Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13ae3786-0871-30eb-b4e3-f42530e07813.roa
File:                     13ae3786-0871-30eb-b4e3-f42530e07813.roa (raw, json)
Hash identifier:          gsS8TGLws6TBdNiOHANi6bj8kUSR9eHFP0UrXJ+SO3Q=
Subject key identifier:   8F:AA:E7:ED:13:EE:C2:A3:EE:70:48:21:96:BD:67:BB:81:7F:74:6C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858487FB5D1FB2932EAFD9DD20800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13ae3786-0871-30eb-b4e3-f42530e07813.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     48031
IP address blocks:        104.165.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:d1:fb:29:32:ea:fd:9d:d2:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=e48a01c3-bde3-49cd-96fe-403b4b0d0b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:fa:85:d1:c6:5a:c2:4f:eb:28:f1:5e:00:
                    bc:1e:0c:3d:7a:d8:9e:29:f0:ed:1e:a0:8f:ef:60:
                    e7:83:62:de:41:9b:ec:89:5f:a8:53:8a:65:c2:19:
                    b3:c1:fc:cf:fc:56:75:c0:20:a7:03:1e:af:04:34:
                    06:ba:c0:87:15:21:cc:44:71:d4:91:7b:16:ed:9a:
                    05:38:ff:f5:30:d1:7f:44:b6:2c:72:46:8c:7b:c2:
                    16:03:1f:15:c0:48:04:d9:09:67:0f:7e:3c:b8:ce:
                    93:fd:7e:bc:ea:36:fb:c9:f3:eb:f5:4d:5f:1b:29:
                    e7:13:38:f2:9a:4e:5e:3f:b0:20:99:16:82:20:d7:
                    34:8e:d4:73:5f:90:c8:a7:d7:b3:9f:32:79:28:57:
                    82:fd:2d:8d:ff:93:86:6f:ab:90:47:c7:8a:d9:90:
                    43:4a:8a:76:8c:10:85:6d:b1:a5:89:ec:5c:30:4d:
                    d7:fb:0d:d0:1c:95:b9:0a:67:b8:e1:10:6a:85:08:
                    0c:b9:9a:b7:0a:fa:d1:72:ac:93:3f:06:05:53:90:
                    bc:8d:79:10:d3:d9:17:47:0e:42:67:70:cb:bf:61:
                    29:8f:f2:e1:99:f4:d4:85:07:bf:cb:da:54:33:26:
                    8b:88:6f:e1:97:c3:08:1b:74:e8:a0:1e:6f:51:c1:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:E7:ED:13:EE:C2:A3:EE:70:48:21:96:BD:67:BB:81:7F:74:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13ae3786-0871-30eb-b4e3-f42530e07813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:71:b1:11:52:0c:f6:12:ef:61:cd:b1:01:9e:51:7f:92:37:
         68:66:c0:db:0d:9c:87:22:88:a7:e0:bc:ee:13:0c:7e:46:70:
         3c:35:0b:87:57:34:25:cc:ab:3a:8d:7a:68:28:bd:bf:dc:1d:
         a7:83:b9:0f:e1:43:14:5c:85:18:61:6c:58:cd:83:fc:00:fa:
         7e:1d:79:bc:3e:46:7b:8c:23:e4:a2:47:23:41:1e:0d:1e:93:
         71:ac:d9:85:ab:76:e1:87:18:24:85:7e:20:83:29:7d:fe:d7:
         b4:bc:db:03:d1:a2:1c:ed:72:35:f7:3f:8b:94:79:ae:72:d7:
         b9:65:b5:50:57:11:c7:ef:93:28:fc:91:e1:bb:d0:35:67:c1:
         d1:e1:40:24:73:3e:a7:43:52:55:bf:b4:80:c7:87:16:15:ba:
         a8:7f:46:24:0c:71:12:60:d4:68:9a:f2:2c:1a:44:d0:0d:29:
         68:82:24:b8:51:90:23:99:09:d7:e8:8d:21:df:4f:c6:b6:3e:
         72:75:1e:22:c9:dc:24:5f:e3:45:c1:8b:b3:c7:5f:a7:53:18:
         45:1d:84:29:cc:a7:78:7d:76:bb:25:08:9a:51:fe:c3:89:71:
         c9:41:33:3e:f6:d0:21:4d:eb:54:cd:8d:d4:8c:32:d1:10:cb:
         a1:fa:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:05:41 2025 by rpki-client