Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6312991a-1e0d-300a-a3fd-a50ff479416c.roa
File:                     6312991a-1e0d-300a-a3fd-a50ff479416c.roa (raw, json)
Hash identifier:          iluNgbkqETPZkb2k63vL/2ujjYBTmhPs2zoIQZRoDd8=
Subject key identifier:   E9:64:09:CD:FE:A4:57:F4:30:6B:6A:52:44:47:11:6D:76:03:6A:E8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FA51B65EB090C8603AEAD0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6312991a-1e0d-300a-a3fd-a50ff479416c.roa
Signing time:             Thu 20 Feb 2025 12:21:04 +0000
ROA not before:           Thu 20 Feb 2025 12:21:04 +0000
ROA not after:            Wed 21 May 2025 11:21:04 +0000
asID:                     18779
IP address blocks:        104.252.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fa:51:b6:5e:b0:90:c8:60:3a:ea:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:21:04 2025 GMT
            Not After : May 21 11:21:04 2025 GMT
        Subject: CN=2ca5ea9d-df18-4757-b2eb-0325bb234212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:bf:50:fe:ce:df:4e:a7:38:f1:44:90:50:
                    ec:f5:0c:e7:93:59:ac:54:b5:3f:3d:da:e9:7d:0c:
                    29:1b:de:06:af:5a:1a:71:b7:2e:c5:73:2a:d1:35:
                    c2:5b:ed:e2:3f:09:e0:6b:59:fc:7f:72:cc:0d:f1:
                    06:42:87:47:95:a2:4e:a5:45:d4:5f:c0:62:1b:72:
                    75:c7:7b:b5:25:43:8f:04:57:a7:69:01:cf:d4:6c:
                    0a:83:6f:21:79:52:7b:35:14:ed:15:f8:56:67:ae:
                    df:6b:b2:43:56:a2:59:da:b0:fa:ca:e9:53:02:10:
                    f5:ad:38:57:02:5b:3c:9e:97:1d:1d:e5:81:e7:6e:
                    2e:b0:47:aa:53:70:0f:b1:6b:6b:c2:ce:76:43:bd:
                    fa:f6:09:96:3f:9f:d3:0a:27:75:b9:81:47:a9:59:
                    2a:40:d2:27:b3:f9:1d:6d:68:19:9d:55:e6:2a:c8:
                    c0:ab:46:c3:e7:dd:e6:f1:4a:ae:08:08:30:b6:02:
                    f1:cf:85:60:85:9f:20:eb:92:5c:95:1a:51:47:f6:
                    6b:b5:9f:76:c4:34:bf:94:a2:1d:c0:2b:d3:07:b4:
                    98:9a:da:2c:cf:61:15:ae:59:ca:83:de:df:a9:22:
                    a3:f6:ef:27:83:62:a9:45:38:a5:b5:3d:dc:0d:da:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:09:CD:FE:A4:57:F4:30:6B:6A:52:44:47:11:6D:76:03:6A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6312991a-1e0d-300a-a3fd-a50ff479416c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:7e:fb:7f:a6:d3:5d:e0:cb:c4:f1:3c:72:94:e2:83:c3:
         9c:cf:c7:8a:43:38:95:7f:a2:72:a8:6c:2e:2d:10:0b:51:c9:
         8c:fd:be:57:e6:c9:81:96:e0:96:3c:eb:bb:31:f1:b9:3b:84:
         89:cb:a8:43:d0:60:00:3d:13:24:51:96:78:03:e0:7c:77:6c:
         4d:ce:c3:1e:86:33:7d:9f:70:52:82:db:b4:1b:c0:fa:92:9a:
         5f:e6:b6:46:c4:37:84:01:81:cd:52:95:45:82:be:dc:07:d7:
         9f:d2:c8:ba:42:9e:b1:d9:56:b4:8a:9e:0c:51:99:b9:a9:22:
         ee:84:b7:4c:db:44:78:ae:c3:86:af:34:49:94:1c:a3:08:9d:
         fe:1e:a7:d5:43:8c:b1:c9:df:fc:2f:55:b9:9f:db:29:91:c1:
         44:a4:4e:4d:71:4e:e7:96:d0:c6:f2:9a:8b:eb:39:c4:6f:63:
         97:7b:83:07:83:fc:2c:25:e1:c0:96:6d:eb:35:7a:91:43:47:
         ac:97:7c:f7:d5:9e:00:3d:c1:76:02:f3:d4:2d:6f:f6:10:13:
         0c:8d:11:54:98:55:8c:f8:5c:5b:ca:cc:02:6f:29:9b:f9:e1:
         17:5b:be:1d:14:eb:df:1f:38:78:46:0b:fc:f9:c1:25:09:9a:
         d8:17:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:27 2025 by rpki-client