Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b876cf65-3b88-313d-af39-1d10a3c35f5a.roa
File:                     b876cf65-3b88-313d-af39-1d10a3c35f5a.roa (raw, json)
Hash identifier:          c4v8FijIM+lN2kjk/47kmsGVjamCGHTNXDpWtSfw1sM=
Subject key identifier:   E7:57:37:0F:2F:7B:7B:9B:32:D8:98:FD:93:80:F7:DC:9F:12:B3:2A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C580EC973A1AA2114C33E8A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b876cf65-3b88-313d-af39-1d10a3c35f5a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     10557
IP address blocks:        104.252.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:ec:97:3a:1a:a2:11:4c:33:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=bb2934d2-48ee-46f7-b57c-40ce9180c888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6d:d2:61:0e:c6:67:3d:d0:c5:8c:f8:8a:6f:
                    6d:5a:80:fd:d2:e3:0b:10:9c:b5:d7:2d:be:0b:56:
                    4e:04:cf:f0:ac:e7:db:39:61:3a:a4:de:f8:67:8b:
                    ac:43:f7:5d:37:03:a1:60:7e:58:16:81:81:b8:ff:
                    bb:0c:4b:35:77:4d:10:53:aa:a5:ed:31:2b:8d:da:
                    2b:9a:19:e5:e8:6c:e7:81:a1:82:ac:b7:3e:0b:f8:
                    aa:2b:3e:e9:3a:34:2f:60:01:1a:c8:bc:f5:3a:4d:
                    d7:b9:7c:3f:f4:29:cf:27:fc:ca:f9:ed:4d:2f:b4:
                    62:eb:65:a0:ba:a6:78:8e:57:c0:7d:37:f8:4d:1f:
                    6c:c4:67:cd:53:a7:e1:e7:bb:ff:5b:5a:14:f8:57:
                    68:0f:3b:f7:34:da:5c:20:55:44:03:94:9c:27:95:
                    51:7e:04:93:ea:80:b0:9a:42:f8:18:a3:33:cd:9d:
                    03:80:dc:2d:09:34:bc:ca:68:35:c5:80:bb:6f:38:
                    f9:36:dd:eb:bc:d8:91:a6:ea:a5:d8:75:99:7d:a2:
                    97:48:46:89:f6:9e:82:65:6c:45:b5:c6:b0:79:85:
                    f8:8a:67:09:52:29:3d:d2:a4:02:f5:85:c0:f0:86:
                    2c:61:08:61:bd:03:c5:99:c8:91:4f:67:d5:c9:96:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:57:37:0F:2F:7B:7B:9B:32:D8:98:FD:93:80:F7:DC:9F:12:B3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b876cf65-3b88-313d-af39-1d10a3c35f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:81:50:32:0b:de:4b:e0:ed:a6:7d:b0:a7:34:6a:d5:9a:f1:
         db:e6:ab:e8:bd:29:e2:95:15:9d:e0:8a:0e:1b:8d:7c:b2:27:
         6f:4a:26:21:2b:b6:c3:19:6e:6c:24:d6:2a:e9:21:f8:1e:09:
         bb:24:26:f3:9e:a3:de:7d:82:b4:76:d2:7a:a7:69:2d:e1:d2:
         20:de:df:d5:d2:a1:ee:46:bb:dd:ac:72:47:7d:d2:1b:75:12:
         18:88:42:e4:fd:26:5a:bd:24:d4:eb:fa:0d:46:ae:82:34:5e:
         64:59:9c:af:db:c7:31:f8:2b:27:cb:eb:30:33:ef:8b:93:9a:
         8f:63:3a:b3:f5:7c:36:bf:48:6a:dc:d0:4e:2f:2e:f1:04:c4:
         50:f8:f5:56:14:87:54:aa:62:c4:9e:ea:1f:20:f1:c4:a2:81:
         a9:c6:70:81:3b:32:68:cf:ba:9d:a0:c1:f4:1d:0c:e3:b3:05:
         b4:23:54:54:ac:63:5f:14:a5:03:23:08:20:fe:54:b2:f4:36:
         3d:81:c7:b9:33:47:ec:d5:cc:5f:64:e0:3a:95:ca:7a:02:62:
         a0:b7:14:46:b9:37:95:98:01:58:72:d0:64:ac:14:5a:0a:31:
         f9:71:35:48:46:86:93:ae:12:48:c8:18:88:90:b7:16:0e:28:
         26:93:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:58 2025 by rpki-client