Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ceeaa5dc-e783-3291-bd28-b13b1a53934c.roa
File:                     ceeaa5dc-e783-3291-bd28-b13b1a53934c.roa (raw, json)
Hash identifier:          /A9a0elBEaiZDpzEil1q2He0YXUsZ5Mtn9pn2LABJA0=
Subject key identifier:   50:E9:57:D5:00:FF:CF:E5:6A:72:9C:75:6D:B0:D5:0D:EC:FE:B0:0D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848971CBCC1F22FD47C6EA5AB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ceeaa5dc-e783-3291-bd28-b13b1a53934c.roa
Signing time:             Sat 18 Jan 2025 23:11:51 +0000
ROA not before:           Sat 18 Jan 2025 23:11:51 +0000
ROA not after:            Fri 18 Apr 2025 22:11:51 +0000
asID:                     201525
IP address blocks:        104.253.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:1c:bc:c1:f2:2f:d4:7c:6e:a5:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 18 23:11:51 2025 GMT
            Not After : Apr 18 22:11:51 2025 GMT
        Subject: CN=e6dc34cc-8c26-4329-a0dc-a7bfe8a25aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:80:8c:16:af:56:31:c4:d5:ec:1a:fd:25:
                    20:81:3b:8e:a9:0c:69:14:ae:f7:5d:9b:cd:08:f6:
                    e5:19:16:bd:4a:c2:66:21:b0:d2:7a:d8:73:f0:67:
                    4b:c5:b7:da:e6:8b:fd:4d:44:78:18:3a:f3:70:02:
                    ba:75:f6:1d:ee:ce:7a:a1:21:ba:f7:69:af:05:94:
                    3a:6d:36:cc:32:d1:4c:da:0e:e2:47:46:36:eb:eb:
                    e7:05:ba:a0:2e:f5:df:51:41:12:d2:98:89:25:cb:
                    ef:ce:ac:14:7a:2f:73:06:d6:32:ce:2b:cc:6e:27:
                    70:50:05:cf:cf:c6:3e:48:6c:f3:fa:f2:d3:02:7e:
                    4d:7e:94:78:02:10:31:7a:b4:68:0c:61:bb:31:c4:
                    42:e5:a4:43:db:8b:55:fe:24:d0:72:35:cf:97:06:
                    3a:ce:a1:00:ff:a9:1b:90:49:52:e9:75:31:09:a7:
                    32:c7:97:45:0c:96:40:62:4a:89:51:72:1a:ca:11:
                    8a:2f:f0:9d:62:d4:4e:93:46:80:e9:2c:8c:a6:3c:
                    56:8c:b1:27:a2:68:e6:e1:80:9f:27:b0:dd:c1:c3:
                    5b:25:fe:6d:7d:97:d0:68:5c:81:4c:49:89:3b:1c:
                    28:fd:c2:aa:cc:6f:59:17:18:8c:34:67:02:3e:7d:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:57:D5:00:FF:CF:E5:6A:72:9C:75:6D:B0:D5:0D:EC:FE:B0:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ceeaa5dc-e783-3291-bd28-b13b1a53934c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:b2:f4:0b:79:89:91:c9:48:0f:2f:01:87:2e:55:5f:83:
         9d:e9:89:9d:ae:d2:5a:c4:92:14:ee:98:9a:c5:ef:e4:4a:eb:
         06:47:c4:af:87:e1:7f:67:f2:b9:2d:f3:77:34:5f:8e:8a:eb:
         b3:06:b7:bd:e3:32:6c:77:46:24:a6:e5:87:5f:e1:e0:35:13:
         bb:ac:4f:0d:2b:c4:dd:1c:3c:2b:f0:37:c1:c2:1e:25:82:28:
         c9:83:6a:e1:82:84:fb:b2:ae:1d:e8:a2:64:b0:8c:86:6f:78:
         68:af:95:e4:c8:32:9b:3e:ec:68:9a:2e:73:a8:ca:a3:a1:c0:
         9c:3e:a9:c6:6a:f4:4a:60:f3:b0:6b:fb:51:ad:c5:58:90:1a:
         d6:68:06:a3:11:87:d6:2b:f8:a9:5b:67:51:7b:dc:8b:a4:72:
         f5:a2:f3:74:ee:d6:7b:e1:09:21:ab:d6:29:b2:eb:90:56:1d:
         a9:fb:b0:b3:4a:78:62:40:8e:ae:88:c3:5b:d3:d5:e5:5e:cb:
         2f:5f:4d:b8:bb:f6:4f:c0:92:ae:93:7f:51:5c:77:01:78:28:
         67:b4:ff:e3:55:90:80:65:08:ca:93:e1:0b:25:b8:80:be:89:
         81:08:ef:02:0b:4e:28:11:91:5d:b4:e7:34:de:18:3f:26:5d:
         46:af:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:03:50 2025 by rpki-client