f2:40:60:3d:
                    84:d1:b4:06:86:49:ce:ea:b9:62:08:76:9c:e6:9c:
                    e0:ad:36:d3:e7:77:f5:e8:eb:56:d2:b3:11:85:89:
                    f7:f1:ea:56:a0:03:f4:cb:4b:17:d9:d3:29:6f:02:
                    29:af:7b:00:e7:b1:22:3a:f1:bc:d5:9b:61:46:45:
                    d2:76:9e:e1:07:f9:f4:c7:28:54:cb:1a:4d:5b:22:
                    a5:3a:52:d1:0e:94:6e:6b:f2:0c:6e:60:2e:58:c0:
                    e9:88:bc:5e:f5:91:a7:e2:7a:e9:b1:19:55:09:f0:
                    e6:fe:17:08:a4:7d:0d:d6:9b:44:2a:84:5b:fd:aa:
                    30:24:fd:e5:6e:0e:5c:a9:d2:04:97:a5:bf:c5:dd:
                    d8:53:43:2b:20:32:6d:85:76:5f:4b:e8:04:9b:48:
                    78:6a:24:76:09:90:ed:52:73:07:d3:f5:0e:60:be:
                    3a:f8:f0:2e:73:7b:25:fd:20:ba:39:7e:1e:16:da:
                    95:a6:d6:ae:af:3c:53:3a:ce:15:cb:d5:97:45:f6:
                    c1:c6:db:78:49:fa:dd:c5:e1:03:4d:c9:65:f9:2c:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D1:AF:B0:7F:CD:CC:64:40:50:06:D3:88:58:BF:87:2C:F3:99:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b49d42d-820f-3e29-b6d2-9886f559ba0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:17:9f:60:af:26:34:04:23:c7:f3:72:35:85:8e:cd:d0:
         7a:16:94:e5:79:e0:09:aa:b4:bc:e6:28:e9:7f:64:5a:92:d8:
         f3:51:f7:e8:91:f8:2c:78:22:bd:41:7f:6b:e5:8a:72:6e:11:
         d8:69:14:b6:07:a0:e5:fa:04:9e:30:8b:70:62:2e:cb:69:e0:
         83:84:ef:76:ee:f4:d6:37:cc:7c:66:06:09:84:f9:04:d6:b2:
         74:cd:8f:74:69:d8:95:7e:73:d7:df:d1:34:67:b8:3b:e8:9f:
         90:77:e9:17:37:b4:23:7f:94:7a:d5:17:73:53:d6:98:1b:06:
         79:82:29:5e:34:d7:47:6e:ac:ea:df:7a:61:be:4b:7d:0c:24:
         cd:73:e2:5a:f6:a4:0f:56:9f:91:be:4a:ee:65:69:5a:02:19:
         ff:7d:04:48:cd:31:ed:1a:57:a7:d0:ea:3b:04:97:57:b7:e9:
         2c:aa:0a:ea:e0:02:a7:7d:79:35:0c:43:8b:45:c6:28:02:f5:
         8e:06:60:c1:40:6b:b4:88:0e:60:d6:43:bc:d8:ff:aa:2c:51:
         8f:9b:12:02:74:a8:3f:0a:8f:1e:9d:56:7d:94:cb:ec:b7:2d:
         20:bf:ff:04:94:d3:f1:91:43:0a:ea:58:12:cd:cb:35:bb:e1:
         db:f0:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:26:29 2025 by rpki-client