Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3302d78-b102-3ed6-880c-b186c6fa0d54.roa
File:                     d3302d78-b102-3ed6-880c-b186c6fa0d54.roa (raw, json)
Hash identifier:          lSL2pC23DHSnuWx5Ivesh6kglmrjz4XIm78cAbTj8rI=
Subject key identifier:   97:FA:5F:06:24:C8:7B:57:56:93:2E:C0:DE:3D:79:7D:59:B1:28:10
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C2B642172AE14BD2A5A86100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3302d78-b102-3ed6-880c-b186c6fa0d54.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        142.252.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:42:17:2a:e1:4b:d2:a5:a8:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=e32165da-77e7-46ae-9cc4-87f83652a045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:0c:26:c5:c8:46:cc:38:09:9e:8e:09:07:
                    ee:9e:5f:03:8b:85:21:e6:17:62:96:41:88:6b:61:
                    0d:bc:7b:59:05:5f:5a:f3:d1:32:6d:a1:bf:60:17:
                    76:0b:4d:4f:1e:f7:7b:f5:e0:09:17:c8:e9:5a:de:
                    bc:60:f9:e3:45:1a:3a:0c:3d:3f:68:2a:8f:de:b3:
                    98:2e:1f:2d:39:bf:55:21:6d:5c:15:81:d3:99:16:
                    23:4a:9a:68:4a:aa:3b:7e:e6:0a:cb:04:97:ef:e0:
                    f3:71:fa:c6:1b:e3:12:62:18:9d:ff:63:7d:79:78:
                    e9:60:ed:d0:e2:59:cd:c0:36:a2:e0:9a:fc:c6:78:
                    6b:65:18:a0:f1:41:fa:e2:3a:86:32:98:dc:ea:ef:
                    7e:25:7e:e9:73:cb:5e:af:a7:b7:b7:1b:27:63:60:
                    43:1e:70:53:ae:eb:16:88:5b:99:6d:a5:0f:21:4c:
                    11:4d:9a:b7:e2:a7:ef:e4:1e:cb:8a:f5:3a:05:2e:
                    7f:e5:49:89:8f:fb:7f:61:80:e4:e2:4a:1b:8f:40:
                    91:8e:9e:ba:54:9d:ed:e1:47:77:5d:de:1c:91:ee:
                    d8:ee:e9:b5:0c:bd:65:68:b3:c3:9e:05:78:2f:f5:
                    9e:6d:94:e3:73:48:6c:c4:03:18:00:29:76:ad:63:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:5F:06:24:C8:7B:57:56:93:2E:C0:DE:3D:79:7D:59:B1:28:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3302d78-b102-3ed6-880c-b186c6fa0d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:6a:0b:4d:4b:b7:cb:9c:10:ee:d3:08:7c:59:0d:27:b5:
         11:5f:fb:9c:b8:7a:7b:d4:0b:2c:2f:38:29:51:96:a3:6d:cc:
         0d:a8:8b:81:a4:44:86:16:75:c4:73:65:d6:a5:13:c0:39:56:
         f9:48:f0:d9:dc:79:84:2a:c7:3a:80:f4:8d:ad:97:e4:cc:80:
         9b:65:99:58:9a:13:6b:5f:4e:9d:29:7d:5e:5b:87:39:a1:0c:
         5b:f3:82:02:3d:a6:cb:4e:ba:c7:56:4b:e9:aa:d1:29:fe:90:
         4c:6c:e5:90:09:9c:a9:5b:61:2d:d7:71:52:ec:79:88:f7:4a:
         58:8c:f2:8b:72:09:ff:e0:b1:7c:d0:79:dc:a1:0c:34:72:f4:
         76:2b:e7:b8:33:01:4f:8c:3b:c0:56:2f:3c:60:ad:a5:e9:2b:
         19:ef:d1:7b:f8:9e:16:8e:11:da:1f:7d:f1:9d:e4:a4:da:5c:
         bb:8c:92:dc:4e:4f:da:56:dc:93:62:a8:fd:29:34:57:c8:20:
         c4:24:fb:0a:07:20:95:2a:e5:54:a9:02:8e:f7:73:93:e9:05:
         05:b7:52:78:9b:18:9c:0e:02:8e:09:34:cf:fb:62:73:e9:ad:
         03:19:c7:26:1a:b1:d1:5e:12:2d:18:41:33:66:66:b0:d7:3b:
         b3:7e:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:03 2025 by rpki-client