Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa
File:                     1b0f030e-1afd-3365-902a-71462e426a1d.roa (raw, json)
Hash identifier:          /efoZ38igKLhwiJeWgRU1D5RAX9kV5oJCBcfXDj98G0=
Subject key identifier:   4B:76:53:A3:F4:53:34:03:53:81:17:6E:67:CD:6D:B1:3B:39:5E:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848832F815DF3521D40CE0C1F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa
Signing time:             Sat 11 Jan 2025 19:53:30 +0000
ROA not before:           Sat 11 Jan 2025 19:53:30 +0000
ROA not after:            Fri 11 Apr 2025 18:53:30 +0000
asID:                     59253
IP address blocks:        104.252.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:2f:81:5d:f3:52:1d:40:ce:0c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 11 19:53:30 2025 GMT
            Not After : Apr 11 18:53:30 2025 GMT
        Subject: CN=59005fea-3e97-4020-9ddf-2607d4f2e832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:b4:59:34:16:a0:e6:25:49:62:70:93:77:
                    be:01:98:1a:c1:29:ad:06:6a:36:f8:11:57:24:e3:
                    a5:5c:01:ac:9a:06:69:35:97:8a:33:6c:62:68:c6:
                    b8:61:80:1c:c2:61:3a:22:5c:91:5f:22:14:43:c5:
                    71:b4:01:2e:24:ed:97:36:fe:36:29:e0:44:f5:1f:
                    0a:77:8b:c8:32:cb:f9:b5:d6:18:43:18:73:92:2a:
                    18:b0:36:c7:15:4b:2a:5a:ee:dd:3f:d4:a0:0c:54:
                    b6:4e:96:29:35:78:fe:32:ba:83:05:cf:88:c7:49:
                    44:89:54:09:5a:5f:dc:2a:04:35:57:58:ff:1c:ab:
                    70:8c:01:62:9a:bf:8c:9b:71:0c:45:13:ce:f2:98:
                    57:68:ef:1f:98:93:d5:7e:c0:0e:31:07:7e:34:0d:
                    f9:ba:13:57:7b:4f:35:fd:a1:17:42:34:a8:6e:cc:
                    a1:00:f8:61:f2:31:71:9f:1c:88:14:5d:01:0a:ee:
                    8b:16:9b:08:ce:25:59:4a:40:fd:9d:cd:6b:d5:98:
                    d3:63:b5:d4:c0:13:60:30:ce:fa:1e:3a:41:fe:7b:
                    56:bd:05:11:8f:30:f8:97:f6:4e:5b:f9:1f:0f:87:
                    5a:21:6a:fe:ad:04:17:24:5a:20:f6:a5:b7:be:ba:
                    c8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:76:53:A3:F4:53:34:03:53:81:17:6E:67:CD:6D:B1:3B:39:5E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:aa:ab:c0:0c:ce:65:2a:fc:93:4a:ec:14:97:9e:ee:3f:
         3b:e4:f2:d0:a9:ac:04:13:cb:43:b0:bb:8f:1e:04:05:2a:85:
         17:e2:f6:6f:d6:4a:f6:a8:49:32:c6:ce:e8:f1:0e:64:3c:97:
         25:6b:1d:7d:8f:74:90:91:4b:37:7f:ca:8a:4b:2d:e1:33:77:
         7d:8a:96:00:7f:a2:11:24:e5:b3:91:20:e9:6a:00:61:c4:42:
         a4:6f:d5:bf:d1:b8:ad:14:00:f5:72:63:f4:2b:ab:db:91:fb:
         94:17:b8:ef:c8:4c:59:71:dd:5b:5a:17:37:68:c5:6b:94:53:
         70:11:3c:e2:41:9d:73:a7:7f:1c:00:78:a9:94:2a:10:3b:29:
         e5:e3:52:be:a5:fe:7f:32:3e:26:32:b0:2c:cd:b2:d4:b9:4b:
         c0:36:47:2b:7d:6b:39:c1:44:32:e5:6f:b5:3e:c9:f4:0c:7e:
         00:1a:92:0a:ec:7d:9f:4d:6d:eb:8e:11:2d:56:41:9b:2c:58:
         42:d2:3e:98:4e:40:62:a6:04:52:45:0c:58:f5:78:8c:12:cb:
         cc:35:7d:3c:a5:6f:4a:74:bd:3c:0b:b2:38:3d:d5:3d:c5:02:
         b3:f8:9a:4e:f7:79:e0:39:5e:38:23:1b:69:7d:fd:9f:1f:5c:
         cb:e5:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:32:57 2025 by rpki-client