Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39922739-82fe-36eb-8def-bd7a7331b3e7.roa
File:                     39922739-82fe-36eb-8def-bd7a7331b3e7.roa (raw, json)
Hash identifier:          UcOpFWPBOi5TN4TXZfi7JgVFUsy0St97/vrZM8Jf8Ck=
Subject key identifier:   26:11:AE:C1:DC:45:B7:42:BE:BF:D0:9E:A1:CE:92:24:F0:6E:37:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FA96E9305CEEF714286F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39922739-82fe-36eb-8def-bd7a7331b3e7.roa
Signing time:             Thu 20 Feb 2025 12:21:36 +0000
ROA not before:           Thu 20 Feb 2025 12:21:36 +0000
ROA not after:            Wed 21 May 2025 11:21:36 +0000
asID:                     18779
IP address blocks:        104.252.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fa:96:e9:30:5c:ee:f7:14:28:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:21:36 2025 GMT
            Not After : May 21 11:21:36 2025 GMT
        Subject: CN=16e092d7-2fb0-4e98-8978-d087d5c234d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:b5:64:51:b6:77:d7:ef:cf:96:47:2b:b5:
                    d2:63:c0:d4:ef:53:27:c0:73:dd:fc:24:03:9a:7a:
                    63:12:50:25:dd:f6:cd:5a:3b:a2:14:8f:8d:bc:c6:
                    f2:21:90:f7:95:4c:20:9a:09:a2:84:0c:af:fc:cd:
                    3f:71:6f:83:d0:e2:3a:23:ec:59:61:a6:23:f7:3e:
                    49:bc:7d:a1:56:b6:c2:c4:a2:90:ab:d3:fc:be:5b:
                    30:f6:d5:17:ea:f4:24:c7:a0:bb:12:d9:da:5d:69:
                    f8:ff:10:08:24:46:8f:bf:9f:d0:ff:91:f8:72:c3:
                    1b:49:78:1a:2f:ce:de:e6:40:73:3b:39:fa:30:e7:
                    24:b9:ec:c0:58:0d:40:52:67:30:93:a9:43:39:e7:
                    28:62:33:e5:5d:9c:b0:bb:d0:66:6d:02:0f:f7:1b:
                    ed:73:59:2f:4a:84:19:9e:2b:b4:02:1e:35:6e:41:
                    87:5f:e2:11:15:85:fc:ca:82:bf:f9:cb:0e:40:a4:
                    d3:13:fd:7a:a3:b7:33:6b:01:05:62:7d:f8:e6:5b:
                    d3:8b:1e:3b:6e:45:b4:37:2e:f1:59:1f:8d:3c:75:
                    96:8c:84:d1:02:4c:13:49:4a:7a:16:61:9b:93:c1:
                    db:4e:6b:15:13:99:8e:b6:c6:d4:09:df:0d:da:7b:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:AE:C1:DC:45:B7:42:BE:BF:D0:9E:A1:CE:92:24:F0:6E:37:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39922739-82fe-36eb-8def-bd7a7331b3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:94:32:a3:fd:88:c6:88:b2:d4:e2:19:cb:62:12:0d:18:e3:
         54:54:7f:c1:fb:6f:bc:f3:13:15:7f:aa:98:e6:fc:ef:0f:b5:
         37:05:de:98:8c:11:9f:8c:5a:42:70:02:02:9b:26:17:b7:6a:
         34:3a:34:a6:4c:7c:ea:b3:2e:7e:c6:9d:56:dc:ba:d3:80:a3:
         88:5f:09:91:27:65:34:1e:ef:dc:25:ff:45:4e:b3:dc:04:8c:
         2e:14:7a:b6:0c:84:d3:50:5d:10:1a:fa:62:0e:e9:4c:c3:d9:
         54:bb:22:00:10:59:62:ef:69:c0:1f:f0:14:d2:98:47:15:b9:
         4f:41:f4:22:7e:3c:95:59:39:9a:a3:55:71:80:45:6b:f4:09:
         1d:9e:84:fb:a2:1a:73:4e:af:34:15:63:73:52:1c:61:0f:a6:
         64:60:0f:cd:e1:e5:32:2b:4f:2e:fb:96:77:d2:79:fc:8a:b7:
         73:04:6a:9f:a4:4d:55:6d:61:89:ce:07:a5:aa:be:1d:97:c8:
         9c:bf:52:9c:25:62:ad:4a:c3:cb:4e:89:ee:26:31:70:a7:5f:
         07:ef:51:0a:bc:44:b6:d0:f5:ce:96:af:77:a9:57:11:7f:3a:
         31:2c:90:aa:c5:11:b9:9c:7f:40:3e:30:93:d6:93:16:0d:b5:
         be:c6:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----