Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/990f4fee-d1c9-373d-8128-3b6bc7c03daa.roa
File:                     990f4fee-d1c9-373d-8128-3b6bc7c03daa.roa (raw, json)
Hash identifier:          j259ZCvERO2m//OeifZ1xl92yivx0zjK0OX01Pexyd8=
Subject key identifier:   E3:EF:5A:F4:7C:9C:81:F0:2D:58:99:A0:16:0B:E8:BC:1D:FF:B4:46
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858493075E69946A12C20435DE800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/990f4fee-d1c9-373d-8128-3b6bc7c03daa.roa
Signing time:             Fri 14 Mar 2025 21:30:11 +0000
ROA not before:           Fri 14 Mar 2025 21:30:11 +0000
ROA not after:            Thu 12 Jun 2025 21:30:11 +0000
asID:                     55201
IP address blocks:        172.120.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:75:e6:99:46:a1:2c:20:43:5d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 21:30:11 2025 GMT
            Not After : Jun 12 21:30:11 2025 GMT
        Subject: CN=7446e4ef-7410-441f-aae6-baa67e115756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:40:48:cc:e1:71:be:4c:a0:9d:a4:6f:31:
                    9c:45:b0:87:1a:47:ce:d1:07:54:c9:ec:85:8c:f0:
                    56:d8:1e:af:dd:a2:69:76:51:d0:24:e9:90:95:65:
                    a9:cd:1f:a2:72:92:fc:55:90:7d:9f:db:d1:ef:a3:
                    05:7d:b0:a0:46:53:7f:ec:64:37:ee:5d:5c:5e:9e:
                    fe:60:e2:6c:cd:f2:ba:c1:f7:11:5f:90:86:45:f9:
                    c3:b6:24:8e:fb:d7:2e:4a:96:08:c0:23:1b:54:17:
                    6c:06:f1:4b:7e:c5:66:7b:ca:c5:01:0a:8b:1d:44:
                    c5:ad:03:12:89:ff:fc:ce:63:4d:3e:d0:df:ee:97:
                    30:eb:e3:3a:75:28:f7:be:5e:1e:71:15:8e:4d:73:
                    61:a1:1b:45:5b:a5:98:f2:86:70:0d:ce:d8:bf:93:
                    13:44:30:ca:38:2e:e0:bd:8e:6b:68:c5:df:a5:bf:
                    6c:82:01:0b:1d:c7:77:2e:e8:70:95:91:ba:d8:de:
                    54:1f:cb:6f:b1:df:16:f8:d4:3d:04:16:98:fb:cc:
                    6b:c8:43:b0:f6:3d:ab:5b:0a:9c:4a:0e:91:24:39:
                    57:99:6e:16:6f:3d:f4:d6:7b:f6:cf:ef:13:38:3f:
                    03:44:fe:8a:88:ac:d8:c0:1a:fa:42:e2:b4:ac:6e:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EF:5A:F4:7C:9C:81:F0:2D:58:99:A0:16:0B:E8:BC:1D:FF:B4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/990f4fee-d1c9-373d-8128-3b6bc7c03daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:d9:ed:07:3c:fe:15:f6:d5:06:04:75:36:86:92:d9:36:
         c2:26:5d:1b:d5:48:98:7d:44:b3:be:b1:91:c6:3c:c2:45:52:
         5f:cd:f4:34:dd:c4:93:2e:cd:e4:e2:a0:7d:8e:87:9b:76:7d:
         9e:be:48:bf:5d:7c:14:b7:ee:69:7a:8d:22:a2:54:57:7b:06:
         b4:1c:5e:ad:23:3b:3f:75:d7:cd:62:fe:e4:c3:2a:32:a3:55:
         12:a5:90:d7:37:7b:a3:94:78:3e:05:b2:69:8b:03:45:d7:83:
         23:9f:c3:46:d8:1e:44:a5:ec:f1:a5:df:77:3b:97:a4:9c:62:
         5e:26:5d:09:77:17:a8:23:28:5d:ca:8d:b1:0b:df:39:44:ed:
         b8:9e:d6:63:58:12:39:f9:cf:4f:61:cd:b0:ea:79:fa:e4:ce:
         e2:4a:44:98:63:ec:a2:ce:6f:c2:62:b6:29:bf:d0:bb:dd:cb:
         9f:cc:ce:c9:a8:83:63:62:d7:08:e9:02:3d:a9:ff:53:46:00:
         6f:c2:08:58:ef:ef:95:4c:80:1d:48:4e:14:bf:2b:b2:5f:e8:
         01:4a:27:d7:2b:9d:08:92:a4:de:30:3f:c7:79:ea:3d:65:ba:
         00:e0:5d:41:6b:0f:d8:cc:a2:bc:07:4d:f2:eb:98:b2:32:a9:
         e8:8d:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:14 2025 by rpki-client