Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d96150c-a626-3995-9e6c-6c63f8600018.roa
File:                     1d96150c-a626-3995-9e6c-6c63f8600018.roa (raw, json)
Hash identifier:          teJnIPT4gTxJHYvHI5gaFSVnNXPsaKYNCZAokJw8Guc=
Subject key identifier:   20:C7:02:FE:C3:8D:1B:CA:D8:C5:74:E5:D2:34:4D:38:D5:4C:19:E9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F6C2C1340BBEA20EF136E9D4
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d96150c-a626-3995-9e6c-6c63f8600018.roa
Signing time:             Fri 22 Nov 2024 12:41:13 +0000
ROA not before:           Fri 22 Nov 2024 12:41:13 +0000
ROA not after:            Thu 20 Feb 2025 12:41:13 +0000
asID:                     212238
IP address blocks:        172.121.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:c2:c1:34:0b:be:a2:0e:f1:36:e9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 12:41:13 2024 GMT
            Not After : Feb 20 12:41:13 2025 GMT
        Subject: CN=3629595d-b042-4600-84f0-c4ff4f3e7375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:f1:d9:26:e7:5b:87:0e:62:3f:7b:b9:14:
                    16:16:7f:6d:37:00:ac:bd:78:cc:30:1d:d4:31:0f:
                    f2:66:91:a7:fc:da:41:44:e4:7d:99:20:89:e4:45:
                    b4:71:b6:e2:f4:11:5d:93:a3:e2:7e:45:2a:8d:99:
                    19:50:e2:e6:16:17:90:51:9b:c3:5e:01:95:e6:54:
                    b7:7a:ee:d0:2d:b1:ef:5b:a7:f7:41:80:39:33:e7:
                    8b:9c:c8:a8:fd:68:87:24:ce:80:ca:a6:e5:f8:5f:
                    de:c6:a8:38:a2:f0:fc:a0:f3:14:0c:12:e0:60:72:
                    d9:1c:56:64:45:be:54:d3:53:01:36:e4:74:13:61:
                    3f:8a:95:d6:f7:d1:48:dc:72:b2:7c:31:57:c7:8b:
                    3b:79:a5:03:c4:50:5f:42:2c:39:b3:f0:87:23:b5:
                    27:21:9e:3d:15:f4:ee:5d:fe:4a:16:5e:24:b7:0d:
                    66:52:fa:4d:d8:09:43:6b:58:3a:60:b1:4c:08:e3:
                    9e:40:f5:44:97:4f:17:cd:72:e4:47:a0:5d:88:75:
                    cd:42:fb:2a:40:b5:1e:29:11:5b:19:5c:6d:1c:ab:
                    60:29:4d:fd:9d:77:c7:96:3a:e9:f4:a2:62:54:2d:
                    47:f1:04:d7:f6:03:2b:89:84:01:8c:0c:4e:33:c9:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C7:02:FE:C3:8D:1B:CA:D8:C5:74:E5:D2:34:4D:38:D5:4C:19:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d96150c-a626-3995-9e6c-6c63f8600018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:43:89:e2:7d:9f:28:b5:ec:38:83:26:17:38:96:54:34:b9:
         d1:49:35:6c:47:ca:60:d2:2d:5a:58:17:28:5b:04:1b:21:63:
         af:3c:b7:78:73:eb:30:2e:46:b9:7b:47:e1:d7:7a:b9:c5:7a:
         b2:a5:36:f5:d9:be:67:ed:1c:bb:16:e7:1f:07:6f:ec:98:d9:
         e4:f0:2c:bc:ed:7c:de:0b:b1:7a:74:91:19:26:fd:10:c7:11:
         30:9b:56:03:4f:a3:db:16:20:bc:73:f2:86:8e:b5:7b:58:a8:
         97:c9:5b:34:39:1c:1f:38:f1:91:3f:7e:ef:e6:5f:ff:37:5f:
         86:b6:96:d8:7f:fe:49:64:19:08:71:c6:84:b6:65:85:67:41:
         e7:fe:37:fc:8e:76:61:6c:d7:e6:22:df:99:18:89:1f:f1:d9:
         80:af:95:ea:17:1c:b6:d2:56:0f:f0:b9:99:68:6b:d0:e1:d8:
         09:62:1e:4e:98:f3:92:a6:03:cb:8f:df:19:8b:a3:6c:38:45:
         a7:50:66:34:1c:9d:1d:15:38:3d:76:a7:4e:6d:84:46:0a:aa:
         16:3c:ed:50:3a:ab:0c:f5:12:f2:2f:8e:50:26:08:84:3e:fc:
         0e:76:49:f0:77:45:e1:bc:2a:e7:cf:15:25:b3:93:31:da:e2:
         94:09:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:48 2025 by rpki-client