Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3584ba50-d399-3fd7-9ce9-031f8a3a207b.roa
File:                     3584ba50-d399-3fd7-9ce9-031f8a3a207b.roa (raw, json)
Hash identifier:          BYHMVegWl0o3OeDAPm+TDNv3NDDTm97ZuLje4S2ubX8=
Subject key identifier:   03:B0:70:02:7F:91:5F:03:4C:66:78:6B:3D:34:59:8E:B2:41:EA:59
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F2007F13075FB90C30DBF080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3584ba50-d399-3fd7-9ce9-031f8a3a207b.roa
Signing time:             Thu 20 Feb 2025 12:33:30 +0000
ROA not before:           Thu 20 Feb 2025 12:33:30 +0000
ROA not after:            Wed 21 May 2025 11:33:30 +0000
asID:                     18779
IP address blocks:        172.252.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:00:7f:13:07:5f:b9:0c:30:db:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:33:30 2025 GMT
            Not After : May 21 11:33:30 2025 GMT
        Subject: CN=cea7f9b9-f347-4996-a3f4-37d6e524f8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6d:a9:2d:0b:c1:2a:4a:7a:88:b9:08:36:4a:
                    01:c9:bb:3c:94:16:18:64:7f:0c:c4:d7:3e:43:99:
                    b1:7c:9b:8e:d3:71:f9:65:9a:a0:fc:c4:56:27:fd:
                    93:f0:6d:45:d5:27:01:ea:e6:d9:e7:8e:23:c7:3c:
                    56:48:e4:79:9a:57:9e:a1:73:bd:e0:57:18:1b:89:
                    db:ca:ed:8c:d4:5d:fa:4a:16:47:ae:48:d5:35:02:
                    3d:56:79:94:c7:83:aa:fe:95:57:70:e8:44:ee:64:
                    bd:34:4a:f4:b8:9d:6c:31:84:3d:80:a5:f3:e6:ee:
                    30:dd:73:b9:ac:88:fd:66:48:47:09:f0:d7:b8:a2:
                    ee:42:92:0a:c9:5c:25:f5:61:4c:62:a3:e9:a6:f7:
                    2f:ac:72:53:2e:5c:b5:a1:9e:fb:0d:9a:11:48:54:
                    43:93:ed:53:b6:c5:13:75:6a:27:36:0b:7e:55:e4:
                    c0:fc:a5:04:fa:1f:38:71:0a:b7:11:5e:8f:b2:85:
                    cc:c0:fe:8f:dc:11:b6:6d:4b:2e:c3:16:b7:73:6e:
                    d1:57:04:92:e4:01:11:45:b6:c8:84:88:5e:35:1a:
                    2f:31:5a:cd:0c:7c:26:0a:8a:b3:38:aa:32:57:f6:
                    b7:51:bd:e4:68:90:45:e7:ea:04:4a:39:00:07:74:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:70:02:7F:91:5F:03:4C:66:78:6B:3D:34:59:8E:B2:41:EA:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3584ba50-d399-3fd7-9ce9-031f8a3a207b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:63:bd:ff:d4:f5:7e:6c:7f:96:c8:f0:73:e6:33:7e:e4:
         ea:bc:5e:aa:9f:05:30:8e:51:f3:c7:c3:95:fd:62:21:dc:d8:
         fb:e9:fd:99:d2:75:ca:0d:cb:92:c9:83:ea:79:78:82:2e:92:
         f0:2a:5e:f3:8d:d2:5a:fe:ba:23:a7:e8:4f:87:7d:1a:98:fb:
         84:e7:5e:6a:37:2d:a2:0a:19:40:5d:13:c3:54:f4:82:df:c2:
         f2:13:13:55:2b:5d:4f:2d:42:f8:e0:bc:30:07:6a:c1:17:b8:
         ec:97:85:bd:b2:55:1b:eb:d7:3b:3c:ec:fc:40:2c:3b:ac:b5:
         e7:9e:a2:00:7b:60:71:6e:e5:85:da:7a:7a:5f:20:9e:a8:1f:
         1c:71:49:10:dc:16:cb:2d:e8:47:51:a7:b5:6e:f2:19:ff:1d:
         bb:65:f3:01:bc:f8:39:0f:e0:0a:8f:3c:35:c1:38:82:42:9e:
         c0:bd:e5:b9:2a:90:50:92:7c:2d:aa:86:50:d2:30:67:d1:02:
         85:ea:98:34:4b:19:db:36:6f:a3:1d:b2:3e:6e:d6:42:67:82:
         ab:c6:fe:fb:58:bd:e3:82:38:6c:55:12:25:4f:6f:be:43:cb:
         c7:ea:51:24:6f:bf:f5:13:87:40:60:b8:6f:e8:72:94:a6:ae:
         b5:03:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:04 2025 by rpki-client