Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/160073d5-7aa8-3b14-82af-8431c9bf5383.roa
File:                     160073d5-7aa8-3b14-82af-8431c9bf5383.roa (raw, json)
Hash identifier:          7+kdgCE3NwU8Ayd6uP6EGAqBoygLczbIdgnWVQidy7k=
Subject key identifier:   F6:73:2B:C8:67:F0:4E:8C:94:70:78:1B:13:FD:9B:51:7D:96:D4:59
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412DEBE5A29F8107AE2780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/160073d5-7aa8-3b14-82af-8431c9bf5383.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     214238
IP address blocks:        172.252.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2d:eb:e5:a2:9f:81:07:ae:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=71bca0f9-a232-4b92-9cfa-04c565f8d038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:ad:22:7f:35:93:12:46:b0:40:c2:1b:7b:
                    32:9f:b7:36:53:1d:b9:d5:06:68:4a:f7:c3:73:31:
                    75:8d:b0:e3:5d:b8:71:43:b3:5e:57:44:0a:f1:c7:
                    24:8c:21:fc:8b:ef:c9:a5:85:c9:b1:72:96:fe:98:
                    a6:7f:1d:97:58:96:34:15:d5:95:d9:88:cf:c4:a1:
                    6b:bf:a1:f4:41:36:bc:9c:77:12:9f:2e:a7:0f:74:
                    83:74:72:d4:40:9b:b5:41:87:a7:97:08:fb:ee:59:
                    c8:e2:2d:24:e5:81:6b:8f:d0:32:42:dd:ff:6d:4d:
                    ea:0e:fa:c6:cc:6d:9f:5a:db:7f:d7:bd:08:75:a1:
                    6f:db:23:89:ad:1b:57:09:02:9d:f5:89:13:a7:68:
                    f6:10:e0:c6:f3:1c:52:cd:51:d6:a5:86:05:27:43:
                    3d:d0:de:93:51:1b:2e:b8:5d:d9:9a:03:3d:30:ba:
                    38:0e:b9:33:53:40:5a:60:7e:07:f4:2b:0b:2a:b2:
                    b2:2f:7b:58:a1:cc:03:c8:92:b5:e9:af:dc:28:6f:
                    36:3c:c8:a2:59:28:07:6d:8d:65:11:f3:5d:80:a8:
                    67:dc:22:a4:ac:1b:26:84:ea:68:40:2b:6e:c5:1b:
                    fd:a0:31:30:9a:14:b3:51:01:87:6e:26:07:5a:12:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:73:2B:C8:67:F0:4E:8C:94:70:78:1B:13:FD:9B:51:7D:96:D4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/160073d5-7aa8-3b14-82af-8431c9bf5383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:88:26:45:1b:44:68:d5:41:78:df:89:af:fc:cb:75:ce:2e:
         00:d4:65:3e:c3:07:2e:5d:87:d1:4d:ff:c7:29:d1:56:5b:18:
         12:78:9f:07:99:6f:3e:0b:3f:bc:79:56:44:d3:37:c9:20:af:
         a3:6c:b1:01:85:3c:73:df:cc:0c:fa:87:36:bd:6d:45:c3:d5:
         36:c7:68:f8:b0:ba:78:f3:40:df:f5:8d:eb:37:a1:a3:c7:25:
         57:9a:c8:70:18:09:87:97:26:f5:3e:e3:53:86:b3:b1:db:16:
         1f:4a:85:66:51:72:94:57:6c:ce:60:c5:3c:da:64:f3:99:ab:
         31:23:c7:c5:f1:e7:7d:17:dc:7f:ef:bc:d1:3d:1e:39:a0:88:
         20:78:86:79:b9:d1:e2:50:cb:de:75:aa:6b:4f:72:66:bf:0a:
         72:bd:9f:50:88:54:02:45:2e:d8:b7:31:64:38:61:d6:b3:e5:
         ac:4d:99:a0:6f:38:49:af:50:f8:61:af:ef:dc:df:b5:5d:bf:
         f0:1d:d9:e2:47:68:e7:dd:6e:59:82:68:24:54:81:09:9e:cd:
         6a:fa:d3:f3:39:ac:ca:77:5d:84:01:64:8f:09:62:08:71:fb:
         95:28:06:c9:b6:b3:29:8b:4c:5c:8d:9b:2e:6c:d2:36:28:5f:
         1f:74:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:48:50 2025 by rpki-client