Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25c59ac3-883b-3ae3-9a59-078e0881187f.roa
File:                     25c59ac3-883b-3ae3-9a59-078e0881187f.roa (raw, json)
Hash identifier:          lhgTHphGWKLOXpeoNv6lm1aajl1OWy8xnhe0gN0/e8k=
Subject key identifier:   37:CC:19:B0:7B:D0:AC:D8:7B:E2:BC:33:AF:5C:BB:A1:93:DE:B2:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B29D37DC88C7CD05C280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25c59ac3-883b-3ae3-9a59-078e0881187f.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     396356
IP address blocks:        104.252.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b2:9d:37:dc:88:c7:cd:05:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=5256511a-91c9-46e2-8904-81f2c0752abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:26:d5:c0:31:4d:f4:1c:5e:fe:bc:d9:49:
                    ef:cd:11:cd:94:14:4e:cf:69:5b:ff:82:56:ef:b0:
                    1f:e4:56:63:23:90:99:e3:11:04:d7:e9:2d:40:ff:
                    6f:4a:ac:29:5d:af:97:ba:6a:7d:0f:1c:7a:04:49:
                    c4:50:65:9a:7e:eb:81:98:ab:81:f3:7d:24:07:fb:
                    c3:c5:2a:81:7c:44:13:67:06:35:c0:40:c5:35:be:
                    13:c1:ea:fc:bc:86:cc:19:85:d0:49:c3:4f:6b:32:
                    0b:f2:09:ce:4c:98:c4:29:85:a8:90:2a:39:d2:8d:
                    45:80:29:b4:36:76:46:81:1d:5f:c6:db:6b:06:f0:
                    d4:df:92:31:5e:e8:eb:b9:d3:c8:6b:ec:a1:a7:cc:
                    45:63:20:b1:a6:22:b4:55:84:fa:c4:ed:d1:d4:33:
                    8c:31:49:c6:3c:68:9a:73:b7:46:1f:a9:27:b1:8d:
                    53:62:13:0a:51:4c:11:52:0e:6f:90:e2:d4:aa:6c:
                    1c:74:c5:c3:c6:91:4a:eb:dd:b6:56:b3:45:c1:72:
                    eb:23:e4:eb:b6:7d:e3:7a:6d:01:80:e6:54:dd:95:
                    00:2e:c6:96:d8:29:78:8c:20:7a:26:c9:e2:c9:a8:
                    d9:58:61:9d:32:d6:fa:25:98:32:92:33:62:09:47:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CC:19:B0:7B:D0:AC:D8:7B:E2:BC:33:AF:5C:BB:A1:93:DE:B2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25c59ac3-883b-3ae3-9a59-078e0881187f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:63:63:4f:4d:f1:7d:81:df:4d:74:e5:31:5c:04:0c:40:37:
         17:56:0c:c9:5a:5e:de:f9:59:74:b0:f6:c2:ba:aa:6f:b1:6b:
         9b:36:56:b3:b8:63:28:0d:fd:4c:f4:63:b7:5b:58:28:82:9a:
         7f:2b:2c:26:87:db:2a:4d:85:73:2b:6e:1d:eb:f2:ce:74:c9:
         cb:34:b0:ec:72:63:4f:91:67:c0:c2:ea:9a:bf:1b:3a:a1:cb:
         d5:c5:1f:b5:fa:49:f4:45:03:84:ae:9d:11:fd:20:04:97:3c:
         13:06:d6:3c:77:8c:60:43:37:79:ec:36:30:aa:6a:f5:a2:64:
         bb:25:e9:35:11:06:4e:f0:37:6b:23:26:ca:77:62:2f:35:69:
         89:3b:74:37:f4:fd:e5:78:f8:c1:94:a8:fb:18:91:73:73:a0:
         ee:6d:43:78:69:86:bd:52:5e:a3:0f:c3:80:d8:18:94:fe:f3:
         8b:e7:76:4d:ff:0d:5a:c8:9d:c5:ae:76:eb:d1:d3:39:ac:e2:
         b6:00:9c:44:55:57:9d:32:31:4b:7e:89:e0:cb:90:40:93:8c:
         cf:e5:d1:cd:a8:0e:a8:13:ff:16:db:24:48:3d:db:c0:55:a9:
         5e:fb:7a:e2:05:7e:4e:6a:2e:62:c8:4c:4f:79:fe:36:b0:8f:
         00:75:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:06 2025 by rpki-client