Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25c59ac3-883b-3ae3-9a59-078e0881187f.roa
File:                     25c59ac3-883b-3ae3-9a59-078e0881187f.roa (raw, json)
Hash identifier:          A1BaB4MrNpw9tItNgbpvVXdc+q96TaW2q5mkTmi6vDE=
Subject key identifier:   EB:FF:67:54:64:43:CF:13:26:3E:8A:78:CD:D4:E3:16:63:A6:CF:78
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858484DCDB48019F436708D3D8380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25c59ac3-883b-3ae3-9a59-078e0881187f.roa
Signing time:             Mon 23 Dec 2024 16:58:36 +0000
ROA not before:           Mon 23 Dec 2024 16:58:36 +0000
ROA not after:            Sun 23 Mar 2025 15:58:36 +0000
asID:                     396356
IP address blocks:        104.252.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:cd:b4:80:19:f4:36:70:8d:3d:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 23 16:58:36 2024 GMT
            Not After : Mar 23 15:58:36 2025 GMT
        Subject: CN=587d1c30-d8ea-430e-9cec-777792b6d8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:6b:cc:44:28:73:fa:39:b4:92:a8:f2:e5:
                    89:21:95:e9:6e:b8:fe:f6:16:c5:37:98:6e:4b:79:
                    f6:71:a1:d4:47:b6:6c:ca:36:44:2c:8e:01:bb:57:
                    e4:ca:6b:94:66:d9:28:49:33:f4:9f:c2:ad:b8:56:
                    da:de:bc:02:33:49:0f:ca:f1:3b:f7:05:d2:59:82:
                    9a:ed:09:9a:ca:ab:e2:e8:86:e9:1c:eb:6a:df:c3:
                    bb:5c:12:b9:07:6b:af:96:8e:7a:0c:5f:93:7a:df:
                    98:bb:08:b7:79:38:61:e5:2a:ae:9f:49:89:e3:40:
                    b7:6f:73:cc:37:f7:e2:a8:a7:ca:4f:25:c3:0c:d6:
                    f4:b1:b6:1a:c5:93:89:b3:e7:d2:4c:f5:0b:6f:53:
                    fd:38:71:c3:89:70:32:e5:22:5f:cb:39:6c:ba:29:
                    09:fc:2c:bf:da:79:2d:17:60:81:b7:74:5f:6e:41:
                    62:11:d1:e6:9d:f4:5f:55:10:64:3b:70:09:67:80:
                    b7:db:14:12:80:bd:b8:39:0f:66:5d:0a:18:86:9c:
                    17:15:fe:d1:a9:91:f6:b5:7e:ec:78:7c:b7:c5:ee:
                    dd:53:8e:61:89:79:48:a4:9d:83:49:6b:f9:6f:ba:
                    0b:03:7e:df:a9:a9:93:c7:80:7e:67:b9:0e:2a:2e:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FF:67:54:64:43:CF:13:26:3E:8A:78:CD:D4:E3:16:63:A6:CF:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25c59ac3-883b-3ae3-9a59-078e0881187f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:18:1a:1f:77:3c:36:54:22:53:d4:97:93:a0:9d:2f:5b:e9:
         4c:c4:53:21:cb:6f:4a:71:db:44:8a:db:7e:87:10:09:1f:8e:
         df:c8:2c:97:dc:bf:8d:19:60:f7:7b:08:21:7b:25:3f:61:e2:
         46:11:25:15:83:e2:73:8b:7e:53:85:c1:f6:8d:36:d7:35:d8:
         fd:ab:53:48:6f:cf:65:f6:d7:25:4c:e1:88:1d:c7:f0:41:cd:
         71:4b:da:2b:d9:04:64:3d:55:35:a6:ba:62:5e:c4:4d:b1:42:
         19:99:22:f0:2c:e4:fb:33:e9:18:09:d7:e2:38:0a:ee:a7:ee:
         b3:fd:c9:b8:49:ff:c6:eb:82:04:15:c6:02:34:b8:3e:35:ec:
         ff:bc:57:1a:90:d0:65:40:fd:bd:a0:7d:19:16:62:09:f0:98:
         26:27:41:b0:06:3a:82:9d:84:ea:3e:ff:2d:b1:62:8b:02:7d:
         cc:82:08:22:b8:20:8f:10:12:49:ac:1c:90:48:1b:85:f6:c4:
         8d:e1:20:84:36:88:c2:12:11:8f:0a:9a:97:6a:06:f1:4e:97:
         01:cc:0e:b5:26:cc:fc:83:a9:d7:d1:7c:77:6b:c9:27:5b:e3:
         a9:ba:f8:bc:c8:a0:d4:5c:ac:b7:79:a7:22:67:54:22:a6:b1:
         fb:38:45:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNzbSAGfQ2cI09g4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTIyMzE2NTgzNloXDTI1MDMyMzE1NTgzNlowLzEtMCsGA1UEAxMk
NTg3ZDFjMzAtZDhlYS00MzBlLTljZWMtNzc3NzkyYjZkOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjprzEQoc/o5tJKo8uWJIZXpbrj+9hbFN5hu
S3n2caHUR7ZsyjZELI4Bu1fkymuUZtkoSTP0n8KtuFba3rwCM0kPyvE79wXSWYKa
7Qmayqvi6IbpHOtq38O7XBK5B2uvlo56DF+Tet+Yuwi3eThh5Squn0mJ40C3b3PM
N/fiqKfKTyXDDNb0sbYaxZOJs+fSTPULb1P9OHHDiXAy5SJfyzlsuikJ/Cy/2nkt
F2CBt3RfbkFiEdHmnfRfVRBkO3AJZ4C32xQSgL24OQ9mXQoYhpwXFf7RqZH2tX7s
eHy3xe7dU45hiXlIpJ2DSWv5b7oLA37fqamTx4B+Z7kOKi59aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOv/Z1RkQ88TJj6KeM3U4xZjps94MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjVjNTlhYzMtODgzYi0z
YWUzLTlhNTktMDc4ZTA4ODExODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAYGh93PDZUIlPUl5OgnS9b6UzEUyHLb0px20SK236HEAkfjt/ILJfc
v40ZYPd7CCF7JT9h4kYRJRWD4nOLflOFwfaNNtc12P2rU0hvz2X21yVM4Ygdx/BB
zXFL2ivZBGQ9VTWmumJexE2xQhmZIvAs5Psz6RgJ1+I4Cu6n7rP9ybhJ/8brggQV
xgI0uD417P+8VxqQ0GVA/b2gfRkWYgnwmCYnQbAGOoKdhOo+/y2xYosCfcyCCCK4
II8QEkmsHJBIG4X2xI3hIIQ2iMISEY8KmpdqBvFOlwHMDrUmzPyDqdfRfHdrySdb
46m6+LzIoNRcrLd5pyJnVCKmsfs4RYE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:27:52 2025 by rpki-client