Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
File:                     84343704-c93f-31bb-ae2f-4e88f3e7612a.roa (raw, json)
Hash identifier:          FP7slTutB7cfe5lASrW5j4lGaoO4iL+KPwUeh94KesQ=
Subject key identifier:   B4:FA:EF:BE:64:91:9F:C6:E3:52:4A:DE:A6:DD:E6:D5:72:AF:0B:40
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F432858490E16BE03B32015D9DD0BA150
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        104.192.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:be:03:b3:20:15:d9:dd:0b:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=026c03b1-6f76-4304-adee-a3cda853aad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:cb:23:5d:1e:92:f6:41:8b:81:6e:a2:98:
                    25:6f:af:50:67:1e:a1:67:15:db:1a:29:8d:93:60:
                    e6:f5:8d:98:3a:5d:76:45:c8:e1:00:24:ee:3d:91:
                    79:42:5a:8a:92:36:85:ad:42:08:96:b1:e5:95:96:
                    bc:b1:1f:3a:6f:c1:0d:4d:1a:d8:42:c8:40:fc:27:
                    5a:b2:ed:00:aa:d1:7b:e0:e0:b1:70:37:b5:12:06:
                    a9:8f:e4:78:eb:33:91:97:62:5c:da:4e:86:37:86:
                    50:d9:f9:18:58:b7:08:aa:25:58:ca:4b:86:69:dc:
                    71:ce:65:23:25:61:41:78:8d:62:0a:85:bb:12:c4:
                    83:86:18:13:65:4d:18:7b:5e:34:f9:4b:58:76:9d:
                    1f:81:56:3b:f1:95:3d:d7:d3:32:18:bb:ac:d7:58:
                    d0:f7:76:ef:ea:78:91:6c:f8:ed:71:ef:c9:84:68:
                    50:11:e4:95:d0:b3:e7:cc:16:7a:9c:1a:b5:3a:94:
                    c9:8c:f3:ac:ac:ba:07:85:4e:8a:08:9e:7d:97:99:
                    0e:4a:16:d6:01:c6:24:8f:97:a8:1c:ee:71:0d:4e:
                    d0:f8:dd:f3:5c:ac:59:09:dc:0e:66:aa:43:9e:74:
                    9b:c4:19:ec:80:73:21:76:24:58:55:1a:d6:7f:3a:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FA:EF:BE:64:91:9F:C6:E3:52:4A:DE:A6:DD:E6:D5:72:AF:0B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:7d:a8:1c:d9:28:91:d1:6d:e3:a0:b6:d3:af:20:e8:fb:
         0a:9e:6d:c3:19:f2:d4:87:38:14:fb:f0:fb:0e:da:82:bc:11:
         49:9c:85:51:67:7e:3f:de:07:f8:6e:3d:cf:7b:45:a1:38:82:
         5c:d3:20:98:2f:7f:c2:36:1c:3f:7d:65:fc:ed:2c:3f:9a:16:
         8f:9c:34:3b:44:c9:3a:c3:34:32:c5:84:8f:da:7a:31:bc:18:
         9b:42:f3:b4:e6:13:4d:94:5b:dd:9f:5a:5e:74:62:51:93:92:
         67:87:d4:3c:7d:73:02:7c:7b:65:87:9b:2c:54:dc:48:40:45:
         a1:73:06:13:3c:b9:4c:91:bd:93:74:ca:50:1e:af:0e:d1:25:
         4b:c9:3b:fd:20:e8:5b:03:98:ad:d4:5f:c3:ed:df:c3:7f:fe:
         1b:13:f1:79:b9:76:36:7e:d8:08:10:c9:43:87:87:92:d5:49:
         9d:73:9d:ff:bc:04:01:5b:6d:99:03:e1:90:d7:b2:a8:a1:7b:
         46:03:ea:de:57:6f:6a:75:c6:bb:cd:27:a1:d9:2e:04:25:fa:
         70:bf:82:b1:f2:b9:14:45:20:3a:7d:f1:a0:21:7b:22:3f:9e:
         b2:30:8a:6c:7f:fe:9e:b8:2b:bb:d3:3b:8f:6f:5a:a7:62:6c:
         13:47:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:43 2025 by rpki-client