Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da012ce1-a47d-3370-b6fb-434dc973b86a.roa
File:                     da012ce1-a47d-3370-b6fb-434dc973b86a.roa (raw, json)
Hash identifier:          CZcaKJy4BsBUbGh96oIjh34TfspVK4vedrnv6TPG4VE=
Subject key identifier:   29:DF:D1:06:5B:2B:BC:72:1C:2A:5C:E9:2D:B2:CE:2F:C0:30:40:73
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848CDE10AEA4195B102EE591CF0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da012ce1-a47d-3370-b6fb-434dc973b86a.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     15083
IP address blocks:        172.120.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0a:ea:41:95:b1:02:ee:59:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=b23fa877-18b0-40ed-8345-d4e1d3f52dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4e:c6:46:fc:07:0a:1f:8b:8c:ee:aa:b8:cd:
                    28:72:9e:08:12:8c:af:0b:09:cc:60:a7:74:83:37:
                    35:05:5c:be:17:0d:e4:85:cd:98:1d:17:98:5d:19:
                    3f:c5:fc:54:01:c3:2b:3f:9f:15:9c:a4:1c:c1:d5:
                    93:8e:c8:6b:05:df:38:54:a1:7a:44:a2:68:d6:f4:
                    18:4c:4b:00:00:03:eb:54:5e:72:11:e4:41:5b:c1:
                    b6:7c:5b:f2:4b:3b:1e:74:d4:14:b1:fd:6c:08:42:
                    61:85:a3:8d:7b:8a:74:bb:c0:60:83:80:aa:4d:82:
                    32:20:40:b0:d4:24:34:84:d0:29:34:19:95:f8:34:
                    3d:38:30:a3:a1:b9:0f:63:bf:ff:1e:f2:c4:f5:fe:
                    f3:c0:e2:51:5b:d3:8f:8b:fb:5d:f0:a1:6f:91:13:
                    26:fa:55:7a:25:e4:fe:d5:6e:6f:0a:a6:fb:d6:24:
                    b1:1a:d2:70:1d:ba:7e:f4:3d:c1:99:03:df:27:eb:
                    91:0e:07:ed:ba:a0:99:f6:87:4b:5c:81:bf:fa:7a:
                    d3:76:23:5c:3d:54:2e:36:50:e3:2d:27:84:7d:74:
                    32:26:04:61:65:68:68:19:9d:f9:15:df:17:c6:34:
                    f9:62:7b:b0:84:bf:b8:10:73:5c:41:84:20:9e:e4:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:D1:06:5B:2B:BC:72:1C:2A:5C:E9:2D:B2:CE:2F:C0:30:40:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da012ce1-a47d-3370-b6fb-434dc973b86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:a3:57:c6:4c:90:1d:69:b3:be:c4:5a:18:21:62:e7:56:
         48:b4:25:50:e6:08:ad:8e:29:45:f7:8b:27:8a:a1:e0:8e:99:
         e5:cd:6c:ef:4d:cc:2c:c7:9c:4f:27:04:96:c3:69:26:7d:ad:
         56:d1:bb:eb:f9:15:2a:cb:2d:35:0d:56:9a:42:af:40:11:9d:
         0e:93:8b:84:ee:e3:3e:b2:0c:e6:30:09:11:07:d2:70:b1:a3:
         89:cc:51:31:8b:4e:52:d7:db:4a:29:e0:d2:65:e9:24:f5:3e:
         f8:1c:35:d7:02:ea:26:c6:f3:61:90:34:de:74:cc:90:46:7d:
         90:a2:b8:8c:e7:dd:98:c3:91:9a:f0:dd:54:e9:af:a1:63:02:
         d4:db:b1:44:62:a6:8f:75:32:4f:ac:62:6b:6b:5b:50:a1:b5:
         68:20:7d:06:5b:65:d4:30:8b:c5:43:95:98:8c:be:05:67:5d:
         07:bd:5a:2a:73:b1:e8:f1:11:32:5f:8d:1c:18:df:f7:70:d1:
         d4:de:2a:ca:4b:a4:73:95:59:d2:76:d6:42:22:4b:20:25:77:
         a5:45:3a:31:53:5b:ec:3f:c9:77:50:b7:76:5c:c1:9a:01:ea:
         71:3b:53:9f:b4:8d:fd:0f:3d:9d:9c:78:18:93:aa:22:1c:e1:
         5a:c1:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:20 2025 by rpki-client