Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb9c0bee-73d6-39dd-a5c3-f91d882fdb94.roa
File:                     fb9c0bee-73d6-39dd-a5c3-f91d882fdb94.roa (raw, json)
Hash identifier:          oUbXzipKqM2iCSz8KGS9vsxjqCn8CayfR6wuA4Q2JX4=
Subject key identifier:   3D:56:A3:E2:0B:71:FC:09:B8:7B:AE:B1:C8:85:13:BD:A0:21:D8:5F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849552949CBAF686E0AD37F6460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb9c0bee-73d6-39dd-a5c3-f91d882fdb94.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     262287
IP address blocks:        104.252.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:49:cb:af:68:6e:0a:d3:7f:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=efb62d4c-bd9d-492d-98c4-ef4da205690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:eb:43:13:3b:aa:53:1a:cb:ec:c5:3b:67:
                    f5:1d:ed:f2:92:f4:b2:e1:9f:83:51:ff:01:fb:29:
                    b1:61:3f:c9:05:bd:53:07:19:54:e4:8d:2a:91:84:
                    c3:38:6d:6a:67:df:28:74:fc:b4:62:68:01:e5:1f:
                    09:e6:ae:21:f2:eb:8b:07:a8:39:ad:52:49:84:2f:
                    bf:5e:83:24:12:ad:6e:44:f4:92:d6:6f:e0:5d:7a:
                    90:72:d1:71:5b:6e:9e:fa:47:c3:ea:19:4b:2f:82:
                    38:de:1b:88:5b:d4:f3:60:0c:e0:fc:fc:c8:c0:a7:
                    d0:a1:72:ce:62:59:76:b3:ac:0c:bf:3b:e3:50:65:
                    6e:1e:46:9d:10:0c:cd:8d:e0:5b:74:09:79:3e:4d:
                    6d:14:de:4e:5f:c9:4b:57:6d:c1:2b:6d:e0:5f:c4:
                    48:7c:ce:db:85:be:09:4d:f9:17:d3:56:3a:e4:91:
                    ec:57:4c:39:72:ac:12:ba:68:1e:ce:24:82:75:ae:
                    42:72:2a:1a:00:c9:f1:af:ef:10:90:5d:f7:8c:f1:
                    90:f1:dd:5a:8e:e1:7c:67:b2:bd:87:99:ed:41:81:
                    eb:f5:ee:a2:74:e2:e9:ca:45:22:10:41:f4:9e:a2:
                    0e:24:36:03:57:9b:bc:65:dd:ca:09:e3:da:b4:e1:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:A3:E2:0B:71:FC:09:B8:7B:AE:B1:C8:85:13:BD:A0:21:D8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb9c0bee-73d6-39dd-a5c3-f91d882fdb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ce:4c:ed:45:1c:0a:40:9d:d3:61:76:52:e8:0d:43:a5:d0:
         3d:3c:42:e5:a2:7f:84:df:eb:22:73:37:39:e2:82:48:d1:b8:
         ad:d3:16:af:be:d3:c1:d3:20:80:68:2e:c4:09:1e:02:3c:40:
         88:df:ff:07:50:af:33:62:06:1a:02:da:e1:67:96:1c:d2:09:
         37:66:ac:6c:02:bc:6c:70:e2:07:a2:48:29:d8:64:91:d6:22:
         f8:12:55:d3:d5:e7:05:04:31:46:08:e4:1c:95:d1:9b:e7:47:
         16:43:60:da:74:4a:5b:bd:64:f6:b6:85:09:7d:dc:6f:86:a2:
         8f:03:e8:44:e7:bc:73:2f:39:be:0b:87:2c:dc:93:7c:08:01:
         8c:5d:02:20:3b:1d:aa:71:a0:e7:c5:e5:d1:71:7c:47:97:fa:
         17:92:9a:08:4b:bf:3f:3c:93:e6:e2:49:bd:84:ae:5e:85:f1:
         18:dd:ac:2a:c2:59:e4:07:9f:ed:83:22:ba:32:fe:64:92:d8:
         06:bb:67:f2:3f:40:23:17:d5:85:1e:39:44:dd:09:a6:c3:a5:
         a9:c8:74:90:d3:02:cb:14:f8:ca:29:0b:8d:5f:7a:87:2b:50:
         61:73:b2:ec:cc:5e:9e:87:f4:03:e2:43:be:ac:40:5d:e8:5e:
         d1:fa:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:47:06 2025 by rpki-client