Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa
File:                     9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa (raw, json)
Hash identifier:          tsxf12bZpr6dxaW8p0c0KcoB5u0z4A3Q2L3KjAoNj2w=
Subject key identifier:   4E:E2:9B:65:FC:FE:02:04:D8:E8:4A:DA:04:87:CA:24:2A:A8:9B:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F67CD298BA066E2359536F90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa
Signing time:             Fri 22 Nov 2024 10:20:18 +0000
ROA not before:           Fri 22 Nov 2024 10:20:18 +0000
ROA not after:            Thu 20 Feb 2025 10:20:18 +0000
asID:                     62240
IP address blocks:        172.121.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:7c:d2:98:ba:06:6e:23:59:53:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 10:20:18 2024 GMT
            Not After : Feb 20 10:20:18 2025 GMT
        Subject: CN=d131e20d-5fce-4075-89aa-e2189333f689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:d9:0b:22:e9:53:d0:26:fd:8e:92:4a:d5:
                    90:cf:23:44:f3:86:c7:4a:5a:c1:67:06:d9:fd:32:
                    6a:c0:e5:8f:05:ed:ba:f8:cf:54:4b:8c:e2:85:da:
                    b5:74:24:b0:cb:11:77:b2:c3:34:03:90:97:aa:26:
                    3b:bc:6e:7c:3d:89:1d:da:d0:20:c5:4e:09:d0:b6:
                    bc:51:a8:5a:e9:02:a4:c1:51:29:8c:ef:f5:23:1d:
                    c8:88:cd:13:ae:e3:18:d8:9e:d5:b9:88:f8:73:76:
                    80:f1:3c:6d:21:89:4f:61:63:56:a6:6c:01:3d:6f:
                    0a:85:e9:a5:9b:ff:fa:1a:d6:60:0c:a2:99:ad:f5:
                    b1:94:b8:6d:2b:e1:9c:ff:57:0a:ce:f9:0e:21:76:
                    3d:02:09:8b:40:7f:e1:b4:96:c0:60:f5:c3:7d:95:
                    7d:cf:13:80:88:f0:4d:e2:89:4e:1b:f4:79:03:f8:
                    e7:3c:b5:f4:81:af:3b:92:3f:72:14:fa:be:d5:e0:
                    f9:3f:8a:66:b1:cf:ec:ef:86:89:9a:5f:07:55:14:
                    29:b5:c0:ee:6e:c8:3a:e8:d6:69:00:e2:c5:d4:8b:
                    b0:9b:10:32:fb:4e:c2:6f:e5:10:27:7b:f8:22:e6:
                    e8:95:39:42:6e:2c:7e:1a:ed:7d:dc:6e:dd:c1:a9:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:9B:65:FC:FE:02:04:D8:E8:4A:DA:04:87:CA:24:2A:A8:9B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ecb50e2-94e6-3b2c-8d1a-a5040ee34e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:16:4d:a2:f9:48:52:b0:4d:1f:eb:fe:f6:2d:66:56:f7:6a:
         c0:9f:61:b0:ea:2d:d6:22:d9:ba:66:c4:72:82:19:b1:c2:b9:
         aa:81:02:6e:c7:1c:f0:99:cb:d1:16:71:4d:01:d1:98:19:95:
         da:17:ae:2b:86:2b:35:8f:b1:d0:12:06:8e:49:78:7a:5d:51:
         4c:85:59:29:ac:6b:7f:e3:d2:d8:c5:1d:8b:1e:b2:25:07:7f:
         eb:f4:f6:aa:be:46:0e:b7:d0:16:9c:48:0c:c4:c0:a0:b1:25:
         a7:82:b0:ed:e8:a0:65:df:d6:31:75:7e:cb:d9:63:09:e8:4c:
         ab:b9:10:83:42:c1:a9:88:ff:72:84:10:33:d6:e5:b8:e2:a2:
         be:87:13:ae:21:84:f1:37:81:8e:b6:cb:93:15:c8:84:07:c7:
         00:47:17:41:f0:f4:21:46:5e:3c:52:9d:95:07:14:68:1f:52:
         be:02:4c:c2:fa:5b:aa:d0:d5:2c:b4:86:d4:a2:d0:eb:70:df:
         05:5b:bf:0d:f2:29:6c:77:5b:e1:9a:bc:97:be:59:77:48:a6:
         ed:97:26:c4:22:8b:bc:84:fe:83:e4:1d:4b:41:2d:0c:6c:0e:
         17:a8:f4:22:c9:d8:91:c1:f2:25:bc:05:d5:34:1a:2d:51:0b:
         9c:8f:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:10 2025 by rpki-client