Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa
File:                     cdae9e84-cb98-3d50-8eae-b47498b37816.roa (raw, json)
Hash identifier:          AxCdktrW2dtINxd1XyGJVhATt851nRwCeJmBDEaIjwU=
Subject key identifier:   1A:E4:88:72:1E:68:49:ED:72:AA:F3:01:34:5A:5C:32:52:BB:85:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858484DB73CC847A1DCF10172B660
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa
Signing time:             Mon 23 Dec 2024 16:13:20 +0000
ROA not before:           Mon 23 Dec 2024 16:13:20 +0000
ROA not after:            Sun 23 Mar 2025 15:13:20 +0000
asID:                     262287
IP address blocks:        104.252.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:b7:3c:c8:47:a1:dc:f1:01:72:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 23 16:13:20 2024 GMT
            Not After : Mar 23 15:13:20 2025 GMT
        Subject: CN=22fa6c8b-9f92-419a-9e02-f27d17707467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:0a:b0:02:06:85:3d:1b:e2:2e:1d:42:7f:
                    ab:12:a6:d8:98:41:b3:99:da:72:5c:70:1b:2b:4d:
                    74:86:b5:32:20:29:df:98:6a:6c:47:92:49:4c:dc:
                    df:31:1d:fd:04:ea:50:2b:8c:c0:e9:c6:57:68:dc:
                    86:c8:30:1e:54:01:63:22:34:7d:31:c9:22:a3:d8:
                    80:5b:d4:f4:42:4c:d1:70:0f:05:48:22:7b:8b:dc:
                    ff:df:fe:86:0b:33:4b:55:0e:2a:8c:c6:47:d7:b1:
                    68:a9:cd:94:0e:9e:6a:6a:fb:b0:dc:71:08:70:0c:
                    10:68:81:98:12:de:03:24:11:1c:17:bb:25:c0:fd:
                    03:34:fe:ae:13:9d:aa:5b:6b:04:69:64:a7:5d:0e:
                    5e:88:8f:bb:3b:17:a7:1c:d7:75:e0:74:3d:7e:fe:
                    c4:99:c0:68:b1:d7:b0:d0:2e:2e:06:83:17:f9:21:
                    7c:41:61:3a:d5:c4:4e:9b:5b:0f:d3:ca:af:09:83:
                    bb:05:e4:4e:80:9a:99:2f:9a:b2:c9:0c:1f:f9:f7:
                    fb:9f:cd:37:36:4a:82:f9:85:b9:d3:6b:a7:66:82:
                    6a:15:65:02:15:4f:ec:20:8f:b7:2a:75:4f:0f:de:
                    33:c5:79:e5:42:c1:80:3a:ad:eb:a7:57:44:6f:49:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:88:72:1E:68:49:ED:72:AA:F3:01:34:5A:5C:32:52:BB:85:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:af:8f:d1:e2:8a:16:be:d4:f3:78:5c:3f:fc:85:c3:69:
         91:5b:b5:c4:79:6e:d0:c1:7d:4c:55:5f:4b:ee:d6:8a:64:bc:
         a4:4e:a0:00:eb:fd:c3:42:29:56:0a:97:ce:ce:48:39:12:ed:
         d9:c9:7c:d4:31:1f:30:17:aa:3f:6d:2e:d0:ce:0d:b0:20:32:
         f8:43:c3:b0:54:18:02:06:2b:ca:c3:18:d3:61:2a:ba:06:a8:
         75:dd:27:8c:9b:be:98:f3:9f:ac:2f:c5:40:c6:eb:ac:d7:ce:
         39:16:41:e0:39:d5:86:4c:f9:92:7f:52:31:d1:7a:e0:20:48:
         44:f3:3c:4d:98:de:c4:4c:8f:60:65:92:16:16:52:d4:d6:56:
         42:6a:f1:b0:0f:c1:c5:fd:cc:1e:de:fa:e3:7b:33:2c:5c:f9:
         33:e2:25:c5:35:cd:47:e3:4a:ac:a9:4b:67:aa:14:bc:34:94:
         b5:dd:52:7e:65:6c:6e:8a:5e:d4:b8:cf:49:17:ca:87:6e:d7:
         88:ee:95:53:f9:df:84:71:94:33:5a:76:d5:08:6f:44:74:7e:
         6b:29:38:20:9a:eb:9e:68:01:87:67:b0:51:5d:8a:3c:a1:b0:
         7e:28:18:c3:b9:71:2f:07:01:0d:22:35:30:13:a0:db:75:00:
         e1:6c:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:54 2025 by rpki-client