Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6655d776-8b85-32fb-b053-f9aac5340592.roa
File:                     6655d776-8b85-32fb-b053-f9aac5340592.roa (raw, json)
Hash identifier:          p8nv60ya9RwDX4oNUEm7+vKeMWzFR7uCakoQWPkeBwE=
Subject key identifier:   3B:CE:B3:1D:8F:3A:CC:06:6C:D0:6A:D7:9D:76:5A:6B:40:32:1A:4D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBB8AD6A3D06C06564C060
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6655d776-8b85-32fb-b053-f9aac5340592.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b8:ad:6a:3d:06:c0:65:64:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=6895122d-b824-4e09-a949-18640d32a2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:64:a1:85:b6:e5:d8:d0:05:b2:bd:7f:9f:
                    48:c4:00:f9:0c:66:e4:a1:23:25:3b:f7:cd:99:bf:
                    20:e0:0c:d4:40:0e:51:49:32:96:5a:64:8a:5f:54:
                    aa:0d:ab:20:bd:83:b1:88:0d:f3:1c:21:ad:be:ec:
                    33:03:b5:f0:16:00:de:f1:fb:27:3f:91:e8:41:21:
                    70:3a:64:57:c2:dd:17:31:41:a2:db:be:54:97:b6:
                    9a:de:e2:6b:51:63:e5:1f:b8:5c:4b:67:9d:6d:5b:
                    a7:49:a0:39:5f:62:db:90:47:f6:3a:c1:3f:84:9a:
                    30:6a:a6:ff:fc:ad:ed:41:6f:c9:5f:12:58:79:43:
                    1f:38:ae:28:d8:d1:cd:fe:35:1d:ed:e1:fa:61:a3:
                    37:de:56:5a:7a:e1:ae:c7:9e:0f:9c:35:08:b3:b3:
                    69:1b:e3:94:d6:74:b1:98:0a:c9:46:f9:ec:dc:1b:
                    23:0b:d7:92:a8:a3:74:f0:de:47:ac:c2:b5:cf:53:
                    bd:87:98:e7:00:b6:c1:6d:98:67:47:13:70:52:58:
                    2c:4a:93:e1:71:3b:2f:d1:20:57:60:b0:4c:a1:6f:
                    2e:aa:0a:50:c8:87:ca:aa:fa:a2:be:77:b0:6f:41:
                    cf:69:21:0b:ea:97:28:88:d6:6e:71:09:08:71:be:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CE:B3:1D:8F:3A:CC:06:6C:D0:6A:D7:9D:76:5A:6B:40:32:1A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6655d776-8b85-32fb-b053-f9aac5340592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:0e:21:4a:db:38:e4:11:56:bf:f3:c5:c0:b9:f4:cd:52:
         dc:95:a1:4c:54:82:51:54:58:e5:ab:ec:ad:87:4e:15:af:92:
         f3:b0:a6:f4:a1:45:85:dc:6d:96:66:84:17:84:63:81:a1:b3:
         74:ea:3f:ef:d2:f0:5e:fe:33:9c:92:8e:13:85:d7:0a:08:88:
         ee:d1:a7:00:7a:c2:1b:ac:07:f3:52:6e:48:23:d8:cc:4a:06:
         30:1b:4f:09:2a:48:3d:28:d7:1f:bb:7d:f0:80:e6:2d:66:ef:
         22:34:84:d4:d1:c2:25:4f:ef:71:24:0f:55:2a:1a:f1:69:99:
         83:c0:c1:55:56:9a:84:7a:55:ff:e3:33:f5:e5:eb:b9:3f:1e:
         e0:e2:e7:7d:fd:e8:e8:27:7b:4c:ef:1f:ef:03:25:49:dc:7c:
         10:bf:0a:42:6a:91:ee:94:be:da:32:1e:1d:7a:5e:41:6a:42:
         bb:46:3a:37:53:5d:67:28:e0:de:cb:26:ec:2a:af:64:e9:4f:
         71:7e:5d:a0:b8:b5:11:d4:c3:be:36:5a:9a:3c:dd:4d:6b:00:
         ca:f3:f6:2a:47:2b:94:7c:a4:b7:b0:f8:24:fc:6e:50:a4:0a:
         30:53:a9:2c:f4:10:01:27:ee:99:30:ba:bc:3f:b3:06:32:9d:
         e9:3e:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:48 2025 by rpki-client