Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be8f0a92-87d3-3d48-906b-b1c29f74d340.roa
File:                     be8f0a92-87d3-3d48-906b-b1c29f74d340.roa (raw, json)
Hash identifier:          FfcDVxAaxOkDTeGRa97K3508n2aYvvIF2v/lg9qxJ7A=
Subject key identifier:   58:60:12:55:6C:ED:18:D1:6E:39:2E:0C:60:1F:C7:13:7F:FE:C5:E4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F6C2EA83E55BB184915EDA18
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be8f0a92-87d3-3d48-906b-b1c29f74d340.roa
Signing time:             Fri 22 Nov 2024 12:41:32 +0000
ROA not before:           Fri 22 Nov 2024 12:41:32 +0000
ROA not after:            Thu 20 Feb 2025 12:41:32 +0000
asID:                     212238
IP address blocks:        172.121.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:c2:ea:83:e5:5b:b1:84:91:5e:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 12:41:32 2024 GMT
            Not After : Feb 20 12:41:32 2025 GMT
        Subject: CN=d9b3b71a-770a-4cfa-b63e-ba948ba7ce27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:af:6f:e2:93:1e:56:68:c8:af:a4:e0:d3:91:
                    2f:3a:52:9a:b3:e3:03:e4:8e:9e:c2:70:59:7b:b9:
                    68:6f:ce:bd:62:55:7c:8d:00:44:e7:fe:69:a8:2d:
                    d9:cd:8c:7a:14:77:fc:77:6f:58:78:99:4b:d2:26:
                    35:07:a9:dc:44:2d:08:33:52:f8:f1:0f:7a:c4:e6:
                    f5:b9:71:bc:ed:91:e6:7c:5f:2f:a8:44:8d:d0:d6:
                    bd:ea:59:11:b5:dd:b5:b6:b2:2d:2a:06:ea:07:64:
                    69:ed:a6:e4:99:ac:d7:2d:b3:b5:ff:b8:cd:a4:fb:
                    0c:9e:76:e6:53:2b:4e:69:db:f9:ec:1a:6d:71:7b:
                    ab:e2:37:e8:4b:b4:11:1d:5b:93:50:2f:16:ae:6e:
                    49:81:24:11:8c:b8:c8:a0:4f:67:87:f9:38:d3:6e:
                    ac:04:b7:6f:18:9b:dc:bf:89:ab:c1:fb:ac:3c:3a:
                    29:be:2f:55:84:01:76:9e:e2:2f:a6:7e:9f:43:9e:
                    2a:bf:8a:bb:22:b9:62:69:4e:7d:7f:b9:f7:3d:e8:
                    7a:12:0d:3f:06:56:90:af:19:57:fe:30:0b:a7:9e:
                    b2:07:cc:d5:a9:12:83:a6:c1:fd:0b:be:b2:a9:cb:
                    27:22:9e:5b:d7:68:7d:69:cb:73:a7:0d:9a:75:a0:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:12:55:6C:ED:18:D1:6E:39:2E:0C:60:1F:C7:13:7F:FE:C5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be8f0a92-87d3-3d48-906b-b1c29f74d340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:10:32:82:ad:46:36:e9:31:7f:0f:30:bf:72:47:a0:c5:
         74:75:ae:31:98:5c:66:a5:71:af:38:b5:0e:a2:9f:7c:7c:cf:
         8a:cb:ba:00:18:cd:62:0c:be:0c:04:c8:76:f6:81:62:11:fe:
         fb:3e:81:28:40:4a:dc:33:17:e3:9f:f8:2e:c2:67:d2:55:bd:
         fb:2c:ec:c3:04:39:f6:b8:f6:eb:95:d1:2d:32:91:d8:05:6c:
         49:49:20:cb:d0:23:93:ba:86:1d:e4:3f:b0:b4:17:a7:54:f6:
         1e:42:c1:6c:1c:af:09:c5:36:3d:43:ea:41:01:4c:1e:a9:fd:
         07:d8:3e:b9:eb:ea:e2:d2:16:38:1c:10:59:19:6d:67:80:33:
         1f:8c:69:7c:66:36:bf:c2:1f:6e:5a:f6:65:00:94:cd:13:bf:
         e9:9c:21:2b:14:00:8b:2a:53:e3:66:f7:f5:66:d6:b3:99:32:
         bb:ce:f6:d0:8b:50:66:4e:08:44:68:14:91:89:79:3a:77:d0:
         41:63:b2:01:08:97:35:ef:55:a3:24:90:db:18:2d:c5:b7:fa:
         8e:da:9f:31:0a:2f:31:60:54:11:39:c5:d3:2c:1c:bf:91:74:
         9c:5c:c0:32:a9:43:ec:f1:c9:41:af:7e:93:1f:cf:14:79:31:
         0f:74:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:12 2025 by rpki-client