Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6038e4-234e-3cd4-a714-a48d09a317a2.roa
File:                     3c6038e4-234e-3cd4-a714-a48d09a317a2.roa (raw, json)
Hash identifier:          Yd6FNxsNkI6bNbywKKmDk+9Q7rgfGkm3rd3YC5FP2yk=
Subject key identifier:   1B:C7:D6:39:91:ED:61:0E:54:FD:F0:90:48:6F:E1:08:AD:E6:82:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848302543E3D1A2AC6A06245920
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6038e4-234e-3cd4-a714-a48d09a317a2.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     18779
IP address blocks:        104.252.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:43:e3:d1:a2:ac:6a:06:24:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=97bdd3c8-1905-4a85-a977-b650ced852ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:69:1a:48:05:19:c5:74:79:b0:5c:6d:76:
                    1d:48:ff:59:a8:1d:e2:83:c2:38:fa:37:c8:29:1d:
                    96:95:0e:25:30:e2:df:91:7f:24:8e:f3:7a:42:6f:
                    12:55:02:e5:7f:f6:f8:80:c4:9e:d1:70:c0:cb:b2:
                    22:9e:c6:57:a0:26:33:3c:bb:b7:64:35:ac:32:7f:
                    eb:d5:d3:76:6e:fd:81:b2:74:00:cb:12:88:85:24:
                    fd:8f:ef:e9:12:c1:dc:d6:41:50:dc:05:04:3a:01:
                    94:8e:51:d5:1c:c3:e5:16:49:6f:5c:6f:b4:d7:8b:
                    0e:9c:1d:19:71:4b:e3:da:6e:03:22:08:06:e3:f7:
                    29:62:bf:4c:ea:c4:3c:fb:45:44:45:d2:10:ef:3d:
                    54:14:35:ec:da:5c:83:55:cf:c0:f9:2b:f2:1f:6a:
                    73:39:5a:86:bf:b4:59:b1:4e:2f:83:3b:f0:8c:4e:
                    16:13:0f:29:88:b3:40:67:17:0e:68:f3:f5:05:b5:
                    64:07:5d:d2:3a:0c:c9:27:8b:50:57:2e:a8:fa:44:
                    10:28:2c:59:39:ba:95:a4:0d:7d:a3:0d:6b:7f:61:
                    81:78:f9:8f:45:80:8d:71:d8:4e:53:2d:0d:34:13:
                    d7:5a:3b:84:91:0d:f4:c6:3c:31:92:b1:dd:e3:d4:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:D6:39:91:ED:61:0E:54:FD:F0:90:48:6F:E1:08:AD:E6:82:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c6038e4-234e-3cd4-a714-a48d09a317a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:93:93:96:65:00:c2:8d:a7:46:3b:21:c7:83:b6:42:c5:e5:
         45:cd:ee:94:e5:c5:90:19:4b:ed:41:5d:38:12:6c:b6:7b:3d:
         ed:ef:64:ad:a7:d1:d4:ff:ad:b7:ff:ae:76:07:91:70:e4:87:
         77:3c:8c:4c:4b:fc:a7:77:e1:5a:05:d4:4a:eb:79:5d:b4:a3:
         8d:a9:02:aa:1b:a7:65:f9:15:b7:fb:aa:cc:86:ff:db:aa:de:
         12:bb:82:37:63:d3:0a:75:39:d5:ef:69:4e:d2:48:b6:db:3e:
         16:73:60:48:84:b9:c9:0f:11:d1:22:d4:f8:ff:ec:df:d2:d6:
         45:7d:dc:68:14:be:16:c5:58:65:88:0a:8d:c6:4f:96:7d:ab:
         c1:f8:6c:87:16:7b:bd:e6:d4:e7:60:ac:f2:07:2b:0c:4e:90:
         64:47:9c:70:83:c3:28:e5:6d:fe:27:58:36:e4:4b:51:60:f3:
         06:b4:fd:33:7d:43:fb:6a:06:62:1b:b6:ca:53:33:44:50:7a:
         0b:bd:e7:69:da:fa:7f:a3:a9:94:a5:95:21:1f:91:f3:ec:ec:
         a5:75:d2:7e:66:d4:ce:4d:24:b6:a8:dd:f2:cc:29:f0:af:81:
         f7:70:41:c2:de:c2:55:82:ec:69:4d:7b:da:19:25:b5:e7:e1:
         c4:5b:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----