Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91695c53-15ed-3d6a-819e-445afff98a11.roa
File:                     91695c53-15ed-3d6a-819e-445afff98a11.roa (raw, json)
Hash identifier:          aKxFznggVAw5LcTy32nxK97ZqYQfOkqEzpJtjwAR7wg=
Subject key identifier:   AB:F4:1E:58:7E:7C:54:1D:3D:E4:00:F9:25:FC:A8:07:A6:62:F4:C8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848AA092FCED2CAB0D17461DE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91695c53-15ed-3d6a-819e-445afff98a11.roa
Signing time:             Sat 25 Jan 2025 17:52:49 +0000
ROA not before:           Sat 25 Jan 2025 17:52:49 +0000
ROA not after:            Fri 25 Apr 2025 16:52:49 +0000
asID:                     18779
IP address blocks:        172.121.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:09:2f:ce:d2:ca:b0:d1:74:61:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 25 17:52:49 2025 GMT
            Not After : Apr 25 16:52:49 2025 GMT
        Subject: CN=4a725f3c-0023-4b5c-859a-f37cfaad0617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:4a:bf:83:c6:51:58:2d:fe:cb:3f:6d:79:
                    8a:ad:e4:1d:49:21:f9:ae:dd:a4:de:b0:17:10:aa:
                    5f:25:dd:bd:89:5d:e0:8a:22:43:88:ca:7d:e0:27:
                    3c:31:a6:b4:ef:bd:b8:4a:02:e4:8a:a2:f7:2a:ea:
                    3b:b0:df:27:f4:26:8e:22:15:ce:a5:0c:08:ba:da:
                    da:87:15:3b:7a:c2:83:3d:e5:16:e1:66:e4:56:65:
                    2f:2b:5b:d9:98:2a:6e:fc:29:84:45:80:2b:eb:34:
                    bb:a4:db:ff:b7:f1:3a:11:29:13:82:d4:94:6c:43:
                    c3:26:ee:f1:db:3f:e9:d1:9e:5a:e5:64:18:a9:3d:
                    70:fa:f1:61:f3:85:02:05:36:8a:09:5a:32:9c:1b:
                    67:f7:7b:df:3a:27:f3:5d:46:ba:eb:14:91:de:6a:
                    74:50:05:29:35:55:fa:5a:7a:34:3f:18:8e:85:d5:
                    8a:c7:96:74:29:b3:26:04:1b:60:b0:86:f5:65:12:
                    1b:09:c7:68:c4:02:e2:a6:ba:c4:ca:9e:d3:45:a9:
                    b2:34:82:18:ac:b3:0f:aa:59:9a:91:ca:2d:ec:3f:
                    4f:ce:88:f8:64:60:fa:1f:aa:29:8c:b2:bc:e8:36:
                    9c:6a:65:9f:09:44:49:db:6f:21:7e:90:65:d7:7c:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F4:1E:58:7E:7C:54:1D:3D:E4:00:F9:25:FC:A8:07:A6:62:F4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91695c53-15ed-3d6a-819e-445afff98a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:61:4d:86:98:c2:d6:3c:6e:15:79:f6:92:65:d7:31:b0:88:
         ad:1b:5e:4f:55:d1:df:9c:41:17:1f:a9:3b:9a:42:e6:36:c4:
         f0:a3:da:f4:a7:5d:82:1e:74:45:0f:56:30:1b:6f:aa:fe:79:
         ff:66:2f:e1:10:54:7e:98:08:2d:5d:1b:9f:79:6d:7e:6c:93:
         1d:0d:b2:c7:a0:e5:99:cb:cc:55:52:a7:f3:9b:20:99:b6:78:
         8a:77:29:fc:07:00:ac:ff:1b:14:bb:79:94:0c:c3:a8:01:48:
         91:9d:aa:59:6e:bb:36:49:2a:3e:f3:55:4d:08:43:f3:b9:c9:
         5c:6d:72:e1:b7:90:8c:6c:f3:5c:ba:6a:e9:87:a3:75:52:76:
         18:a8:70:18:9b:4b:71:3c:62:f5:04:82:32:9e:de:a1:38:04:
         39:68:97:1d:b5:ed:ae:c9:6c:94:d6:7a:ef:4b:64:46:7a:5b:
         da:0b:6e:f2:a5:b8:51:40:e5:ba:88:45:5c:89:1d:62:96:7c:
         37:3d:92:d1:30:e8:a2:84:2f:70:ca:a0:f1:ec:8f:b7:ba:35:
         62:39:f9:b7:f1:0f:43:6c:92:57:66:dd:73:da:66:58:8e:18:
         63:8b:78:50:da:49:c9:6d:ea:6b:bc:9f:79:14:d9:d9:27:ca:
         68:cf:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:32 2025 by rpki-client