Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d67c00-ebf3-3533-bf28-10df8590993b.roa
File:                     c5d67c00-ebf3-3533-bf28-10df8590993b.roa (raw, json)
Hash identifier:          uQnB9VWELmMwWYsr8RP1d60BOGgHf+1GLJMWsYzrNW4=
Subject key identifier:   7F:72:6D:8F:7C:05:A4:D3:22:CA:BE:BD:4F:DE:5D:80:04:8B:63:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858493E40AEA562BB25B206036700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d67c00-ebf3-3533-bf28-10df8590993b.roa
Signing time:             Wed 19 Mar 2025 20:04:16 +0000
ROA not before:           Wed 19 Mar 2025 20:04:16 +0000
ROA not after:            Tue 17 Jun 2025 20:04:16 +0000
asID:                     215287
IP address blocks:        172.121.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:40:ae:a5:62:bb:25:b2:06:03:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 19 20:04:16 2025 GMT
            Not After : Jun 17 20:04:16 2025 GMT
        Subject: CN=72ac7f5a-560e-4076-a696-4861a5d0825f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:8f:d7:89:08:0c:41:2e:8d:bc:cb:f0:44:
                    37:5c:1d:9b:83:5d:de:7d:88:cf:a7:df:26:69:99:
                    ed:58:b9:cb:17:66:33:2c:8a:82:57:ff:69:f2:f6:
                    63:9b:d3:20:62:6d:12:57:97:55:eb:e5:bc:e6:62:
                    79:d3:70:5d:bc:3b:3f:be:5f:c9:97:d4:40:d8:04:
                    8d:31:ce:1d:9f:10:95:b4:9b:4a:b0:fc:e0:51:85:
                    5b:31:45:e8:67:f3:d3:8c:99:59:cc:05:08:fe:3f:
                    d6:5b:bd:a2:b9:97:25:5e:89:6e:a4:e4:8c:52:dd:
                    04:a1:65:97:b9:fc:36:5f:34:e0:e5:01:a7:76:6f:
                    32:9b:c1:70:37:7b:80:db:4b:ec:64:fb:34:78:c0:
                    48:e5:ec:6e:c5:94:34:95:6e:54:ac:3e:31:69:bb:
                    cd:48:ee:d6:29:ce:09:82:73:70:a9:83:c9:8d:c5:
                    c0:af:31:b8:27:17:47:99:92:56:49:a1:48:f3:9e:
                    29:34:1b:87:55:c2:74:f0:be:37:66:16:84:c1:7b:
                    b8:0c:6f:07:07:79:ae:5b:4f:c3:8e:86:63:57:b3:
                    54:41:bd:8e:db:47:90:70:f9:8a:67:55:bf:84:8b:
                    03:d2:b3:a2:1e:72:1c:d1:15:bc:f1:30:d3:20:d6:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:6D:8F:7C:05:A4:D3:22:CA:BE:BD:4F:DE:5D:80:04:8B:63:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d67c00-ebf3-3533-bf28-10df8590993b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:a7:21:ab:45:fc:75:d9:5d:56:83:1d:c4:8b:ea:ea:89:
         c0:30:31:d5:d9:a3:d2:86:49:85:f8:3f:57:e2:6f:0f:15:2b:
         57:0f:06:38:01:e4:dd:f1:42:b0:c0:26:e3:cf:5c:90:83:d3:
         42:7c:e8:61:2b:f7:0d:85:10:78:b8:da:a0:37:f8:37:64:07:
         1f:75:2e:d9:06:a0:38:de:d2:f9:31:67:fa:e3:28:c6:2d:be:
         22:0e:9d:1f:04:4f:db:75:f2:4a:8a:64:99:23:98:37:7f:78:
         ca:87:45:9b:33:56:02:43:6c:23:cc:f4:39:d5:90:58:80:ec:
         05:bb:91:3f:c4:80:15:c2:28:2a:0b:da:ee:c1:50:74:f0:76:
         80:b3:60:08:ea:90:cc:4e:4f:8f:d7:32:a4:58:32:68:fa:88:
         d4:7c:e0:cd:ff:e1:d6:d6:b3:87:3c:11:75:fa:a5:0f:01:45:
         b3:97:35:90:f7:b9:ba:42:89:86:85:37:50:5f:0e:4d:45:79:
         53:00:8f:c5:20:ae:f2:3c:92:ab:7b:66:d3:31:73:3c:f8:db:
         84:58:e7:c0:22:06:e4:5f:cf:4f:09:5e:8c:89:89:8e:c2:64:
         fb:07:99:0d:f6:33:b4:ed:67:7e:e9:10:a3:f4:bc:76:34:96:
         fa:28:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:49:34 2025 by rpki-client