Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4463b3d7-dc30-3119-8f3b-d6fa16840150.roa
File:                     4463b3d7-dc30-3119-8f3b-d6fa16840150.roa (raw, json)
Hash identifier:          iEubpqqnQd4fPc5vTu1v8CmSgyijZSNJgL4iZkSQhc4=
Subject key identifier:   73:25:B2:3F:F3:48:3D:1D:9B:62:E2:5F:2C:0D:71:A2:F1:A8:10:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B22A47C7C7670195B600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4463b3d7-dc30-3119-8f3b-d6fa16840150.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     262287
IP address blocks:        104.252.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b2:2a:47:c7:c7:67:01:95:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=64618d1e-55b3-4d7c-a45e-acda4290e349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:64:f4:93:f9:b7:45:e6:5f:21:cf:9c:94:
                    9b:ae:8a:9b:66:d6:e9:cd:d6:9f:2b:d7:21:71:02:
                    7f:50:27:5a:18:89:3a:04:2a:13:25:23:d7:c4:91:
                    33:8c:87:70:ce:21:a5:58:62:78:d7:4e:7c:00:57:
                    67:57:39:f8:a3:f5:d4:ea:8f:82:af:72:5e:b2:b2:
                    97:7d:ba:be:be:f9:ed:64:2e:df:a4:61:13:82:5d:
                    b6:b7:ec:22:6b:3f:0b:82:d5:cb:ff:1d:d2:a5:30:
                    61:7d:06:a0:67:58:39:ea:21:71:72:41:c6:2f:10:
                    16:1a:6b:bb:d4:af:0f:70:20:b8:48:16:ff:eb:72:
                    00:60:d4:60:0b:91:f9:e0:ec:33:28:9e:de:8c:01:
                    47:0e:26:d0:8d:55:f2:0e:76:ba:db:fd:d2:9c:57:
                    89:ba:a6:97:0f:0c:e8:8d:c1:41:ae:c9:11:ec:44:
                    8f:10:71:02:f7:06:ee:66:6f:b7:05:58:d6:54:5f:
                    2a:04:4c:00:13:19:1e:2b:a0:15:da:a6:09:3b:72:
                    ee:58:c0:fb:46:c1:d7:65:57:23:c5:d5:3f:4e:84:
                    9d:82:6b:f5:4f:7f:b1:6f:fe:08:f1:78:50:14:48:
                    0e:62:d8:a9:15:e9:d1:78:a4:eb:ba:67:f3:a1:53:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:B2:3F:F3:48:3D:1D:9B:62:E2:5F:2C:0D:71:A2:F1:A8:10:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4463b3d7-dc30-3119-8f3b-d6fa16840150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:f5:52:84:ac:86:db:4a:80:c1:50:2d:00:08:0b:35:4c:
         84:be:ba:af:b3:aa:a6:48:20:55:c9:4a:6f:31:8f:fb:ea:58:
         31:3c:24:5e:af:7f:f6:99:df:a4:4d:f4:c9:36:0c:fa:c5:c1:
         14:4d:dd:81:3c:56:16:13:d9:ec:39:d3:22:1e:16:c7:c0:82:
         de:a2:aa:5d:9f:18:37:70:77:d0:d3:b5:6c:65:f9:d1:bd:d5:
         47:7b:7e:a0:90:71:5f:a3:da:3d:06:5d:38:5b:07:b1:47:72:
         8c:68:a8:80:26:82:86:4d:06:8f:a0:5f:71:26:bd:fa:4f:03:
         eb:f8:56:ec:73:a3:ca:39:d0:e6:d9:ef:94:63:23:44:85:d3:
         4b:b9:21:cf:df:76:2e:fa:a0:ff:1f:3a:35:dc:28:db:eb:74:
         2a:e5:f3:ed:8e:60:dc:81:c6:bb:78:37:2d:0f:59:11:7f:65:
         34:af:93:72:77:a6:3c:16:90:3f:aa:9b:de:9a:c6:82:cb:bd:
         ee:23:78:a7:fe:ec:68:16:e6:bd:1e:d3:55:62:37:ed:21:27:
         58:ab:82:81:fa:d9:c8:7c:17:69:9e:87:bd:33:9b:80:9e:9b:
         5d:17:9a:82:2e:22:98:fd:62:b6:b2:f3:3b:5d:c9:b1:5c:3b:
         25:81:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:57 2025 by rpki-client