Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f043083-2066-3dd4-b9af-00efaba4eff6.roa
File:                     1f043083-2066-3dd4-b9af-00efaba4eff6.roa (raw, json)
Hash identifier:          vq/yqXWoD4UAisVX5MXysL6I6MTVzvfCgkKgsS16Yls=
Subject key identifier:   A7:D9:E7:32:0B:42:48:4E:19:A0:1A:C7:96:25:51:DC:BF:9B:A3:42
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849142F95D96DE9F70029A5CB40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f043083-2066-3dd4-b9af-00efaba4eff6.roa
Signing time:             Tue 04 Mar 2025 18:25:52 +0000
ROA not before:           Tue 04 Mar 2025 18:25:52 +0000
ROA not after:            Mon 02 Jun 2025 17:25:52 +0000
asID:                     6762
IP address blocks:        104.252.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:14:2f:95:d9:6d:e9:f7:00:29:a5:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  4 18:25:52 2025 GMT
            Not After : Jun  2 17:25:52 2025 GMT
        Subject: CN=12f9ab88-af97-431b-9de9-5bbaeaf2294a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:30:51:86:d0:c7:06:7e:14:4b:d7:fc:2e:ef:
                    e5:90:b0:44:bd:ff:2d:9b:03:45:c1:57:e3:5f:a2:
                    d0:2f:f7:2f:f4:56:ce:20:23:83:08:51:20:7f:dd:
                    30:3b:d4:86:09:c0:61:a6:dd:d8:8f:49:5c:b0:e3:
                    f4:29:e6:e1:f9:59:ea:65:d7:20:3d:94:25:2b:9d:
                    bf:f1:61:a3:2c:8e:f2:e3:b4:0c:90:4f:84:c1:47:
                    48:5d:30:ad:d7:7d:1b:59:01:68:aa:5a:f4:e5:c4:
                    71:66:c5:f9:3a:d8:36:4e:2e:a7:c0:0f:52:bc:27:
                    cb:d9:e9:23:3c:41:e3:c0:ee:30:b1:f3:e6:7d:34:
                    8a:35:f3:10:3c:ba:38:32:91:39:ed:d1:06:dd:54:
                    bc:01:b8:85:ae:c7:47:a8:75:40:2e:49:b3:12:09:
                    96:40:6d:17:8a:cc:d4:23:a6:90:23:7d:09:1a:2b:
                    51:26:06:f4:ef:63:6a:13:15:f7:b9:98:8b:51:cf:
                    63:42:d2:1a:f3:e3:97:cb:ba:41:c5:86:fc:a0:35:
                    29:f8:9f:18:89:27:42:4d:c3:d1:04:4a:72:d7:1f:
                    a1:41:01:a9:69:b7:6e:a1:b7:32:6e:ba:f3:28:2d:
                    6a:a2:5a:18:1a:ed:ad:e3:26:da:45:42:61:87:9a:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:E7:32:0B:42:48:4E:19:A0:1A:C7:96:25:51:DC:BF:9B:A3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f043083-2066-3dd4-b9af-00efaba4eff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:8c:e7:68:65:ca:45:3f:a4:f3:f9:2e:1b:3e:04:1d:ec:
         6d:a9:5f:cc:78:98:10:89:c8:99:c8:32:79:15:c8:ea:bd:bd:
         0a:0a:5e:37:9c:f6:33:0e:c4:35:78:41:9b:f8:9e:4c:53:ec:
         1a:5e:5f:d4:02:7d:48:9e:f3:dd:9a:e2:fc:61:7f:4c:88:93:
         3b:be:3b:8d:d1:f7:1a:53:70:78:67:0a:fb:d8:f1:d8:27:b7:
         8a:58:bb:0e:c8:bd:21:c8:2c:a8:d1:69:f9:0a:0f:0d:3e:c8:
         21:80:29:86:e6:51:71:20:62:d9:1c:d8:47:e0:38:cd:dd:4e:
         36:de:35:7d:af:f5:31:d7:d6:d2:4d:63:d3:e1:64:68:68:78:
         c9:17:98:79:1f:c3:f4:21:4c:16:9d:04:73:a0:28:af:5c:0b:
         7e:30:3e:07:e6:cd:b5:9a:5a:2e:b2:4d:2e:7c:a9:1a:0c:25:
         90:e9:88:50:0b:06:ca:41:5f:86:88:64:15:4a:c9:18:84:33:
         7f:62:7d:5c:8e:39:26:5e:ea:4a:89:90:22:ad:d6:6a:bb:b0:
         7d:1a:00:26:aa:64:fa:43:40:7b:61:15:75:89:58:33:c4:aa:
         12:47:34:e5:32:ad:92:aa:ac:86:83:76:e2:31:9c:fb:b2:75:
         44:b5:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:26 2025 by rpki-client