Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffbc9729-497b-3a36-abc7-73c4c8a3e2d2.roa
File:                     ffbc9729-497b-3a36-abc7-73c4c8a3e2d2.roa (raw, json)
Hash identifier:          eHyr04LunZJYhuuT8QIEPDBLFi2Lhs8iK8q34XzqLwA=
Subject key identifier:   04:F6:5E:20:F7:94:5C:D6:5D:EF:CA:B6:F4:04:2A:A6:44:6D:D2:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849307195DA93DD6B1251079B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffbc9729-497b-3a36-abc7-73c4c8a3e2d2.roa
Signing time:             Fri 14 Mar 2025 21:21:29 +0000
ROA not before:           Fri 14 Mar 2025 21:21:29 +0000
ROA not after:            Thu 12 Jun 2025 21:21:29 +0000
asID:                     7018
IP address blocks:        172.120.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:71:95:da:93:dd:6b:12:51:07:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 21:21:29 2025 GMT
            Not After : Jun 12 21:21:29 2025 GMT
        Subject: CN=49ba2592-1322-4893-84de-ab378a70f27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:a4:32:92:a9:e6:75:61:58:3a:81:b0:43:
                    07:84:20:3a:c9:61:2f:7b:02:d7:de:b8:29:ef:02:
                    11:71:5e:af:1e:14:1b:30:8b:0c:4a:67:9e:c0:69:
                    58:2d:db:20:9f:1f:a4:5d:ff:1b:4e:bf:fa:22:8a:
                    87:66:89:1e:de:34:a9:e4:6d:df:bb:c3:d0:dd:4d:
                    d9:05:55:f3:c0:ae:e4:3e:68:a4:78:67:2d:c8:31:
                    c0:fb:6e:af:5d:31:cf:e3:a5:ac:21:6e:ee:1b:aa:
                    3f:84:10:cf:40:ea:4c:07:a9:d1:bc:d0:6d:f2:ac:
                    fe:02:4b:4a:bc:db:48:37:2b:0d:8e:54:7e:be:c4:
                    32:3d:5d:8b:d8:0d:a3:f1:37:53:f3:8b:91:da:c7:
                    fb:0b:ef:d8:8a:e0:d1:32:82:05:ac:1d:35:7c:1a:
                    95:23:62:4c:4e:e9:b8:fa:60:76:1c:a8:f4:f8:38:
                    98:15:52:cc:23:2b:35:d0:4b:41:66:be:77:ff:ef:
                    b4:88:ee:09:1d:ac:dd:d5:63:d9:6e:82:21:07:fe:
                    1f:e3:6f:f7:82:58:2b:ba:d4:fc:11:5e:36:5c:40:
                    3c:6a:23:cc:e0:7b:2c:8e:fe:db:76:50:bf:30:54:
                    4c:98:4d:2e:bf:e4:99:5b:cb:10:d1:9a:b0:ec:9a:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F6:5E:20:F7:94:5C:D6:5D:EF:CA:B6:F4:04:2A:A6:44:6D:D2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ffbc9729-497b-3a36-abc7-73c4c8a3e2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:45:0d:24:70:f0:78:cc:de:38:43:36:0e:63:d1:0a:06:34:
         40:f2:3c:17:c4:1c:0c:9a:bc:5b:59:bc:77:18:dd:16:6d:ed:
         9f:2d:94:a3:78:5e:d2:45:f8:7b:0f:6b:6d:d8:b3:8c:d7:b3:
         59:40:a9:7c:3c:7a:8e:af:c8:d0:56:c0:c9:af:14:9b:e5:de:
         96:81:1e:72:cc:c6:c8:0b:71:6a:62:b3:86:1f:72:14:73:01:
         64:0f:c9:12:c5:2e:04:e9:76:a7:76:d4:e6:7d:a7:b0:d4:b4:
         aa:02:b1:3a:7f:b3:66:b3:bf:fb:7e:32:49:9d:e8:66:30:18:
         70:88:1b:36:5d:e2:1e:e1:88:0d:b4:28:8f:bd:59:01:9a:c3:
         a5:54:03:61:19:67:82:5a:b7:d5:7b:55:75:59:36:a5:58:e6:
         fa:be:d3:29:38:82:c9:18:4f:ed:c4:4e:c3:43:98:16:db:79:
         b1:00:98:34:78:a9:1c:a2:35:95:6f:71:2f:9f:5e:27:21:4c:
         1e:9e:57:5e:fe:02:98:a0:71:eb:b4:aa:e9:d9:2a:ef:01:6c:
         08:45:d8:36:48:ec:51:06:f2:1f:ed:23:80:e6:51:e8:4a:0a:
         4b:d3:d2:19:1b:cf:8b:c1:ff:f8:eb:00:e0:2e:81:52:df:4b:
         dd:2a:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:07 2025 by rpki-client