Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df1dd757-f1ae-3d90-9099-e5b7bbe4cd87.roa
File:                     df1dd757-f1ae-3d90-9099-e5b7bbe4cd87.roa (raw, json)
Hash identifier:          D7Llybi2z9XeOjrHWxFhoeNO3BA1XF2e63BLntk8QD0=
Subject key identifier:   3A:7A:75:2B:4C:9A:BD:F2:34:1F:83:E5:81:51:77:15:DA:D3:8D:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D64120AE20D3773A42FC6A40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df1dd757-f1ae-3d90-9099-e5b7bbe4cd87.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        142.252.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:20:ae:20:d3:77:3a:42:fc:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=5a369332-cac6-4116-bf23-0c9c2c3bdb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:f7:0b:29:73:37:30:b2:5c:a8:b9:f0:da:
                    ea:70:e9:38:c7:cc:21:52:53:22:4b:55:98:95:0e:
                    43:73:f9:53:dd:72:cf:db:85:a1:44:f2:b1:ae:e2:
                    58:02:b7:4e:a8:b9:55:1e:c5:d6:ef:89:bb:71:88:
                    15:27:23:b8:fc:17:ec:d1:f4:ca:0a:8d:4a:68:ad:
                    32:26:26:b4:22:54:d6:b9:22:de:e9:e4:0f:64:5f:
                    78:25:19:19:63:d2:79:c8:f3:a9:08:1d:7a:db:ab:
                    2d:ad:82:84:d6:fd:bf:9c:0d:a9:df:02:b4:a2:37:
                    da:c2:f7:1b:00:6f:bd:c7:7c:cc:8f:31:a0:11:6e:
                    39:3e:d5:6e:d5:26:48:2c:d0:5a:76:b3:0c:ee:a5:
                    f6:80:41:56:0f:fb:ec:ba:ab:dd:f2:77:dd:14:18:
                    37:ed:f8:f8:36:37:4a:37:38:25:45:5b:b4:de:1c:
                    3e:92:27:49:b5:22:bc:40:05:e1:b1:11:94:ad:9d:
                    e7:d3:b0:4a:c3:7f:d4:f2:5d:03:f5:60:f6:12:71:
                    85:51:57:a6:7d:85:da:78:49:da:53:7d:6d:66:1e:
                    86:bd:de:34:b0:3f:56:1c:26:90:43:54:77:9f:30:
                    ee:e2:9b:a8:ea:0a:fd:4b:92:64:55:4d:26:13:2e:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7A:75:2B:4C:9A:BD:F2:34:1F:83:E5:81:51:77:15:DA:D3:8D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df1dd757-f1ae-3d90-9099-e5b7bbe4cd87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:28:7c:07:06:80:41:e5:da:da:20:a8:32:2f:38:c0:cb:
         45:2f:a9:a8:57:00:59:ac:b5:8a:74:56:3c:89:72:62:f4:c1:
         72:16:1e:89:13:07:74:d7:b5:a3:ee:98:18:ec:64:72:4a:81:
         f1:d7:1c:57:c0:bf:db:78:07:cb:1d:51:4e:5d:6d:0e:30:d9:
         13:92:92:d4:41:99:d3:e9:be:db:ae:9d:bf:b8:1d:da:a7:d9:
         11:dd:45:90:05:61:32:08:61:27:fc:85:c2:33:e3:38:4f:c6:
         c3:78:d6:77:ba:c2:59:92:9d:1e:1a:d6:d0:92:fc:b9:77:d4:
         aa:9d:c5:d3:2a:86:0e:3b:25:cb:ad:97:82:da:8a:24:45:d7:
         1f:d0:2d:f7:5f:52:94:37:7b:2a:ea:4a:30:f9:20:1a:49:0e:
         dc:19:e7:82:54:0f:b3:34:ab:49:f2:ec:9c:38:79:73:69:0e:
         92:f9:62:23:50:93:0f:de:22:49:c0:04:9c:63:96:9a:28:64:
         b5:1b:94:2f:10:6b:8b:0a:3d:d7:d0:6c:f6:56:56:50:23:ff:
         88:50:76:44:4f:f2:48:8c:18:fc:0e:8a:27:31:1f:ec:8b:65:
         54:01:ae:e9:a2:ce:e0:5f:96:a7:5c:a6:d8:21:c4:4e:d3:3e:
         0e:cf:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:27:07 2025 by rpki-client