Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e410d60-0509-30c1-abf4-509d1a18b567.roa
File:                     8e410d60-0509-30c1-abf4-509d1a18b567.roa (raw, json)
Hash identifier:          kdomu2MEzsgaC1OnBrrHBAOP3vP1agPrZ4RH05TwWrU=
Subject key identifier:   56:92:28:5D:A8:CC:8A:3C:6C:F5:56:65:31:0B:26:40:DB:D3:9F:49
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858487FB5D29CB47268C1BBC23A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e410d60-0509-30c1-abf4-509d1a18b567.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     48031
IP address blocks:        104.253.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:d2:9c:b4:72:68:c1:bb:c2:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=480903f3-a06f-4198-9e34-394fc928499d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:81:5b:de:6a:e2:72:e0:d9:7c:22:af:c2:
                    07:9f:44:60:3c:f8:ae:e6:38:7f:78:5e:0e:58:03:
                    aa:93:94:d2:de:24:88:b1:1a:d3:c3:36:7c:e9:98:
                    f7:33:28:c9:ab:0d:ef:6d:f7:c6:95:f1:e9:89:80:
                    22:a9:64:90:0e:a4:ce:44:8c:9c:cf:91:a7:e0:2d:
                    e5:b8:88:65:d7:e4:83:b5:23:63:a6:dd:e6:a5:c5:
                    24:2d:d0:aa:84:af:f1:03:f1:2a:76:8c:12:61:e1:
                    f8:aa:fd:f6:0f:12:47:db:89:02:3d:1e:b1:f8:9e:
                    b6:26:07:29:05:2e:e8:cb:66:ea:11:a1:06:8d:8a:
                    19:76:ea:0d:3e:e1:a2:d9:75:eb:f2:2d:34:87:97:
                    ab:f4:f1:c8:5f:a3:8e:b5:a8:c8:e2:23:7f:a5:9a:
                    af:12:91:7c:5c:59:e0:03:bc:d0:06:05:1d:22:fe:
                    2b:5d:21:4e:00:c1:cd:09:d6:e4:e0:a1:fc:cb:1b:
                    2b:89:cb:08:d9:d7:eb:b1:97:99:45:6a:73:2e:b1:
                    ab:52:42:04:a1:d1:6c:95:f5:e0:0f:24:b7:15:31:
                    5a:40:4a:7f:70:09:83:ec:35:cb:c2:e7:fa:86:4b:
                    39:b9:fe:5a:91:f1:9e:b3:6f:6c:31:99:ed:e5:da:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:92:28:5D:A8:CC:8A:3C:6C:F5:56:65:31:0B:26:40:DB:D3:9F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e410d60-0509-30c1-abf4-509d1a18b567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:52:77:e9:b3:94:05:a8:bb:2c:6f:b4:de:41:24:05:f7:
         70:01:65:50:11:b6:31:38:30:33:bf:26:24:06:b9:3a:7c:a8:
         4b:35:04:b9:6d:7d:e6:51:fa:77:1d:51:f1:73:a7:16:b8:c3:
         72:44:9b:8a:6e:1c:22:d2:fc:02:ee:a2:ab:72:ef:6f:dc:77:
         ac:b2:c8:cc:81:56:89:a4:db:b9:e6:a0:ae:3c:14:1b:eb:5a:
         6d:29:a6:2a:d4:2b:e7:10:e7:54:a0:ca:5c:b5:db:fc:8a:dd:
         1d:b6:79:5a:3d:93:89:77:b1:3e:fb:a6:c2:08:b5:a8:1e:c5:
         8a:2d:c5:d0:0c:89:ba:0e:03:92:fe:d8:32:41:18:54:92:17:
         f6:23:93:04:26:ed:5c:1c:6a:68:fc:7f:c3:fe:96:7b:b8:20:
         2c:10:78:24:84:30:ec:5d:30:25:9e:11:fe:43:d1:11:85:d9:
         ee:aa:ea:43:52:fe:94:25:7f:0b:8b:64:b6:65:2e:3d:95:12:
         ab:18:c5:58:f3:05:c0:0f:5e:f8:9a:86:82:03:a7:16:b2:02:
         a6:84:f6:3c:74:df:7f:33:7e:3f:06:de:85:79:57:4c:f8:d7:
         1b:ab:a4:28:e1:4e:20:a0:94:f7:e4:34:f8:45:b4:d3:49:0b:
         8c:e6:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:44 2025 by rpki-client