Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5179ec37-2c59-3ae7-b34e-ea152c35b76b.roa
File:                     5179ec37-2c59-3ae7-b34e-ea152c35b76b.roa (raw, json)
Hash identifier:          QdoZN8bYapkCR5f3PMD0S4rXbhcGtTv4lKKLvW7Oa/Y=
Subject key identifier:   7B:D9:C1:52:F5:BD:47:5D:F6:F2:CC:A2:C7:3E:F6:20:06:7B:41:98
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C2B63F9ABE88FBEE76E33400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5179ec37-2c59-3ae7-b34e-ea152c35b76b.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     5650
IP address blocks:        172.252.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:3f:9a:be:88:fb:ee:76:e3:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=ab9aa139-882a-495c-b583-d1120ac7e1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:b3:4f:48:8b:5d:58:8d:46:11:d6:b5:8f:
                    23:fa:6e:7c:44:b7:3a:7f:28:eb:2a:b0:8a:94:4d:
                    18:10:95:de:f5:4d:2e:f6:2e:56:71:91:b7:a9:91:
                    bf:65:31:c9:aa:50:3f:a3:01:fc:8c:2b:73:a1:79:
                    95:ce:7c:25:2c:43:66:83:83:db:7b:dd:4c:5c:30:
                    8e:0b:2b:35:21:3b:bf:32:35:64:72:d4:23:ee:da:
                    b5:7d:8c:d1:46:4a:84:f6:59:77:0d:58:42:5a:25:
                    7c:f6:e1:9b:db:1f:43:83:72:c1:b7:ab:a5:c4:e1:
                    3b:8e:6f:d5:80:15:fd:3b:29:47:a7:93:31:64:f2:
                    05:00:49:37:9b:cb:20:95:bf:c6:29:a4:41:ef:e0:
                    65:42:3e:d5:97:a0:18:bc:c7:2d:8c:24:9c:a1:95:
                    68:8b:be:61:8f:6a:79:1f:7c:48:43:fe:8e:f0:97:
                    26:f8:65:5b:db:29:03:ad:9d:86:3f:e6:2d:b1:41:
                    0f:c0:bb:43:75:86:a5:a2:63:78:16:21:39:ce:26:
                    21:0b:71:0e:d4:a1:6f:74:62:f4:40:ef:2f:1c:d2:
                    d8:95:1d:34:b9:c2:a3:c6:43:89:ed:e3:20:28:e5:
                    b9:79:95:81:2b:e5:4c:28:75:85:88:09:95:2f:10:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:C1:52:F5:BD:47:5D:F6:F2:CC:A2:C7:3E:F6:20:06:7B:41:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5179ec37-2c59-3ae7-b34e-ea152c35b76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bd:d9:11:79:45:8e:86:88:fc:3b:fe:e2:6d:a1:5f:53:95:
         a4:02:e0:bc:be:d2:34:e2:2f:5d:61:00:fb:44:20:cb:c4:70:
         3d:a9:18:80:86:24:85:42:84:42:a2:91:c2:9b:d3:0c:ba:df:
         f0:27:8e:e4:ce:bf:a0:14:66:b4:4a:12:ed:80:d6:ad:4d:d9:
         59:0d:6d:14:b1:66:6f:18:6c:cf:0c:6b:e1:df:e8:43:2c:a5:
         7b:45:c7:66:db:80:91:22:d5:16:0d:08:52:ac:07:bc:6f:03:
         14:96:33:9d:b9:cd:e2:ea:42:fe:c6:1a:90:98:36:75:0c:ec:
         27:2e:b2:47:b6:55:1f:db:4b:f9:7c:53:4f:fc:10:71:14:ca:
         a2:50:fd:26:f6:70:66:20:81:70:95:20:ca:89:dd:c0:03:5e:
         4c:5c:cf:af:bb:a6:7f:c7:b7:98:0c:c5:76:8d:0d:46:99:14:
         6b:8a:52:ac:18:7f:58:d0:dc:59:69:6f:87:78:b8:a3:6a:ad:
         22:09:3a:47:4a:81:65:a7:83:32:9e:49:be:15:11:14:10:64:
         c4:50:ef:8a:d2:d0:b6:b9:86:d5:c0:27:18:d7:ec:fe:f7:73:
         17:51:f0:d7:5a:74:45:77:7e:e7:28:3e:a7:cd:40:fe:f6:56:
         6d:eb:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:39 2025 by rpki-client