Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1919c05c-9023-3cff-8472-63f3e15db3c0.roa
File:                     1919c05c-9023-3cff-8472-63f3e15db3c0.roa (raw, json)
Hash identifier:          NVnZS9WLQTd/ao/A5PZFW42G0U7ts/KD7kmtQL9mlH0=
Subject key identifier:   16:93:F2:D9:EB:C6:2D:AD:64:3E:A4:B0:3B:07:67:1E:F6:19:D0:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858484C12607483B6F366B5A08E60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1919c05c-9023-3cff-8472-63f3e15db3c0.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     54600
IP address blocks:        104.252.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:60:74:83:b6:f3:66:b5:a0:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=06ff41e5-8cb7-4a11-99a1-5dbe521bace2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:df:79:87:36:7b:8a:2f:10:e2:6f:f9:fd:
                    7e:82:49:4b:6d:63:19:fb:1d:5e:1e:4b:fc:fb:3f:
                    ee:bc:ab:a5:00:d5:3a:d8:8b:cc:23:85:c0:1d:6b:
                    fb:ca:55:d3:9d:3b:2d:62:08:91:c0:f8:2b:c2:1e:
                    83:ce:a4:9c:f7:f8:05:d8:24:ec:26:14:7c:b8:0b:
                    99:d2:48:55:25:07:5f:de:1a:f0:80:80:d2:b0:19:
                    bd:18:aa:47:3d:dc:57:c7:3b:ee:f1:89:61:68:53:
                    3c:5d:0c:94:54:be:0d:69:62:71:96:11:42:90:7f:
                    3d:fd:ba:21:09:57:eb:ac:38:df:33:9c:92:6a:d9:
                    00:d4:85:3a:2b:80:3e:7c:09:e8:01:b5:68:df:6c:
                    88:fa:a1:a3:cf:d3:3d:48:70:ea:80:48:98:f5:76:
                    ee:3b:2a:cc:35:6a:ba:9e:d1:74:1c:55:4e:d8:70:
                    b7:54:b6:33:02:fd:d7:1b:37:78:0f:06:79:ab:b3:
                    39:51:e3:b7:9d:25:c6:41:b8:ae:4d:71:50:b1:8e:
                    bb:90:97:c9:8e:88:a4:46:de:31:bc:b9:ce:62:9c:
                    3d:63:8a:3d:1d:27:42:ad:cd:03:45:ae:69:2e:11:
                    ae:c1:8d:5b:35:ca:95:23:78:b1:98:c7:54:a3:9c:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:F2:D9:EB:C6:2D:AD:64:3E:A4:B0:3B:07:67:1E:F6:19:D0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1919c05c-9023-3cff-8472-63f3e15db3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:16:81:75:1d:68:d9:d5:64:8a:77:de:4a:ae:46:e8:a1:b8:
         24:00:4c:a4:da:92:d9:ac:f0:fa:1e:1a:a8:c9:e3:ba:78:4b:
         89:c1:df:59:c4:4c:cb:35:99:90:57:43:79:42:fc:d0:fd:30:
         35:c3:a2:81:8e:b7:ea:d2:74:ed:14:a6:71:57:84:ff:95:43:
         72:41:06:50:4d:08:05:e6:65:d8:1e:48:fb:54:38:ea:1d:ba:
         1c:1a:81:4b:af:51:cc:90:16:93:ab:0e:59:85:0c:49:fe:0d:
         f6:33:27:ae:18:77:8d:bd:47:50:bb:2c:93:ac:46:32:2b:5d:
         b6:02:f5:e3:3d:85:4c:11:d1:17:ef:4d:4f:6b:f8:63:cf:93:
         de:bc:d3:42:fd:b5:34:a8:ee:29:d8:32:9a:37:e8:b3:63:07:
         39:99:41:ba:42:17:dc:d9:62:0b:1f:61:a9:c2:66:31:49:12:
         88:68:28:2a:e6:12:3a:e2:b9:08:f2:93:10:d9:ff:5c:d9:70:
         c2:42:27:28:5f:3e:24:81:00:9c:f2:5f:c7:cb:45:2e:ca:d2:
         72:b8:c7:35:1b:3b:3b:5c:a8:23:f2:2e:55:42:9c:51:85:af:
         2b:6e:f2:24:2c:fb:5f:10:3b:92:bf:1c:f1:b6:8c:e1:c4:c1:
         d0:1f:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:21 2025 by rpki-client