Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ccb9f739-2c9e-33cf-9bd6-4aca4a4736ee.roa
File:                     ccb9f739-2c9e-33cf-9bd6-4aca4a4736ee.roa (raw, json)
Hash identifier:          3zJVZOPw3m22TGI76sJf/1DxeexQ2NKy6F4ylYseZFw=
Subject key identifier:   DC:FB:5A:05:0A:DD:B9:FC:57:70:2E:AE:5C:89:D7:94:CA:85:25:EF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584824FA89E84EEB510DC776D480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ccb9f739-2c9e-33cf-9bd6-4aca4a4736ee.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     48031
IP address blocks:        192.177.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:89:e8:4e:eb:51:0d:c7:76:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=49e24998-255a-4d42-a505-8ba11a6b779c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:07:e2:c0:cf:60:4a:f8:c1:60:4d:46:45:
                    a8:04:c5:65:4d:97:32:77:37:1a:26:92:92:37:47:
                    4b:f3:bc:d9:28:74:74:cb:b2:9b:5e:78:c8:02:6d:
                    ce:f4:66:23:e2:f3:f0:4a:51:10:24:ce:e1:5c:d2:
                    11:f2:91:3a:4e:5f:17:fa:9a:01:3c:77:b6:a6:00:
                    5e:bf:de:3f:54:56:da:49:87:40:a2:85:a7:a6:03:
                    27:c5:2f:50:d8:14:f6:c7:88:da:56:3c:92:af:17:
                    55:61:2e:e4:07:26:dd:c8:5f:48:3e:ed:0b:2d:13:
                    de:da:6d:88:d6:47:0a:2f:57:a3:78:fa:f9:5b:ca:
                    e3:68:00:7f:a2:84:e7:e1:36:41:77:cf:01:1d:ad:
                    fd:7e:bc:85:c7:48:d9:72:cb:ee:70:71:b2:cd:56:
                    af:4f:f9:8d:8a:86:55:6b:09:bd:d1:b9:ac:23:9b:
                    4e:dd:6a:b1:86:f7:22:5e:33:2b:03:e6:56:c2:d4:
                    60:84:41:61:22:bc:27:2a:6a:42:62:2d:ef:4a:34:
                    0f:2d:b5:89:a8:e9:7d:ee:e7:cb:e1:fb:ac:f5:c3:
                    fa:1b:0c:d2:a5:1e:88:dc:ab:a2:e4:54:d4:3c:dc:
                    6b:32:b7:ab:76:89:d7:99:ab:cb:40:79:40:49:06:
                    c7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:5A:05:0A:DD:B9:FC:57:70:2E:AE:5C:89:D7:94:CA:85:25:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ccb9f739-2c9e-33cf-9bd6-4aca4a4736ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:73:f7:65:be:5c:24:b2:a2:ae:a6:31:05:f5:e4:de:b4:3d:
         de:a5:fd:ac:69:c8:2c:29:ca:ac:04:d5:39:bf:40:e8:46:46:
         3c:31:b1:af:36:95:8f:44:a8:a5:af:3c:6a:09:79:f7:49:5b:
         43:fa:17:64:87:97:c5:c8:60:0b:61:94:1b:95:cb:46:42:e4:
         fa:cb:6a:61:20:09:ef:16:9f:f3:f5:21:3a:73:7d:eb:8b:e4:
         04:4e:b8:9d:69:cd:d0:54:33:f8:76:25:ab:cc:51:6f:bc:56:
         1b:89:56:fd:ec:c9:3c:14:3b:c9:5c:df:3a:67:55:b5:c5:e9:
         ff:ed:70:c0:e1:6d:1e:e9:09:cc:ef:37:d4:1b:c7:3b:a5:45:
         a3:34:3b:ba:5e:15:ff:31:c4:82:b2:7e:07:5b:64:ff:b4:69:
         ac:08:5d:c1:b7:d3:11:ab:1c:ae:74:71:58:0d:c4:c0:48:36:
         a5:6a:2f:c5:06:79:09:e2:97:04:eb:e9:d1:e2:44:aa:fd:a3:
         0b:f0:84:10:ab:e9:3f:a6:d6:a5:53:8d:41:95:29:36:09:ec:
         8b:df:72:fb:2e:b5:1e:3c:d6:f5:e0:0c:b1:cb:39:4b:c6:94:
         74:2d:38:81:73:d3:60:c0:3c:fd:53:63:3b:22:86:4c:3f:d0:
         f7:a5:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:15 2025 by rpki-client