Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976e897b-90b4-3f78-a74c-f36174943c8d.roa
File:                     976e897b-90b4-3f78-a74c-f36174943c8d.roa (raw, json)
Hash identifier:          JSDd3XaKy9cYsdGZJl9NDG+5TyWYPFTVZEBqIpNkKw0=
Subject key identifier:   B1:6E:F0:D2:FD:EB:70:A5:61:96:4C:E3:57:D6:FF:51:47:83:43:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584905B6B9ACCCC525C2BC28CDC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976e897b-90b4-3f78-a74c-f36174943c8d.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13213
IP address blocks:        104.164.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b9:ac:cc:c5:25:c2:bc:28:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=d16efd60-3116-4fe1-97b5-9d6d8db51450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:56:e0:98:ca:75:81:55:15:64:e6:03:f4:
                    2f:93:a1:9a:f1:25:9c:60:95:2b:bf:d9:c3:98:f5:
                    aa:b9:e0:b5:4a:9d:36:61:5a:1f:a6:0a:08:5e:2a:
                    19:99:e4:f5:6f:fe:e2:6a:92:cb:90:c1:bf:95:cb:
                    db:a9:b8:48:36:3e:a8:bb:13:fd:cc:23:10:b2:2c:
                    93:a6:d9:75:1c:b4:26:8a:35:cc:fa:6a:23:2e:d2:
                    54:66:49:b0:86:f1:78:76:68:f5:37:ba:71:93:43:
                    21:7c:e2:3b:af:74:0a:9c:1c:38:1c:d5:9d:a7:61:
                    9a:c7:b7:c2:d1:99:b5:6a:33:1e:98:7a:5b:85:6d:
                    85:a4:db:83:d6:30:d1:9f:90:8d:dc:1d:04:d6:d9:
                    32:55:70:da:42:58:08:27:4e:40:2f:d0:74:bb:48:
                    d7:33:e8:65:bc:13:10:12:0f:7a:a9:9c:ef:4e:78:
                    78:28:08:07:c4:93:65:27:b9:f8:94:b3:51:5d:dc:
                    61:10:51:86:46:67:b9:e6:20:9c:a4:2e:c8:b5:c1:
                    f9:32:f9:ad:9f:33:be:87:2c:7b:1e:67:3d:79:a5:
                    ba:f3:09:8a:69:75:95:00:8c:f6:3e:35:b3:a1:90:
                    65:8c:79:ac:17:5b:b5:e4:0c:c6:3b:aa:87:e0:e3:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6E:F0:D2:FD:EB:70:A5:61:96:4C:E3:57:D6:FF:51:47:83:43:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976e897b-90b4-3f78-a74c-f36174943c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:49:e6:25:b6:b8:3d:4d:8a:1b:08:76:26:6c:8b:e1:55:13:
         91:58:cd:d4:fb:4b:02:35:34:58:a3:f5:c9:01:e0:f1:4c:f5:
         8b:f8:ed:46:df:d5:40:ca:eb:52:28:d9:31:50:0f:05:9d:41:
         a8:ef:2b:de:61:6c:9a:71:12:9a:0a:c0:6f:27:71:e4:fe:e8:
         e9:e8:39:c4:42:6f:2f:c4:72:ef:bc:6c:11:e3:f1:61:50:dc:
         58:bb:3d:dd:d0:7a:ef:8e:d0:1f:10:af:a5:b9:a2:c5:f3:43:
         a5:33:1b:90:f4:d0:58:62:88:a4:ea:ba:5c:63:94:34:66:eb:
         37:94:6c:6f:7b:0c:3f:00:82:f1:30:82:01:d6:ff:61:63:a3:
         9f:7f:9b:09:43:6b:7e:b9:b0:4c:cd:c5:23:4f:e6:70:52:a5:
         dc:e1:db:dc:ea:23:6a:0f:a2:7b:5f:b3:ac:6e:59:20:32:65:
         19:95:31:f5:5a:05:a8:7c:c4:8e:23:ba:f9:87:ee:e8:d3:25:
         ba:69:4a:cf:68:10:19:e7:c8:a2:11:1b:42:10:0a:08:f9:a0:
         ba:79:15:0b:f1:5f:e4:1e:66:c3:d4:fb:23:3b:54:8d:46:07:
         73:62:e3:e9:76:7f:66:b1:8e:98:a3:a9:28:93:07:fd:a9:d3:
         26:b5:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:08 2025 by rpki-client