Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4fcf5e-f5f3-3c38-9224-acfa7f223187.roa
File:                     8c4fcf5e-f5f3-3c38-9224-acfa7f223187.roa (raw, json)
Hash identifier:          4l8dQLYGppj6gfFFXN19ukUokh6zIbdBBC3rnCCehgk=
Subject key identifier:   BB:69:FE:9A:AD:CA:45:28:B6:C4:63:4D:2C:D3:22:9B:4F:C8:5E:31
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB4F533D57BBC80F3BA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4fcf5e-f5f3-3c38-9224-acfa7f223187.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     9009
IP address blocks:        104.252.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b4:f5:33:d5:7b:bc:80:f3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=f0799866-a0f9-4475-bf73-59d86be292fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:3e:98:f0:ac:23:d4:13:72:3f:c0:18:33:
                    cf:d5:03:51:3a:6c:ba:0f:00:1d:47:9f:87:81:d5:
                    7e:37:48:da:4c:39:c2:25:04:8a:41:a3:ff:f6:fe:
                    86:1b:da:00:05:4d:ca:41:2a:97:fa:3d:63:4a:83:
                    9f:da:76:14:19:0d:90:89:1c:53:64:38:4d:50:d2:
                    4e:05:ea:eb:dd:e8:5e:a9:0c:71:b1:9a:21:f1:f5:
                    5a:3b:b1:f3:2f:7a:3d:77:2e:43:b1:44:a5:34:fe:
                    89:8b:c4:76:eb:c7:6f:d2:ce:3e:d0:42:1e:5c:08:
                    5e:aa:b5:ba:65:a2:cf:ae:eb:73:fd:a3:eb:c5:e3:
                    d0:9c:b1:66:d5:e7:cb:83:6d:54:9b:c2:09:fa:36:
                    91:57:dd:bc:56:93:1a:4e:0f:ba:78:dd:0b:0d:4a:
                    e3:62:a0:a8:a6:78:50:1d:3d:33:a7:0a:e5:df:14:
                    5b:dd:e4:0f:16:65:e3:c1:6f:8f:33:ca:4c:7d:8a:
                    68:5d:05:54:9e:90:e8:b5:d9:a9:11:07:4d:9c:2f:
                    c4:22:7b:86:af:46:c6:ef:da:b5:e6:49:7d:e6:eb:
                    e8:e1:4f:d5:4e:84:47:f0:d1:1e:2c:fb:2c:3d:7c:
                    ac:81:54:37:5c:96:e8:6f:18:84:ab:e0:ec:69:62:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:69:FE:9A:AD:CA:45:28:B6:C4:63:4D:2C:D3:22:9B:4F:C8:5E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c4fcf5e-f5f3-3c38-9224-acfa7f223187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7b:c9:86:4d:25:7a:a3:57:6c:49:f9:37:05:74:8b:15:bf:
         8e:90:f6:94:93:bd:de:fa:e6:46:cc:b1:83:aa:28:6e:b9:0d:
         ae:f4:94:4f:0b:99:61:10:59:f2:89:53:94:26:82:d1:57:70:
         f3:6c:a9:77:25:e6:4b:35:92:f3:f7:43:d2:e8:17:23:ba:47:
         ab:4e:6d:e2:ee:80:38:17:9b:cb:4a:14:6f:62:37:11:73:bc:
         4f:e1:19:f6:8c:56:33:68:3c:c9:92:16:72:a1:e9:06:84:f2:
         c8:e4:3b:f0:3e:dc:11:29:d9:6f:78:de:86:9c:5e:53:19:dc:
         b6:aa:ac:0a:18:1d:00:9b:ce:dc:9e:2d:ab:22:d4:36:01:62:
         71:81:67:65:9e:22:65:d6:d4:8c:e8:35:02:8f:52:a5:27:8e:
         26:a7:cd:05:5f:39:a0:7c:ff:01:a9:f4:52:09:dc:10:68:99:
         0a:65:fe:ac:30:e7:d5:f1:e4:34:3f:3d:41:7b:02:b1:06:f2:
         ac:b0:48:43:f7:84:eb:86:26:dc:4b:6a:5a:76:f1:bf:58:97:
         43:36:a6:99:8a:25:5b:a1:5d:3d:f9:e8:59:e3:69:ec:25:67:
         a7:17:9f:de:bc:f4:06:5f:b9:e4:09:6c:90:5a:12:5c:a0:fd:
         d3:0e:62:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/rT1M9V7vIDzugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
ZjA3OTk4NjYtYTBmOS00NDc1LWJmNzMtNTlkODZiZTI5MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCI+mPCsI9QTcj/AGDPP1QNROmy6DwAdR5+H
gdV+N0jaTDnCJQSKQaP/9v6GG9oABU3KQSqX+j1jSoOf2nYUGQ2QiRxTZDhNUNJO
Berr3eheqQxxsZoh8fVaO7HzL3o9dy5DsUSlNP6Ji8R268dv0s4+0EIeXAheqrW6
ZaLPrutz/aPrxePQnLFm1efLg21Um8IJ+jaRV928VpMaTg+6eN0LDUrjYqCopnhQ
HT0zpwrl3xRb3eQPFmXjwW+PM8pMfYpoXQVUnpDotdmpEQdNnC/EInuGr0bG79q1
5kl95uvo4U/VToRH8NEeLPssPXysgVQ3XJbobxiEq+DsaWLXAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtp/pqtykUotsRjTSzTIptPyF4xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGM0ZmNmNWUtZjVmMy0z
YzM4LTkyMjQtYWNmYTdmMjIzMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHt7yYZNJXqjV2xJ+TcFdIsVv46Q9pSTvd765kbMsYOqKG65Da70lE8L
mWEQWfKJU5QmgtFXcPNsqXcl5ks1kvP3Q9LoFyO6R6tObeLugDgXm8tKFG9iNxFz
vE/hGfaMVjNoPMmSFnKh6QaE8sjkO/A+3BEp2W943oacXlMZ3LaqrAoYHQCbztye
Lasi1DYBYnGBZ2WeImXW1IzoNQKPUqUnjianzQVfOaB8/wGp9FIJ3BBomQpl/qww
59Xx5DQ/PUF7ArEG8qywSEP3hOuGJtxLalp28b9Yl0M2ppmKJVuhXT356Fnjaewl
Z6cXn9689AZfueQJbJBaElyg/dMOYvI=
-----END CERTIFICATE-----