Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b74b2deb-536d-3ab0-8fc4-9c543864129a.roa
File:                     b74b2deb-536d-3ab0-8fc4-9c543864129a.roa (raw, json)
Hash identifier:          2yw1fRea+CeFKMMnpGeeSWyrMkofx4jrDh6vWbUDCKw=
Subject key identifier:   F2:1D:5E:67:E2:16:93:76:1E:4B:D6:9C:37:69:F0:6E:31:C2:4F:C8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F200CBE9B22F79616C56A3C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b74b2deb-536d-3ab0-8fc4-9c543864129a.roa
Signing time:             Thu 20 Feb 2025 12:34:07 +0000
ROA not before:           Thu 20 Feb 2025 12:34:07 +0000
ROA not after:            Wed 21 May 2025 11:34:07 +0000
asID:                     18779
IP address blocks:        172.252.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:00:cb:e9:b2:2f:79:61:6c:56:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:34:07 2025 GMT
            Not After : May 21 11:34:07 2025 GMT
        Subject: CN=685e62a7-8791-4331-83f1-9e2a66cdda66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:dc:a2:88:ae:06:d8:6d:a6:92:3e:07:e1:
                    16:c9:4e:31:c6:8d:a8:e1:29:06:5a:a5:65:16:a6:
                    5c:1a:44:a4:19:7b:05:54:23:59:15:48:3f:9f:cd:
                    83:82:75:c3:29:36:73:40:0c:25:7a:43:5a:7d:a2:
                    3f:f2:ef:32:6e:7b:ba:28:29:e0:7c:01:59:3c:46:
                    11:56:6e:d4:d7:fc:08:84:7c:ed:1d:8f:7b:37:e3:
                    69:59:2d:14:79:bb:00:a5:f0:3f:7e:8b:25:60:5e:
                    be:e0:62:84:c8:84:bb:b4:08:1b:9d:7a:c9:44:d1:
                    cf:d2:d6:67:12:5e:d7:fe:ce:97:c6:19:d4:37:6d:
                    ac:8c:a7:0c:cf:af:7c:f4:88:6e:86:ba:b5:8a:fb:
                    93:40:03:72:8e:91:04:c0:4f:2a:68:3b:3b:86:2f:
                    d0:14:2c:bf:26:45:8c:51:98:f9:44:92:18:2f:bb:
                    ad:0c:22:91:f3:6b:c0:cb:fb:c5:f5:b3:7b:1f:2b:
                    6c:d0:f1:c4:c5:7e:71:39:34:42:9c:a5:6f:8e:8a:
                    f6:da:8b:a1:ad:f6:a4:dc:e6:5b:36:21:5d:50:42:
                    92:a6:60:81:c9:5b:34:1c:9e:02:6a:03:ad:c2:a8:
                    55:d5:a8:0c:77:c8:60:04:52:a1:fa:4a:73:98:db:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1D:5E:67:E2:16:93:76:1E:4B:D6:9C:37:69:F0:6E:31:C2:4F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b74b2deb-536d-3ab0-8fc4-9c543864129a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:60:7c:48:4f:90:87:86:b3:61:2f:95:19:b7:f3:d4:47:
         73:53:4f:c2:08:46:9d:b5:58:3e:fc:9c:4c:1e:6d:f6:84:e6:
         0a:80:54:b7:2e:2f:12:08:f4:0c:ab:a5:02:d6:b4:d2:63:f2:
         94:e2:a3:67:60:8d:97:14:60:50:72:e0:a7:08:c5:c7:e7:7b:
         94:8c:1b:87:bd:b3:20:bc:53:09:93:51:cb:c5:fc:cb:55:28:
         97:c6:ed:f0:8c:f3:4f:5a:67:e7:f4:40:d1:49:a4:1c:c2:2f:
         88:16:4b:75:5d:f9:47:9e:74:ee:29:57:6e:75:78:96:77:d8:
         dd:aa:da:3d:e9:5c:81:da:58:e9:24:9e:7c:b7:a7:00:d5:b0:
         d7:7a:e9:38:e2:91:9c:00:7f:3d:73:87:05:7b:28:5f:09:9a:
         5e:82:5c:b3:01:cc:ef:ea:8e:ca:0d:1f:24:72:4c:a9:de:e2:
         d1:68:87:9c:3b:02:55:69:4d:d2:75:27:89:18:36:af:0a:ba:
         07:8a:11:34:7e:d5:20:85:40:e5:60:c0:24:7e:3e:e8:5c:76:
         d8:68:83:b5:0d:dd:cc:09:19:71:d1:3c:92:01:07:0c:84:1c:
         ee:f4:3f:55:50:93:a9:1d:a2:8c:87:e2:27:c1:5e:ae:60:cf:
         25:ac:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:21 2025 by rpki-client