Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4e8745e-3842-3b96-a6d9-2244afc6f2fa.roa
File:                     f4e8745e-3842-3b96-a6d9-2244afc6f2fa.roa (raw, json)
Hash identifier:          LUpUXsmNZm64FRtqQpmEqkJFD4Ik+mcaZoR8mTk+xAU=
Subject key identifier:   0B:02:F0:8C:3A:30:02:2A:DC:2A:AB:4A:81:52:A4:BE:52:76:E0:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848699E618E6EFFC0D7B9A8B460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4e8745e-3842-3b96-a6d9-2244afc6f2fa.roa
Signing time:             Thu 02 Jan 2025 16:05:53 +0000
ROA not before:           Thu 02 Jan 2025 16:05:53 +0000
ROA not after:            Wed 02 Apr 2025 15:05:53 +0000
asID:                     25160
IP address blocks:        104.252.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:9e:61:8e:6e:ff:c0:d7:b9:a8:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  2 16:05:53 2025 GMT
            Not After : Apr  2 15:05:53 2025 GMT
        Subject: CN=8550510d-eb7b-4282-997d-a4c94ed5da88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:bf:1f:cc:e2:1b:42:3a:2e:2b:2b:8e:44:
                    f6:5a:d1:6e:14:cf:8a:b9:64:42:40:8e:64:de:04:
                    39:60:7f:49:25:61:28:ef:16:38:2f:98:2f:d9:38:
                    0f:75:ff:4e:94:f9:c0:89:31:6b:90:16:a8:3a:b1:
                    85:f8:6a:09:02:a6:dd:9b:93:43:e9:74:f9:16:57:
                    c0:6d:39:a1:c7:3a:71:28:98:b9:58:c9:06:27:75:
                    cc:35:3c:75:3e:36:35:40:36:7d:0d:89:8b:d3:f7:
                    41:23:c1:49:73:d7:8c:bd:1b:1d:bb:fc:45:de:5b:
                    6c:6d:b6:a1:b1:99:bc:15:5e:e2:70:60:14:a3:7a:
                    08:4e:ed:cb:c4:1a:a5:b5:bf:40:55:f0:14:ec:27:
                    f7:75:b7:b6:47:c1:2f:8a:51:ec:da:93:bf:c0:a9:
                    f4:6c:8e:3e:9b:f6:fc:08:6d:8c:80:14:64:61:c5:
                    f6:ff:27:7d:e3:15:95:3d:fe:36:bb:cf:c6:4c:4b:
                    3b:70:6e:a1:c6:07:02:7a:dd:71:62:c5:38:a5:aa:
                    89:af:bd:89:d3:d7:cf:b0:e6:2d:2d:7a:78:19:fe:
                    42:55:ae:db:64:3b:56:8b:e4:ac:d5:cb:90:bd:15:
                    e5:d6:a0:b7:fc:bb:20:ff:0b:ad:2f:cb:8d:7c:f8:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:F0:8C:3A:30:02:2A:DC:2A:AB:4A:81:52:A4:BE:52:76:E0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4e8745e-3842-3b96-a6d9-2244afc6f2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:0f:3f:4c:5d:69:67:8e:71:44:b0:d3:86:b9:b7:33:0f:
         94:db:f2:7b:db:d3:16:96:0b:f4:85:6f:67:fe:63:aa:98:9e:
         8f:79:a5:e9:8b:8c:49:d6:12:2a:50:cb:dc:3a:81:54:c8:ad:
         93:70:6d:08:7b:b5:07:55:1c:6f:39:91:e1:7f:f8:0d:a4:63:
         42:92:fc:f9:6e:a9:b4:4b:c2:20:3c:05:66:05:c4:8f:6b:38:
         b3:b9:af:7c:8f:e3:04:9b:e6:0f:f9:fa:f0:01:40:20:6a:14:
         df:19:09:e9:c0:2f:6d:5a:22:ec:94:46:4f:ec:d0:54:05:d6:
         f1:61:bb:cd:10:31:20:94:fb:67:05:13:47:fc:e2:cd:05:3e:
         66:f9:d7:27:8b:b5:f5:8a:b1:b5:57:e9:3b:fa:e5:f6:39:5b:
         ae:49:c7:b5:4f:60:a7:27:8c:0e:6c:46:82:2c:9b:eb:58:c0:
         e1:ba:0a:78:52:45:e4:69:a1:2a:72:79:20:6f:77:a5:0c:c3:
         9c:76:1f:b3:2c:5d:40:9a:9d:a1:32:94:f6:1c:dd:31:46:d3:
         33:a3:43:9e:80:5a:f3:24:10:60:ff:0b:75:16:97:5c:ee:83:
         0b:0a:5e:0a:64:72:7b:ef:f9:67:cd:07:eb:d9:ef:74:e1:62:
         f7:7e:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:25 2025 by rpki-client