Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68f34c59-4f82-30e8-88b9-c5c0759bceab.roa
File:                     68f34c59-4f82-30e8-88b9-c5c0759bceab.roa (raw, json)
Hash identifier:          Z3wr+7zpx89uXKCZgGdDjrKo03OfLFdEKZYtDypYN+o=
Subject key identifier:   9B:2D:FF:CF:8A:C7:44:4F:69:38:7D:F0:BF:BD:02:8D:42:25:9A:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FBE07EE3021162D241BB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68f34c59-4f82-30e8-88b9-c5c0759bceab.roa
Signing time:             Thu 20 Feb 2025 12:24:12 +0000
ROA not before:           Thu 20 Feb 2025 12:24:12 +0000
ROA not after:            Wed 21 May 2025 11:24:12 +0000
asID:                     18779
IP address blocks:        104.252.242.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fb:e0:7e:e3:02:11:62:d2:41:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:24:12 2025 GMT
            Not After : May 21 11:24:12 2025 GMT
        Subject: CN=37f1514f-8ce5-4b40-aa8e-e3fdefc989fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:49:2e:bb:a4:b6:7f:39:3d:4f:ed:02:a9:
                    6d:61:51:68:17:5b:7c:99:c2:3e:02:94:88:b1:ed:
                    d7:45:3e:6c:09:4d:35:fb:17:c3:1e:b7:6c:ca:fa:
                    3f:de:6d:57:97:b1:b6:01:d9:d3:02:ae:d6:e4:17:
                    f4:de:cc:59:cd:ba:45:51:64:7f:d1:10:14:a7:a1:
                    bc:62:e6:5a:12:ff:4b:2d:97:aa:12:4a:ff:15:17:
                    23:84:d8:96:4a:ca:be:12:4a:38:59:ad:88:20:7e:
                    27:e5:10:f3:fa:e2:dc:32:d2:70:9c:d0:fa:5a:2e:
                    ed:07:eb:79:2c:c4:16:7a:52:d9:37:d0:59:16:fd:
                    ca:c3:08:ae:90:bd:30:94:08:74:27:38:9d:bc:3d:
                    87:af:b7:ca:4d:e2:48:b0:95:35:f8:c8:40:a2:e0:
                    24:96:db:9e:dc:dd:a6:9a:55:c3:b1:88:3f:16:4e:
                    b8:bf:65:ae:a8:ba:bf:b4:cd:c9:9b:60:76:3e:4d:
                    1d:51:14:52:10:09:d5:da:46:be:81:33:6f:a4:0e:
                    a2:54:af:9f:0a:52:2a:44:05:5e:94:a8:2e:0d:b6:
                    ce:86:04:c9:96:75:bc:d4:10:40:e4:72:04:9a:d8:
                    80:f1:c8:a5:89:f9:05:c7:1b:fa:47:7c:ce:2c:d9:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:FF:CF:8A:C7:44:4F:69:38:7D:F0:BF:BD:02:8D:42:25:9A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/68f34c59-4f82-30e8-88b9-c5c0759bceab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:46:8d:51:b9:4f:85:98:8f:ad:aa:a0:1b:11:a6:b1:f7:08:
         f0:f6:7c:24:42:71:f1:ab:c1:2a:ce:cd:1d:f8:bd:0d:0e:bd:
         0a:b6:f8:5c:5e:76:72:0d:6d:1d:71:68:b7:31:85:e7:c6:1c:
         6e:16:4f:be:4a:26:9e:3d:6f:6b:26:f8:a7:0d:2d:9a:9a:30:
         73:98:5b:9c:18:8d:49:2c:9f:a7:d1:cf:22:06:f6:bc:08:f7:
         e7:6c:ff:d9:3e:bd:a2:7b:ad:97:9d:8e:ad:a8:96:ee:7d:da:
         50:6a:b2:23:46:df:2f:00:1b:11:f8:25:4c:af:66:6f:9a:0b:
         f0:96:6f:01:59:ad:84:24:6d:ff:5d:17:56:52:97:05:1a:fa:
         1c:b5:75:91:6f:be:b6:5c:bc:61:a8:ef:fd:19:22:f1:82:7c:
         99:41:0e:7a:e0:a0:a1:50:ea:93:af:54:5d:5f:00:c3:38:1a:
         44:42:f2:fb:c2:e4:f5:e2:56:cb:9e:09:23:53:69:ff:7b:ae:
         05:16:99:c1:25:3c:69:f8:4b:77:79:93:cd:db:9d:77:11:b3:
         ad:10:01:57:0b:90:72:97:62:0c:9f:e5:6d:15:9d:f4:db:29:
         9e:81:ef:aa:a4:66:55:b5:49:76:89:29:d0:33:6a:f3:15:52:
         98:7a:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----