Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41aa2418-55de-3229-a2aa-d80459343b30.roa
File:                     41aa2418-55de-3229-a2aa-d80459343b30.roa (raw, json)
Hash identifier:          IhUDa4RqvR16NlxrfRX8KdROEndGvYXE2Bjt9qZlxew=
Subject key identifier:   9A:89:FC:91:6A:04:F0:E4:EF:81:11:F6:57:9A:8E:74:D2:1B:AA:89
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858485136F3990A5A5144461ECFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41aa2418-55de-3229-a2aa-d80459343b30.roa
Signing time:             Tue 24 Dec 2024 22:18:05 +0000
ROA not before:           Tue 24 Dec 2024 22:18:05 +0000
ROA not after:            Mon 24 Mar 2025 21:18:05 +0000
asID:                     9009
IP address blocks:        104.253.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:36:f3:99:0a:5a:51:44:46:1e:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 24 22:18:05 2024 GMT
            Not After : Mar 24 21:18:05 2025 GMT
        Subject: CN=0d463f7b-33e5-4bb2-9528-523e5f42d1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:ba:13:96:dd:ad:82:60:46:42:28:24:9d:
                    13:ba:3a:6f:f3:38:eb:a3:59:17:2b:fc:d2:51:4f:
                    33:b4:88:51:b6:85:4b:cb:77:b0:c9:af:98:0f:1a:
                    55:0a:04:36:ee:0f:48:9d:4e:0d:75:9e:a0:a1:44:
                    37:54:33:e9:ab:c6:38:7f:9f:38:b7:ea:e8:80:02:
                    59:b5:59:20:f4:2d:51:f6:e1:0b:4f:aa:a2:d3:c5:
                    06:b7:c6:8b:e9:2a:17:17:f0:95:4a:06:60:9a:45:
                    86:38:1c:e6:39:bd:87:bc:16:10:0b:b5:96:e6:a3:
                    b7:fd:b0:db:98:d5:81:95:a1:b0:4a:56:09:ea:6d:
                    0d:c2:2b:3c:51:47:fc:db:61:0c:7b:9d:20:44:fa:
                    cc:31:e9:81:49:d6:85:41:84:df:a3:75:b9:33:e0:
                    92:62:d0:38:ab:91:a5:cf:cd:69:b8:ec:b1:ae:f6:
                    fb:b1:12:e9:30:cd:c9:89:af:8b:23:cc:25:c1:c9:
                    58:c2:b0:b8:ef:ea:62:79:be:ef:31:ce:30:3d:e3:
                    58:0a:28:ee:68:51:8c:09:b0:df:fc:77:92:2b:fd:
                    be:c1:92:73:8f:09:e7:f2:f8:e4:3b:27:d9:43:26:
                    7f:95:ce:dd:68:cb:f8:cc:94:01:7e:87:18:7b:1b:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:89:FC:91:6A:04:F0:E4:EF:81:11:F6:57:9A:8E:74:D2:1B:AA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41aa2418-55de-3229-a2aa-d80459343b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:22:33:f7:9c:07:16:3e:65:7e:8e:1b:99:17:fd:3a:3f:
         69:7b:ac:7c:6a:c7:31:12:00:1c:04:aa:ff:c0:3d:57:4b:16:
         e2:ec:f7:f8:3a:02:15:30:a5:f1:b0:73:23:14:9e:de:a6:c2:
         72:c5:25:38:a4:be:ae:aa:ac:46:a6:0e:a7:34:da:e4:58:bc:
         41:00:00:b5:43:54:80:f6:d0:8c:02:db:b5:57:1f:08:6d:3a:
         a8:c6:1c:2b:9e:af:3d:0b:d5:df:d2:95:f3:5c:a6:86:f5:7a:
         6a:24:fd:fe:f5:f1:0c:26:0d:45:2b:68:41:fc:79:2f:9b:c5:
         12:af:9e:08:0e:19:70:8a:ed:fb:63:1b:5f:41:a6:4d:df:4c:
         73:df:ed:c3:12:e6:a8:44:c6:07:56:06:db:f8:73:53:29:32:
         af:4d:2a:65:c4:c4:0c:15:38:93:e4:dc:70:89:ee:05:a3:a1:
         52:b9:39:0b:14:9a:f7:a6:d0:ef:50:32:94:d8:b3:f1:87:23:
         40:07:bf:e2:24:fc:19:a4:11:72:dd:ae:4b:42:de:80:54:8c:
         c6:ba:f7:4d:f0:aa:12:19:69:eb:21:54:42:b3:cf:c5:6b:ba:
         98:81:e7:69:e3:dd:55:34:81:00:e5:28:78:25:0f:5d:93:cc:
         68:e8:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:52 2025 by rpki-client