Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0a8d75b0-424c-3cb5-b9c8-b759e6d1e11d.roa
File:                     0a8d75b0-424c-3cb5-b9c8-b759e6d1e11d.roa (raw, json)
Hash identifier:          cU9jJ3K3SoJYlqouQqGkMFTfCF5jbrCDUSMYyDR9Q0s=
Subject key identifier:   45:92:BB:32:46:29:06:9C:BA:A8:42:77:E8:74:EE:EF:F1:43:2D:79
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B3DA548B95A0EF595B30
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0a8d75b0-424c-3cb5-b9c8-b759e6d1e11d.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     396356
IP address blocks:        104.252.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b3:da:54:8b:95:a0:ef:59:5b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=377501ac-5b07-4ff9-8b2b-d6aefacf51a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:c5:00:75:a6:2e:15:88:34:04:1a:d3:4b:
                    2d:40:ba:be:4c:80:04:81:54:5b:14:e1:fd:3d:4b:
                    79:d5:d6:2f:08:d0:b4:35:7e:a7:ef:d1:93:eb:91:
                    25:1d:ab:17:01:00:d2:29:e4:e3:72:ca:d2:6d:e6:
                    42:32:c5:98:51:ed:ce:c0:00:82:f5:94:0f:e5:f5:
                    36:a9:ff:12:59:51:a4:f0:d5:d5:a7:fe:87:3e:40:
                    65:b1:f1:9b:8b:92:35:9c:b7:cd:f0:48:e3:2d:d4:
                    49:cf:48:8d:16:40:2a:d2:0d:d9:a8:33:47:17:30:
                    e3:56:d3:a9:5e:ee:38:39:ef:77:12:f5:52:ad:f0:
                    91:82:30:d5:e4:e7:9c:68:84:88:71:dd:8a:a4:3a:
                    5e:b9:b5:17:87:1f:7a:66:75:73:63:7c:cb:63:15:
                    39:a7:59:3c:99:31:17:65:4c:55:df:0b:66:ca:a4:
                    5c:49:a1:70:ae:3f:b6:ad:93:81:25:05:dd:da:81:
                    bf:1d:a2:f1:3f:5a:32:ee:52:94:2d:35:44:aa:f2:
                    88:04:12:83:94:1e:de:26:e8:77:04:cc:60:d0:29:
                    25:90:3b:8d:2f:51:bf:52:98:07:9d:0b:a5:00:3b:
                    9f:94:58:c3:a4:c5:70:1f:a0:fc:72:b3:6a:52:bb:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:92:BB:32:46:29:06:9C:BA:A8:42:77:E8:74:EE:EF:F1:43:2D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0a8d75b0-424c-3cb5-b9c8-b759e6d1e11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:53:0c:32:33:3e:47:40:1a:f4:5d:fa:b4:88:53:63:51:8b:
         f2:29:18:26:3c:43:a8:0d:19:a3:a3:04:dd:79:f2:c0:be:36:
         83:6a:dd:1f:1f:4d:52:53:a3:33:60:17:2a:af:a7:0b:28:a0:
         29:b8:bc:5b:a3:f9:84:5e:23:4c:59:23:7f:ca:a9:bd:29:7a:
         32:5e:d7:1f:39:e4:c9:69:b1:ac:42:58:20:b2:eb:35:c5:91:
         a5:71:46:17:7d:63:dd:b9:0e:01:b9:61:b2:30:21:7f:d8:c3:
         2d:32:e3:a1:3c:f9:59:ed:15:bf:ef:70:b4:7b:4c:93:06:a4:
         dc:0e:09:af:fe:37:cd:da:84:39:71:9a:53:fc:be:e0:2b:21:
         ea:7c:91:d4:da:5e:a3:d6:a5:c2:2d:09:5e:49:ee:73:c2:33:
         df:4c:a4:d2:b0:89:6e:af:07:6f:a1:2d:fe:b0:ca:3f:ab:e8:
         34:e0:93:73:a3:92:e5:e3:75:47:d7:8c:6e:42:e9:f8:fd:53:
         62:f4:d9:ae:dd:21:e9:fd:04:92:fa:ef:ea:24:c2:6f:23:c8:
         cd:a5:ba:27:3e:e5:ba:97:37:5b:bb:b4:fb:0e:d2:1f:3f:01:
         f1:51:1e:8e:93:98:5e:c2:ee:27:cd:cf:60:93:76:62:28:3a:
         52:70:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:46 2025 by rpki-client