Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/255596c4-8d7c-35d6-b537-ad1861614dd6.roa
File:                     255596c4-8d7c-35d6-b537-ad1861614dd6.roa (raw, json)
Hash identifier:          WulQiCSHUzPLhQSEg97youeHRx8MHNSw/x8Ljsx8Thc=
Subject key identifier:   44:F7:F8:95:32:D3:9C:D7:F7:40:7B:CA:11:3A:1D:50:A5:43:2A:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848AA078FEE8293C7760F0EB780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/255596c4-8d7c-35d6-b537-ad1861614dd6.roa
Signing time:             Sat 25 Jan 2025 17:49:33 +0000
ROA not before:           Sat 25 Jan 2025 17:49:33 +0000
ROA not after:            Fri 25 Apr 2025 16:49:33 +0000
asID:                     18779
IP address blocks:        172.121.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:07:8f:ee:82:93:c7:76:0f:0e:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 25 17:49:33 2025 GMT
            Not After : Apr 25 16:49:33 2025 GMT
        Subject: CN=a96501cf-5194-4530-b5f3-516fd3c4dfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:42:1e:3c:34:8b:20:93:24:fc:8b:9a:cd:
                    b5:17:55:98:52:ab:82:d2:ff:27:35:9e:2b:c2:ad:
                    df:83:68:0c:e1:11:6c:19:7b:76:49:69:6c:33:b2:
                    eb:92:37:b7:3e:96:25:14:05:5c:a6:24:bf:7b:1e:
                    f0:1b:69:03:c8:f0:75:98:75:f6:19:f6:64:f4:f0:
                    f4:d2:0f:c0:a8:17:4d:35:ec:fa:63:d9:08:8b:60:
                    0a:41:7e:a2:84:56:2e:0d:37:5b:a4:5d:2f:74:23:
                    38:1d:a2:f9:10:2f:83:ad:fe:d9:64:c5:b7:22:9c:
                    be:5d:5c:0f:fc:d7:11:d5:91:20:b3:54:8b:a4:fb:
                    86:51:5b:4e:a8:2f:48:8e:47:88:b5:42:8a:8d:cd:
                    b5:24:2d:3b:ee:9b:bb:8e:97:ac:c2:30:7a:5a:97:
                    ca:b8:d1:d3:ac:f7:49:9d:13:bc:4d:23:bb:24:4c:
                    d7:2e:36:97:a6:97:1d:6a:ce:23:fd:8a:96:f8:75:
                    af:00:30:98:f3:df:ef:44:78:aa:27:e6:15:d6:3d:
                    d4:99:85:6f:b4:1f:b9:12:d1:a4:a4:6c:3a:5c:46:
                    97:fa:39:ae:69:ab:51:fd:30:37:45:cf:bc:88:43:
                    95:e7:16:27:48:6a:4c:b4:3f:9d:bc:48:a5:11:7c:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:F8:95:32:D3:9C:D7:F7:40:7B:CA:11:3A:1D:50:A5:43:2A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/255596c4-8d7c-35d6-b537-ad1861614dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:45:00:ed:63:22:a5:c8:90:63:72:b7:b6:b7:bc:f6:c7:
         d3:c7:09:54:ee:8d:ad:f0:c2:2f:5d:8b:86:f9:77:64:1e:6c:
         f9:e3:c3:8a:fb:c4:04:c6:ee:5f:60:20:3b:38:41:39:bb:bf:
         8c:d8:f5:5c:22:b6:ec:e6:b3:e7:32:94:1a:7d:94:fe:6b:0a:
         c6:ac:2a:b1:81:bd:4b:e5:95:02:ed:4f:c5:1c:9a:f3:a3:81:
         ad:ef:ba:f5:f6:5a:66:c4:3f:e3:e7:c1:73:9d:4f:de:cf:62:
         6c:a4:c6:3b:87:e1:af:7f:02:3b:c7:9d:16:59:89:af:a0:c5:
         d3:66:76:e3:67:5d:ba:91:f1:75:4d:db:b7:b5:eb:ba:43:8b:
         6c:79:0e:0e:8c:5f:bf:cf:c9:ef:0d:23:b2:39:bf:8e:c4:e0:
         6c:5a:ab:b6:80:71:cb:cc:51:3c:e4:4f:2e:4e:b3:90:1f:14:
         d4:58:b8:a3:be:db:0c:aa:79:2a:9e:56:59:77:88:32:0a:84:
         60:9b:49:b1:c9:ef:e5:6b:9e:05:a2:e4:de:b3:38:6c:1c:96:
         3e:bc:49:9d:d9:b8:93:b3:8f:94:4e:25:32:2e:61:52:8d:f1:
         4f:8a:d1:dd:0b:c7:5f:f2:61:fe:75:a9:dd:a3:2b:a1:55:5c:
         a4:fe:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:30 2025 by rpki-client