Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b3163b4-ad7a-3ade-878c-2c83d3e06110.roa
File:                     2b3163b4-ad7a-3ade-878c-2c83d3e06110.roa (raw, json)
Hash identifier:          3y7R6k+GO9SMYIYODl0la1Jy3ZrhYgekm/OiN6JpuLc=
Subject key identifier:   9E:F0:59:06:C7:08:7D:D8:7F:97:54:88:CF:9B:C9:47:B3:13:9F:F4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B5F646BEE21F4C49EA40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b3163b4-ad7a-3ade-878c-2c83d3e06110.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        104.252.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b5:f6:46:be:e2:1f:4c:49:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=4f61ff92-ed4b-47e4-9b76-92e63d256461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:74:06:6d:cd:34:66:5c:96:c5:eb:56:6b:
                    43:9f:9c:14:07:00:b3:b5:7a:95:a3:7e:c6:83:a0:
                    7d:16:4d:90:ae:3b:94:d8:89:19:e3:c6:03:a9:17:
                    35:9e:c3:dd:36:8e:a1:e0:0e:51:4a:12:eb:64:70:
                    81:c0:cc:82:ab:1a:bc:66:56:7a:3a:13:ae:d1:bf:
                    f8:3a:e4:ed:e9:d5:d9:f5:b7:a6:7c:2b:26:1f:de:
                    59:c2:e0:0f:b5:5f:10:29:34:e1:a7:52:6a:b6:30:
                    f4:23:de:31:f8:de:34:a8:b8:63:69:b5:b8:4a:1c:
                    74:e6:3d:d1:f5:1d:d3:40:5f:d6:41:79:5b:e5:74:
                    4f:52:ff:c3:c3:9c:2a:64:26:49:02:94:1b:fb:80:
                    cf:69:f0:f0:fa:f3:d6:6c:52:86:7a:31:ae:9e:89:
                    b6:22:98:18:e5:df:e5:90:ff:b4:38:21:55:a0:63:
                    e2:65:1a:77:81:5f:eb:9f:ec:09:60:0a:ca:cb:55:
                    7d:5a:43:4a:0f:0e:03:22:d1:bd:31:0c:76:97:95:
                    84:1b:c0:70:43:fb:f7:2f:58:34:1b:83:d6:a7:97:
                    b8:7e:1c:1f:e4:aa:75:5b:02:65:ad:92:c6:5e:61:
                    fd:8c:dd:2e:be:c1:d0:a9:10:ef:7d:84:09:fd:e7:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:59:06:C7:08:7D:D8:7F:97:54:88:CF:9B:C9:47:B3:13:9F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b3163b4-ad7a-3ade-878c-2c83d3e06110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ec:f4:b8:3e:ad:09:2b:fd:c5:3f:cf:17:d3:ee:c8:b7:72:
         38:9b:f9:c3:1c:57:20:a2:f6:7a:6c:c5:a4:ee:83:dc:0a:85:
         d2:4b:21:72:1b:08:a3:63:12:23:6e:92:2d:1a:32:75:b4:90:
         1d:63:8a:ad:e9:40:77:75:eb:98:d7:52:df:e8:64:08:78:23:
         2e:0f:9c:44:ec:50:3c:12:88:7a:1a:0d:93:49:78:98:b5:f4:
         66:6d:52:af:a0:db:ab:29:7b:30:f7:63:fd:cf:73:e0:bd:73:
         52:aa:d1:98:54:3d:e0:90:62:2e:65:d4:89:38:ee:3a:6e:ac:
         a4:34:b0:bf:1b:4c:08:77:d2:67:34:66:f9:a6:db:39:15:d0:
         63:12:fc:75:87:3b:32:ec:6d:c7:b8:f7:72:c5:02:57:31:48:
         8d:35:15:26:36:4e:0d:1b:4d:33:2b:da:07:4c:27:da:56:49:
         28:69:88:60:ab:8a:25:89:ce:69:d2:28:a1:6b:75:9a:79:1e:
         07:5f:f9:a6:fe:e3:be:38:10:90:7b:4f:a5:4c:94:70:8c:98:
         86:14:e2:5d:94:78:89:09:da:8c:e3:fc:77:67:1f:93:da:2f:
         fb:c8:38:19:5b:58:15:e4:78:fc:ef:12:af:86:e1:f0:8d:14:
         92:d9:6d:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7X2Rr7iH0xJ6kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
NGY2MWZmOTItZWQ0Yi00N2U0LTliNzYtOTJlNjNkMjU2NDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJZ0Bm3NNGZclsXrVmtDn5wUBwCztXqVo37G
g6B9Fk2QrjuU2IkZ48YDqRc1nsPdNo6h4A5RShLrZHCBwMyCqxq8ZlZ6OhOu0b/4
OuTt6dXZ9bemfCsmH95ZwuAPtV8QKTThp1JqtjD0I94x+N40qLhjabW4Shx05j3R
9R3TQF/WQXlb5XRPUv/Dw5wqZCZJApQb+4DPafDw+vPWbFKGejGunom2IpgY5d/l
kP+0OCFVoGPiZRp3gV/rn+wJYArKy1V9WkNKDw4DItG9MQx2l5WEG8BwQ/v3L1g0
G4PWp5e4fhwf5Kp1WwJlrZLGXmH9jN0uvsHQqRDvfYQJ/ed0xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7wWQbHCH3Yf5dUiM+byUezE5/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmIzMTYzYjQtYWQ3YS0z
YWRlLTg3OGMtMmM4M2QzZTA2MTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvs9Lg+rQkr/cU/zxfT7si3cjib+cMcVyCi9npsxaTug9wKhdJLIXIb
CKNjEiNuki0aMnW0kB1jiq3pQHd165jXUt/oZAh4Iy4PnETsUDwSiHoaDZNJeJi1
9GZtUq+g26spezD3Y/3Pc+C9c1Kq0ZhUPeCQYi5l1Ik47jpurKQ0sL8bTAh30mc0
Zvmm2zkV0GMS/HWHOzLsbce493LFAlcxSI01FSY2Tg0bTTMr2gdMJ9pWSShpiGCr
iiWJzmnSKKFrdZp5Hgdf+ab+4744EJB7T6VMlHCMmIYU4l2UeIkJ2ozj/HdnH5Pa
L/vIOBlbWBXkePzvEq+G4fCNFJLZbb4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:16 2025 by rpki-client