Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
File:                     be103ab9-f254-308e-9595-59376841b2ef.roa (raw, json)
Hash identifier:          8GvLd1nJ0Ywh+sVl5NxfNiyBV1MTwvs50xmAUTgr7IE=
Subject key identifier:   47:10:7B:48:0F:3B:D2:2B:8E:1A:9D:81:FB:E8:41:9E:DB:06:9B:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848854B33648895272E9323AEC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     400536
IP address blocks:        172.252.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:33:64:88:95:27:2e:93:23:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=b4e6b25e-b9d7-4d05-8288-879e3ba0c937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:81:07:8c:b1:0f:67:7e:5f:4c:39:98:64:
                    f3:1f:65:0c:94:38:af:67:a8:47:00:97:5d:89:f1:
                    65:07:23:ce:2a:39:4a:3e:af:0a:ee:33:a1:aa:a3:
                    df:ec:97:4c:37:e3:b0:d8:f8:c0:c4:04:98:d0:8f:
                    5d:e4:56:c3:1b:91:47:ca:f5:14:db:c2:a7:63:6f:
                    48:5f:26:88:7a:22:f9:7a:56:db:6d:e0:b4:0c:84:
                    bc:d5:c3:71:c1:49:4b:de:30:c8:17:ba:b2:18:17:
                    66:68:2a:c3:77:36:58:49:77:32:5b:cb:47:cc:a5:
                    73:b2:a6:ee:e8:1f:42:04:79:1e:51:49:7e:64:40:
                    9e:b3:5e:0c:3f:c1:9f:76:c8:dd:7c:25:6e:c6:b8:
                    5c:cd:31:d3:eb:a7:6e:c9:1c:c8:b2:79:74:1f:d3:
                    fa:92:a2:01:9e:93:5c:66:55:62:e8:9e:32:5a:e0:
                    cc:9f:67:07:4c:16:a1:c0:7d:26:91:3e:e9:4e:16:
                    4e:90:83:1d:df:0d:bd:10:c7:8a:44:57:e6:df:15:
                    54:a4:7e:00:ee:45:0c:71:86:57:ab:e7:89:88:64:
                    63:b3:46:40:1d:76:ab:a9:38:96:08:b0:ce:eb:ec:
                    ca:45:63:40:fc:3e:2c:92:1b:c0:f5:76:5e:71:25:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:10:7B:48:0F:3B:D2:2B:8E:1A:9D:81:FB:E8:41:9E:DB:06:9B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be103ab9-f254-308e-9595-59376841b2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:21:38:0e:23:ec:0a:84:26:1f:92:89:fe:c1:c0:d8:10:
         3b:9f:70:a1:d7:39:1d:32:4a:49:c3:4a:9b:c2:da:97:4d:2b:
         85:aa:ab:7a:07:c2:35:97:a4:21:6c:f1:c0:b9:6a:f6:37:61:
         4d:30:a3:17:a0:5f:3b:bf:39:e4:bb:d1:8a:52:4d:cc:be:54:
         f1:d6:83:71:29:18:32:fa:93:24:43:ab:f0:00:43:2c:e9:70:
         63:94:82:ee:bb:3e:b6:27:d9:a7:ea:6e:fc:d6:ed:8b:ce:59:
         30:c5:be:f5:cb:06:c4:b3:e6:fc:6c:e2:a4:1f:35:8f:cc:64:
         ef:5d:93:cc:fb:87:72:5c:e8:21:29:01:58:49:00:7a:81:ff:
         c8:de:28:75:b2:a0:62:5b:99:80:2e:df:d2:c9:56:10:06:f3:
         2e:85:5f:f0:a5:97:34:14:0a:2e:2c:ca:6f:07:ae:c4:83:af:
         9c:35:ce:05:40:97:f7:cd:0b:4e:31:d7:f5:c5:03:31:0c:77:
         e1:29:d2:41:75:f3:ff:6e:77:23:28:0c:06:20:b5:cc:a8:67:
         c5:03:28:72:a9:40:f8:5b:9a:43:e6:81:a9:33:98:73:7f:47:
         f8:4b:ac:86:20:c4:e5:6d:04:03:d0:2d:37:18:0c:61:de:6f:
         7b:d0:14:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFSzNkiJUnLpMjrsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
YjRlNmIyNWUtYjlkNy00ZDA1LTgyODgtODc5ZTNiYTBjOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq2BB4yxD2d+X0w5mGTzH2UMlDivZ6hHAJdd
ifFlByPOKjlKPq8K7jOhqqPf7JdMN+Ow2PjAxASY0I9d5FbDG5FHyvUU28KnY29I
XyaIeiL5elbbbeC0DIS81cNxwUlL3jDIF7qyGBdmaCrDdzZYSXcyW8tHzKVzsqbu
6B9CBHkeUUl+ZECes14MP8GfdsjdfCVuxrhczTHT66duyRzIsnl0H9P6kqIBnpNc
ZlVi6J4yWuDMn2cHTBahwH0mkT7pThZOkIMd3w29EMeKRFfm3xVUpH4A7kUMcYZX
q+eJiGRjs0ZAHXarqTiWCLDO6+zKRWNA/D4skhvA9XZecSU+dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcQe0gPO9IrjhqdgfvoQZ7bBpsPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmUxMDNhYjktZjI1NC0z
MDhlLTk1OTUtNTkzNzY4NDFiMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBrITgOI+wKhCYfkon+wcDYEDufcKHXOR0ySknDSpvC2pdNK4Wqq3oH
wjWXpCFs8cC5avY3YU0woxegXzu/OeS70YpSTcy+VPHWg3EpGDL6kyRDq/AAQyzp
cGOUgu67PrYn2afqbvzW7YvOWTDFvvXLBsSz5vxs4qQfNY/MZO9dk8z7h3Jc6CEp
AVhJAHqB/8jeKHWyoGJbmYAu39LJVhAG8y6FX/CllzQUCi4sym8HrsSDr5w1zgVA
l/fNC04x1/XFAzEMd+Ep0kF18/9udyMoDAYgtcyoZ8UDKHKpQPhbmkPmgakzmHN/
R/hLrIYgxOVtBAPQLTcYDGHeb3vQFGg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:20 2025 by rpki-client