Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72ab964b-d37c-3dea-b837-bebb214915c7.roa
File:                     72ab964b-d37c-3dea-b837-bebb214915c7.roa (raw, json)
Hash identifier:          Cb13avmIabBUunjMmbZYsqzItt0w6HduHqI8B+//bvk=
Subject key identifier:   71:C6:4B:3B:5D:6B:2A:B4:A0:49:76:DF:9A:F8:27:9D:9A:3C:5E:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1F9031BE66D6E10630EC2E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72ab964b-d37c-3dea-b837-bebb214915c7.roa
Signing time:             Thu 20 Feb 2025 12:18:26 +0000
ROA not before:           Thu 20 Feb 2025 12:18:26 +0000
ROA not after:            Wed 21 May 2025 11:18:26 +0000
asID:                     18779
IP address blocks:        104.252.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:f9:03:1b:e6:6d:6e:10:63:0e:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:18:26 2025 GMT
            Not After : May 21 11:18:26 2025 GMT
        Subject: CN=59861a7c-36aa-408a-a1b4-1617d6617fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:74:d8:af:0e:39:0a:3e:e3:c6:c9:61:e5:
                    1a:49:70:d6:70:d5:d9:1c:f0:0f:de:87:9c:52:d9:
                    2d:18:b0:b7:a4:b9:ca:0e:36:4b:63:3b:76:60:58:
                    11:07:ac:98:20:cf:32:88:2e:f2:61:6b:70:b1:65:
                    fd:8c:7b:9d:c8:c2:1c:de:78:3d:41:e9:05:f9:13:
                    b8:80:30:1a:89:79:f6:eb:56:ff:62:bf:31:9d:60:
                    6e:87:13:44:85:0a:df:63:b2:b8:d2:01:da:90:44:
                    22:20:f9:00:ae:2a:2b:d4:b4:14:4f:d2:31:71:65:
                    0f:31:3a:23:c1:a1:ab:2f:d4:d2:70:40:94:6a:d6:
                    e4:94:d6:58:d5:3e:6a:81:61:b0:26:77:11:b7:d9:
                    2e:92:dc:51:44:15:f0:f4:f0:94:bf:d2:13:ed:e1:
                    a6:1a:5b:07:75:30:89:cc:5b:cb:f9:66:7f:05:ce:
                    a7:8c:a7:35:ed:05:54:af:7f:91:1f:96:9f:e8:8c:
                    8b:d8:b0:61:fd:64:74:8b:cc:e4:ff:9f:b1:b7:b1:
                    ac:89:22:06:e2:f9:96:93:d6:7f:d3:a4:d9:fd:f9:
                    bf:67:72:7d:36:c3:d1:d3:0c:8e:a5:fa:48:96:f6:
                    7a:18:2f:7f:30:82:d3:5a:0c:fc:90:56:86:db:bc:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C6:4B:3B:5D:6B:2A:B4:A0:49:76:DF:9A:F8:27:9D:9A:3C:5E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72ab964b-d37c-3dea-b837-bebb214915c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:62:72:ca:69:4b:46:3f:9d:be:14:1c:84:ca:11:81:f2:
         57:58:dc:56:1b:d3:8e:2a:6c:0a:ca:5a:23:83:da:d9:a5:7e:
         04:a8:23:2f:d3:36:ac:f6:e4:f9:8a:57:4b:16:9b:5a:18:d2:
         58:93:2c:48:5b:7c:26:ee:fb:9e:94:0e:a8:50:a3:a5:84:50:
         90:6b:14:da:e1:14:f2:f4:4a:0d:bd:96:33:89:c5:6e:0a:29:
         69:93:b2:a2:d4:3f:fa:e7:57:25:ce:cc:67:48:62:b2:92:58:
         a4:fc:5c:43:31:a4:6e:d8:3d:82:2e:6d:07:b6:f5:19:8b:d8:
         1d:7a:63:64:36:ab:5d:25:fd:67:39:2d:e5:2a:b8:55:56:9d:
         10:0f:18:e8:e9:0d:fb:88:a8:ad:48:94:23:6b:c3:eb:e7:00:
         09:02:97:6e:64:f3:ed:81:16:4e:0f:37:de:49:96:d2:fc:94:
         fb:e8:7f:c9:cc:e9:25:c2:66:31:79:7a:83:54:12:68:c1:6d:
         7a:ca:42:c6:fe:21:55:dd:98:dc:26:65:e7:3e:8b:ce:d2:e0:
         65:cf:a0:af:bf:50:0f:e6:5b:f9:f0:5b:c8:8a:ce:70:81:9c:
         b5:99:07:93:7d:f8:10:b0:28:e0:27:93:5f:83:09:c4:49:a3:
         ac:f9:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:20 2025 by rpki-client