Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/356ea6b9-c188-34f7-a035-85af77b8ba6c.roa
File:                     356ea6b9-c188-34f7-a035-85af77b8ba6c.roa (raw, json)
Hash identifier:          RxeeLM95/MHkXeDf8IaJ1NoCqeNZCeMSkAv1OgM45co=
Subject key identifier:   1F:ED:B6:5C:0C:5C:25:CD:BA:CC:05:30:0E:D3:42:67:09:4D:9F:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858486A4BB84267E93C49B78C7080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/356ea6b9-c188-34f7-a035-85af77b8ba6c.roa
Signing time:             Thu 02 Jan 2025 21:55:08 +0000
ROA not before:           Thu 02 Jan 2025 21:55:08 +0000
ROA not after:            Wed 02 Apr 2025 20:55:08 +0000
asID:                     9009
IP address blocks:        104.253.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:4b:b8:42:67:e9:3c:49:b7:8c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  2 21:55:08 2025 GMT
            Not After : Apr  2 20:55:08 2025 GMT
        Subject: CN=bb300c87-1c98-4f7c-b907-a091fa189ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:48:9f:d6:35:3d:45:2b:ea:c3:cf:d3:63:
                    16:b8:d5:fb:4a:37:ee:ca:d0:ab:b2:b9:0a:a1:b4:
                    34:e5:da:43:c5:ab:18:0e:f1:7f:3d:d6:1d:b7:d9:
                    1c:80:d0:14:f0:3d:f6:6f:30:c2:3f:4a:4b:f7:99:
                    dc:ad:1d:26:65:d2:4f:9d:16:2e:31:11:3c:c8:7a:
                    d3:d3:f7:ee:58:8b:9c:28:da:95:c4:6c:68:76:f6:
                    ec:a4:03:ff:ff:b3:44:f1:5b:85:1a:43:32:14:d9:
                    41:44:4a:1d:44:2b:7f:14:52:1d:cf:20:b4:76:ee:
                    85:db:14:14:0f:1f:b3:f9:3b:f3:e3:6f:73:d5:20:
                    1a:aa:11:3a:07:87:92:ab:f9:3e:f5:26:0d:60:48:
                    91:8e:5b:88:85:12:c8:56:e8:42:b6:05:b7:94:ca:
                    9d:cb:18:42:b4:46:23:39:43:b5:59:f9:0e:d3:5a:
                    91:ef:73:c2:11:5a:c6:82:17:a9:0f:71:17:fa:d9:
                    f3:14:cf:ec:3a:9d:0e:f8:79:6c:24:ce:fa:60:fb:
                    f5:8e:15:c3:4b:a1:af:32:56:58:c3:54:1d:fb:c5:
                    06:30:6e:9c:0e:6c:d8:82:e9:52:49:e3:10:c5:cf:
                    e1:ce:ac:04:69:09:45:bd:29:ce:9c:9b:c7:28:42:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:ED:B6:5C:0C:5C:25:CD:BA:CC:05:30:0E:D3:42:67:09:4D:9F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/356ea6b9-c188-34f7-a035-85af77b8ba6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:13:76:52:e3:7a:5c:bd:74:6d:4f:58:78:a0:77:4a:24:
         ca:a6:60:dc:8d:76:58:a0:22:ef:81:b6:3f:27:82:e7:6b:d1:
         84:04:2c:d4:3d:94:ef:4e:19:80:16:f9:d1:05:00:cf:87:a5:
         50:db:b5:93:f2:db:cd:ab:95:24:d7:50:ce:65:5c:93:d9:91:
         4c:08:09:9e:ca:02:38:73:df:e0:cb:6a:65:74:92:0f:2f:2f:
         ea:0e:75:b4:1e:dc:2c:b9:58:60:d4:b9:af:2b:cb:db:be:53:
         9a:cd:d7:b8:1c:f0:71:19:2a:f2:f0:66:de:ef:11:e5:f9:0b:
         88:dd:c7:16:06:01:8a:9f:5a:3c:7c:e6:89:b1:be:c4:7e:63:
         9e:61:0e:9f:91:5b:b1:6b:07:81:0c:fb:56:ea:1a:e4:91:38:
         42:09:30:69:06:03:2e:10:1d:e1:eb:c7:03:bd:2c:15:6d:7e:
         f9:1e:e4:42:4b:c5:05:ea:b7:18:33:8c:5a:1f:f5:00:59:0c:
         10:64:cb:0f:84:15:db:7a:d5:0d:c7:d8:65:80:12:f6:69:25:
         c2:ab:4e:cd:23:01:b8:71:e1:fd:6e:2c:21:b4:3e:17:f4:94:
         8a:36:23:80:52:5c:3e:ff:d6:33:71:54:af:e5:d6:14:c5:9e:
         e3:ca:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:00 2025 by rpki-client