Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/858fa1f6-6a48-3147-9cba-56cd07fc5513.roa
File:                     858fa1f6-6a48-3147-9cba-56cd07fc5513.roa (raw, json)
Hash identifier:          gm+Jiw7T3ouybO/SC/7/nR/ZEjIDTOzCTuplnm7Veik=
Subject key identifier:   F6:09:85:5F:67:57:09:A4:59:BD:5C:7B:62:2F:CB:18:AB:EA:7B:10
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F660862FB9C6258D38DD8900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/858fa1f6-6a48-3147-9cba-56cd07fc5513.roa
Signing time:             Fri 22 Nov 2024 09:23:17 +0000
ROA not before:           Fri 22 Nov 2024 09:23:17 +0000
ROA not after:            Thu 20 Feb 2025 09:23:17 +0000
asID:                     54600
IP address blocks:        104.165.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:60:86:2f:b9:c6:25:8d:38:dd:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 09:23:17 2024 GMT
            Not After : Feb 20 09:23:17 2025 GMT
        Subject: CN=f44c38e3-03da-4dc8-b362-15702ea06466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:7a:2b:dc:3b:7f:16:d0:50:32:20:50:1a:
                    82:39:bc:7d:6b:45:d6:51:4c:20:74:3a:60:34:f1:
                    63:a4:55:98:06:5d:ff:06:bd:96:9a:7a:a4:ec:ea:
                    a7:ef:3f:fd:b7:c1:48:52:7a:63:74:5f:2d:e3:85:
                    54:e2:1b:4f:5a:89:e9:c5:3d:2c:41:75:d4:99:6b:
                    62:61:48:77:29:cd:ca:ba:cb:1b:fc:d4:ff:06:13:
                    76:bd:e6:47:b5:79:7c:fb:28:8a:cd:79:0f:5b:7e:
                    e7:24:27:97:63:36:50:be:c1:47:9e:15:78:05:ff:
                    7d:0a:7d:eb:7b:e8:54:ca:bf:d6:33:a0:fb:ec:c1:
                    47:3a:d8:ed:4b:5b:b8:ee:3c:1b:38:0e:ea:59:35:
                    f9:01:78:52:3a:2e:7e:a8:b7:d1:db:aa:1b:b9:89:
                    22:02:52:c3:76:eb:f3:3d:79:cb:d9:3c:f4:c7:a8:
                    64:0b:b5:35:fe:45:c7:81:06:21:bd:3f:13:80:e2:
                    f7:d5:af:7c:25:75:e6:30:39:63:e1:eb:97:9c:e2:
                    37:4a:a8:16:94:7c:58:bc:0e:ea:ef:7e:93:98:db:
                    65:d0:0e:22:b3:44:3d:4e:f2:7c:9b:21:b8:35:2a:
                    f2:9f:a0:5d:34:97:a7:3a:a4:04:6d:f3:5a:74:91:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:09:85:5F:67:57:09:A4:59:BD:5C:7B:62:2F:CB:18:AB:EA:7B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/858fa1f6-6a48-3147-9cba-56cd07fc5513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:07:f9:57:42:ed:a1:f3:9a:75:2d:64:7e:6f:bd:20:16:
         42:74:7b:4f:da:f7:cf:0f:7e:ab:9c:ce:a9:1b:94:a2:d1:f5:
         1b:04:84:8e:69:01:92:16:e6:20:3b:e3:84:f5:19:0a:bb:0c:
         01:c5:2b:6a:a9:43:15:19:b1:b4:71:ff:63:24:1b:77:b4:cc:
         5c:6f:fc:d9:62:14:2f:14:e8:19:98:b8:4f:0c:bf:57:ce:67:
         3b:b4:8a:e3:3b:f9:b3:08:ed:23:f5:76:9f:d7:f4:f4:ef:e4:
         37:2f:49:a5:8c:a7:5c:9f:d7:09:4b:f1:5f:1b:65:c3:a4:e2:
         9c:c6:11:a6:a9:68:29:c2:7f:78:e6:2b:86:ba:ef:62:5d:fb:
         74:fb:ea:96:ca:5b:a3:0a:99:41:c9:7e:c6:db:f3:b7:39:44:
         f5:48:2d:a4:21:3b:ed:b7:e3:e6:b7:96:1a:ad:4d:21:2e:97:
         56:8d:d8:e5:e1:af:d2:d0:0d:20:5f:af:96:d8:f9:e4:83:ed:
         98:f5:cb:c1:67:19:09:30:8d:b3:37:25:c9:20:02:5c:46:ee:
         07:df:cc:df:92:0c:b8:cb:18:58:4e:9f:3b:3b:70:a1:90:3a:
         66:1d:00:c7:21:d9:e7:fb:3e:fb:03:94:fd:5e:bf:1d:cc:ff:
         d6:d6:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:38 2025 by rpki-client