Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa
File:                     1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa (raw, json)
Hash identifier:          tI00MP5RaxvUKY0Bmo+yqK1UWsWRazjmm4lArpGBlYU=
Subject key identifier:   DB:1D:6B:89:71:AF:69:FB:C2:E1:26:FF:69:56:7E:BD:B5:AA:F2:27
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F67CF254B154FF9318CD3A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa
Signing time:             Fri 22 Nov 2024 10:20:33 +0000
ROA not before:           Fri 22 Nov 2024 10:20:33 +0000
ROA not after:            Thu 20 Feb 2025 10:20:33 +0000
asID:                     62240
IP address blocks:        172.120.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:7c:f2:54:b1:54:ff:93:18:cd:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 10:20:33 2024 GMT
            Not After : Feb 20 10:20:33 2025 GMT
        Subject: CN=7fe7a5da-8337-4dd3-8404-c437c56853a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1c:7c:f3:7d:0b:5e:2a:d3:0b:5e:7a:de:43:
                    85:af:b5:4e:6b:88:a8:33:96:f5:65:6f:1c:46:e4:
                    45:14:d0:88:8e:a2:a1:31:82:2c:66:1e:ab:20:dc:
                    e4:30:12:b1:08:9d:7b:57:94:0a:a8:e2:28:c3:e2:
                    31:3d:0e:2c:f7:3a:74:ba:85:bb:d8:b0:22:62:50:
                    cb:da:19:0c:1a:fe:a6:24:27:d0:5b:5e:54:72:bc:
                    b9:c6:e0:18:7f:d3:d3:47:20:f4:ba:94:4f:74:97:
                    27:b1:d5:c7:ab:a7:4c:fb:53:94:6f:24:96:9b:77:
                    b8:6e:1b:5d:93:f5:da:ff:e9:bb:6d:db:d2:30:2f:
                    d8:9a:fa:5f:07:3e:2b:3c:6d:84:c5:ca:38:90:08:
                    52:9d:17:7d:a9:11:6a:09:f0:f1:72:0d:bc:6e:18:
                    72:53:a5:7f:d0:35:d5:02:35:e8:45:cc:c2:28:de:
                    97:c8:20:c2:f7:4f:f3:0c:12:52:f6:4a:61:ef:11:
                    39:b4:4d:3b:8a:bc:b4:e3:6f:e2:39:5c:3f:70:14:
                    fa:79:fc:c3:4f:1f:da:af:51:ca:bb:43:85:6e:70:
                    46:fb:2a:be:d5:55:96:3b:22:43:66:84:4a:12:a9:
                    d3:36:a9:63:26:08:20:a3:7f:77:15:5e:e7:dc:be:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:6B:89:71:AF:69:FB:C2:E1:26:FF:69:56:7E:BD:B5:AA:F2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:0e:46:ed:b2:28:11:55:2b:4d:56:6b:16:97:d8:45:8f:
         9b:37:a2:f0:f6:9f:e7:76:9e:5d:dc:a5:8b:a5:3f:42:b8:8e:
         9a:1c:63:ae:da:5a:4d:43:f6:ed:a4:a2:73:2a:d3:69:79:55:
         e6:b5:72:4b:53:1e:6c:93:09:68:40:cb:d3:6d:bf:12:2f:40:
         07:56:29:e7:6e:1e:fd:c1:ff:65:a5:07:ca:c7:c6:ea:bd:7e:
         1d:11:a5:0c:21:8b:2b:44:ca:5c:f9:25:91:49:65:c9:25:2d:
         32:c4:7a:5f:4c:11:c7:ef:3d:38:67:5d:8b:bb:44:c6:38:99:
         71:8c:80:74:ac:c3:a1:a9:1e:9c:bf:47:cd:88:13:6c:0d:7e:
         b0:75:c0:7f:9c:bb:bc:40:8e:0f:fc:e7:fc:91:7c:0a:fb:16:
         76:dd:62:9b:4f:6a:75:8a:4b:64:55:e5:de:8b:ff:a2:e2:0f:
         f4:5f:5d:c1:a5:9a:5f:65:59:70:b4:64:07:60:3a:af:65:f8:
         f9:9f:69:e5:b5:fb:3e:66:56:52:2e:ce:cd:50:cd:59:40:de:
         89:af:e3:54:9e:6f:28:ab:5d:10:d7:3b:e2:aa:39:ea:3a:8f:
         22:68:f8:2a:b7:aa:6e:73:c8:3c:bb:d5:83:1a:38:5d:16:90:
         e3:41:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:36 2025 by rpki-client