Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2308ac8d-e346-3e4c-9b43-835f041a51bc.roa
File:                     2308ac8d-e346-3e4c-9b43-835f041a51bc.roa (raw, json)
Hash identifier:          aJl2dpq1w24NsNaK+gTL/OZNiCNU2m+3NU9NEmckm8k=
Subject key identifier:   86:2C:77:70:D1:CC:DF:84:D4:DD:8E:4C:3E:C2:70:FF:50:25:6B:C2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848705AF2C4E4FD194BEC170280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2308ac8d-e346-3e4c-9b43-835f041a51bc.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     44477
IP address blocks:        104.164.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:f2:c4:e4:fd:19:4b:ec:17:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=ee971a71-8c29-4da8-96f5-e3171fcc8492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:88:0f:b9:fd:16:33:30:80:38:3d:47:c8:86:
                    74:fa:03:c3:a2:6c:ed:34:80:ea:6c:f6:4f:d6:d9:
                    b0:f1:ba:ec:ee:25:cf:1a:62:11:ad:7a:e4:26:41:
                    3c:1b:94:76:7c:7c:a6:69:43:fc:b4:ee:bd:f0:92:
                    08:f9:35:b0:c3:2a:20:8b:3e:9c:4c:26:a4:e5:08:
                    55:85:be:5e:2e:9c:69:ab:51:f4:71:2e:e7:ad:36:
                    20:40:e0:df:a3:be:ca:07:97:56:0b:cb:bb:d9:b7:
                    28:1b:d3:2c:0d:1f:58:78:59:fa:fe:8a:74:22:bf:
                    dc:32:54:f1:6f:52:80:3d:91:58:a3:c4:48:b9:b9:
                    2e:a4:ed:f1:6f:77:31:96:49:21:dd:66:6f:6b:69:
                    b5:51:cb:71:32:da:8c:ea:e0:ed:be:6f:13:9c:d7:
                    8d:03:a7:86:59:96:82:fc:25:79:1b:1f:0d:50:67:
                    51:59:c7:b3:18:10:78:e9:c8:3a:9d:a6:49:72:1e:
                    15:28:7e:58:c2:62:f9:d2:30:97:51:bb:a5:81:da:
                    3b:72:71:22:95:3a:81:ee:4a:8d:7c:38:ab:3b:31:
                    16:15:d5:c5:95:da:83:f3:a1:f3:d0:33:2d:78:d0:
                    4e:93:3f:32:30:b5:76:de:2c:cf:db:09:1b:6e:18:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:77:70:D1:CC:DF:84:D4:DD:8E:4C:3E:C2:70:FF:50:25:6B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2308ac8d-e346-3e4c-9b43-835f041a51bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0b:34:91:41:a5:5e:fa:a4:4f:29:ea:fc:b2:21:81:99:d0:
         b3:e7:6d:b7:ec:44:62:2d:25:af:2e:38:c3:75:22:4c:f6:c3:
         aa:60:79:48:02:88:a7:c2:9f:cd:67:8b:75:5d:89:ce:d4:60:
         3e:ea:0c:52:13:b9:5b:bf:29:7c:5d:b6:69:4e:b1:a7:81:71:
         cc:a7:b1:1f:9c:99:81:6d:5c:c0:91:fd:b2:4b:09:cb:5f:75:
         fd:a2:57:43:1e:53:37:2a:78:f1:5f:ab:19:0d:8c:f3:ff:82:
         41:81:34:73:72:14:64:7b:21:8b:cf:92:10:64:0e:e4:0a:19:
         5e:4c:6a:7f:1b:de:d6:d8:e3:7c:79:1f:54:b7:fc:96:67:0e:
         f6:ef:af:49:db:90:03:f8:13:3e:4b:a9:35:e1:17:0c:1c:ac:
         33:42:f6:59:42:db:74:34:f6:79:1b:db:2e:91:73:58:45:75:
         bb:6e:25:45:ab:e1:6d:7f:a4:ec:27:21:82:13:b2:ae:d5:4c:
         e6:4c:b8:e6:2e:62:fa:81:9d:23:84:83:6c:15:00:b2:86:72:
         c3:b1:be:05:98:e6:58:3e:20:25:45:18:ce:3b:00:03:8d:93:
         d5:f1:b0:bd:73:5b:76:a8:fe:e1:3a:b3:4c:75:17:d9:9b:55:
         34:2c:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:02 2025 by rpki-client