Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd1c8434-4efb-37c5-bec6-08d95d648659.roa
File:                     dd1c8434-4efb-37c5-bec6-08d95d648659.roa (raw, json)
Hash identifier:          l+PRQyo8F/slqk4v+UGneDosYSrRN7twAWNsCD+Ml7o=
Subject key identifier:   03:16:49:46:AD:6E:1D:A8:2C:06:92:C7:8D:13:64:17:39:D4:45:AA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F692108CE26F01EA7DDB5D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd1c8434-4efb-37c5-bec6-08d95d648659.roa
Signing time:             Fri 22 Nov 2024 11:03:06 +0000
ROA not before:           Fri 22 Nov 2024 11:03:06 +0000
ROA not after:            Thu 20 Feb 2025 11:03:06 +0000
asID:                     204957
IP address blocks:        172.120.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:92:10:8c:e2:6f:01:ea:7d:db:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 11:03:06 2024 GMT
            Not After : Feb 20 11:03:06 2025 GMT
        Subject: CN=0c531747-56d7-49d1-88f4-b3828446d698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:47:06:e6:d6:f1:4f:64:24:96:e5:6d:bb:
                    d9:d2:e9:b8:2b:18:76:21:71:05:6d:b4:b8:2b:db:
                    49:a2:29:65:6c:e2:40:48:a7:9f:aa:30:ac:81:ac:
                    0d:df:a9:9b:e9:5f:ee:8c:8a:00:ba:16:8c:7d:77:
                    0c:4b:61:0e:24:03:50:13:e6:64:90:2d:d8:ad:4b:
                    92:cf:2e:28:ad:08:cf:28:db:f0:d6:0e:68:5c:e7:
                    0f:ed:96:a9:1b:d0:ec:c5:7a:5f:86:79:65:78:25:
                    c0:6d:86:8d:51:15:38:aa:22:b6:e1:50:f7:f1:4f:
                    e7:39:5a:47:06:3f:a2:8b:8d:ff:ac:67:83:26:6f:
                    24:b4:2a:c5:28:54:1b:17:5d:1c:7e:71:34:02:39:
                    85:76:52:6a:92:c0:85:2b:1e:38:a4:38:c0:33:71:
                    aa:13:a9:8d:53:97:cf:6e:8a:da:79:1d:a3:00:47:
                    1b:b2:4a:6a:c0:60:2e:3b:4b:38:ef:0a:c8:49:e3:
                    1d:52:fb:40:25:d0:4b:07:73:91:9c:64:fe:84:9c:
                    16:e7:db:4c:91:80:67:82:d5:88:bf:d7:29:31:6b:
                    56:a4:fb:06:41:67:cb:09:a9:a3:72:69:44:4a:b1:
                    ae:a6:1c:97:79:e1:4d:f8:d2:92:06:7b:c3:cd:82:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:49:46:AD:6E:1D:A8:2C:06:92:C7:8D:13:64:17:39:D4:45:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dd1c8434-4efb-37c5-bec6-08d95d648659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:a0:b3:ed:88:65:71:a1:92:bb:71:14:c6:75:c0:96:57:
         26:7b:7b:ac:a0:7b:74:d7:44:56:3e:8b:0f:60:2a:a8:85:05:
         e3:ae:88:a8:80:57:33:9b:88:95:3b:c1:ae:3e:5a:1a:e3:19:
         bc:27:a9:0b:8f:b0:05:1d:4d:82:5a:c6:cd:d9:0f:be:d0:8b:
         c9:02:67:b4:c1:9f:f4:93:00:bb:31:05:02:ab:b7:a9:01:d0:
         42:ef:9a:ed:fa:92:b1:c4:63:b0:72:55:d2:47:1b:3b:02:f2:
         0a:05:8b:cc:4c:5a:66:9c:8b:bc:d5:d1:fd:b6:90:5f:1c:ae:
         c3:0b:8a:9f:8d:bd:1b:6d:d0:19:dd:05:00:30:7e:dc:62:fc:
         08:a2:52:66:d1:02:86:6d:b5:a1:20:7d:2c:b0:be:3a:26:b2:
         be:c3:a4:91:5d:05:1f:f1:ae:15:aa:72:25:c9:7f:c9:2a:bf:
         36:d9:d8:d4:2a:89:64:e2:ed:69:a0:62:ad:8c:d6:2a:05:d0:
         08:94:ab:e5:2b:db:9c:72:eb:56:b0:48:f3:e4:60:f1:4c:38:
         dd:68:6e:b8:83:b5:20:9c:51:2d:2e:de:79:55:23:5c:20:4c:
         94:47:6d:59:48:17:94:ee:48:ef:08:d7:b7:84:db:be:f7:6b:
         b9:83:94:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf2khCM4m8B6n3bXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEyMjExMDMwNloXDTI1MDIyMDExMDMwNlowLzEtMCsGA1UEAxMk
MGM1MzE3NDctNTZkNy00OWQxLTg4ZjQtYjM4Mjg0NDZkNjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs11HBubW8U9kJJblbbvZ0um4Kxh2IXEFbbS4
K9tJoillbOJASKefqjCsgawN36mb6V/ujIoAuhaMfXcMS2EOJANQE+ZkkC3YrUuS
zy4orQjPKNvw1g5oXOcP7ZapG9DsxXpfhnlleCXAbYaNURU4qiK24VD38U/nOVpH
Bj+ii43/rGeDJm8ktCrFKFQbF10cfnE0AjmFdlJqksCFKx44pDjAM3GqE6mNU5fP
boraeR2jAEcbskpqwGAuO0s47wrISeMdUvtAJdBLB3ORnGT+hJwW59tMkYBngtWI
v9cpMWtWpPsGQWfLCamjcmlESrGuphyXeeFN+NKSBnvDzYKZYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMWSUatbh2oLAaSx40TZBc51EWqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGQxYzg0MzQtNGVmYi0z
N2M1LWJlYzYtMDhkOTVkNjQ4NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHieMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2qoLPtiGVxoZK7cRTGdcCWVyZ7e6yge3TXRFY+iw9gKqiFBeOuiKiA
VzObiJU7wa4+WhrjGbwnqQuPsAUdTYJaxs3ZD77Qi8kCZ7TBn/STALsxBQKrt6kB
0ELvmu36krHEY7ByVdJHGzsC8goFi8xMWmaci7zV0f22kF8crsMLip+NvRtt0Bnd
BQAwftxi/AiiUmbRAoZttaEgfSywvjomsr7DpJFdBR/xrhWqciXJf8kqvzbZ2NQq
iWTi7WmgYq2M1ioF0AiUq+Ur25xy61awSPPkYPFMON1obriDtSCcUS0u3nlVI1wg
TJRHbVlIF5TuSO8I17eE2773a7mDlMU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:21 2025 by rpki-client