Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa
File:                     d23dbedd-8c9d-3273-9d00-d28fb411c342.roa (raw, json)
Hash identifier:          cUSWrcfqOlXOaDw6h27x1X78NHS6whjOBW+arcx4AgU=
Subject key identifier:   50:0E:52:A1:D0:4D:68:2E:1B:A9:7A:3C:69:6E:14:05:BF:25:81:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96ABCD11B5817173468A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     50131
IP address blocks:        172.252.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ab:cd:11:b5:81:71:73:46:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=d5ef5238-2fde-4a57-88e8-db7abee52b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:5f:4d:43:f3:86:e6:d8:4b:f6:b8:ca:1c:
                    31:4a:18:49:ff:db:da:77:df:20:9d:f9:02:6b:c9:
                    55:7a:d4:67:49:a8:88:41:e5:6b:38:d7:0d:e1:18:
                    90:51:42:eb:b3:4d:5a:a6:0f:77:59:34:dd:89:d3:
                    5f:90:4c:94:37:0c:4e:2b:5f:f8:07:24:a3:87:9b:
                    fc:fc:c0:1a:99:0b:d7:ac:b7:11:56:4a:35:3d:73:
                    6f:cc:df:70:59:27:7d:d8:3b:53:02:79:67:7f:71:
                    ad:dd:69:c5:4b:c7:c7:1c:e5:d0:ce:43:3b:e1:7d:
                    bb:6d:81:fc:eb:0a:f9:40:2a:ba:6b:e5:89:48:10:
                    ab:c2:ce:01:c2:03:1b:db:92:52:67:f3:ae:ca:d3:
                    01:7d:8c:a5:12:fe:dc:07:e3:b1:d9:06:70:fc:ff:
                    30:30:66:23:d7:cb:73:e2:e9:ac:66:b5:42:2d:a8:
                    47:4d:64:35:4e:66:2a:1a:2f:d4:af:92:cc:50:55:
                    d5:56:8a:a8:a8:b4:50:62:30:ec:7a:3f:b9:7f:05:
                    bb:90:c4:d9:01:3d:09:b3:9b:44:79:e5:8d:ac:1a:
                    c6:d9:65:f8:95:00:90:a2:bd:17:b8:41:10:f9:ec:
                    1d:78:9c:90:1b:df:2a:cb:19:72:e4:6a:18:98:03:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:52:A1:D0:4D:68:2E:1B:A9:7A:3C:69:6E:14:05:BF:25:81:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4e:44:d3:98:27:45:28:a1:a5:b0:8a:d1:21:ca:70:fd:67:
         5b:ff:0d:e9:56:0a:7c:5d:7c:b8:f6:46:05:72:67:71:0a:7d:
         32:d3:14:80:bf:62:e0:c8:36:5d:56:ab:dc:5a:4f:4e:53:43:
         77:11:4e:5d:f4:91:ae:67:c9:81:70:5f:80:bc:81:d0:6e:44:
         ad:ef:b0:2a:07:8f:25:4a:a5:7a:f1:d8:2d:7c:30:2e:67:c7:
         95:8a:94:8c:e7:1d:56:ce:1f:7a:aa:5d:03:79:12:96:41:1e:
         e0:9f:28:50:2e:d4:7d:45:33:36:f0:a9:ae:dd:0c:7e:8f:f0:
         e0:2e:c3:21:d9:ee:31:4b:9d:71:4b:ab:cc:cc:95:60:81:0f:
         b4:8f:80:a9:11:a7:40:f2:26:d8:12:e6:3c:f5:6a:ff:d2:28:
         ab:5e:76:c0:21:94:e4:a7:8b:55:38:a1:ae:fe:eb:09:e3:25:
         b0:be:fd:00:e6:dc:96:4f:fe:5a:97:13:c2:a5:ba:98:ba:81:
         94:e2:e8:c1:3f:1d:d2:3e:9b:14:53:cf:de:bc:f8:dd:03:9f:
         43:fb:95:6c:0d:39:4f:e7:7c:a6:81:03:65:b3:a1:42:cf:90:
         19:57:d4:2f:92:e8:13:98:e7:6f:e9:da:df:37:1d:8e:bb:1a:
         f7:61:3c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:08 2025 by rpki-client