Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f852a5e0-19b3-365d-83de-5ffeb7361a0b.roa
File:                     f852a5e0-19b3-365d-83de-5ffeb7361a0b.roa (raw, json)
Hash identifier:          izXLCRT29hUJZz/DJVNB6dizaz6BdVkE+2x2N6X8Dus=
Subject key identifier:   13:38:00:B6:3B:60:ED:42:7D:6C:C2:4E:2C:77:6E:CA:82:FF:01:12
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBBDED51CCF11886169900
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f852a5e0-19b3-365d-83de-5ffeb7361a0b.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:bd:ed:51:cc:f1:18:86:16:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=b8cc80e3-b4ce-4d0a-b1d9-b4fe852429b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:43:47:e4:de:6f:93:68:92:77:36:e7:1c:
                    14:9b:bd:47:97:5e:c8:43:44:7d:ea:e7:34:ac:ff:
                    7a:76:4c:0c:ea:63:24:f1:d3:3f:5d:47:23:ee:a0:
                    3f:ad:74:c5:26:c0:84:1b:bf:7d:46:99:49:1c:c6:
                    35:4c:b8:b6:ee:8a:9f:63:43:12:89:0d:95:a7:fb:
                    f0:24:74:1d:49:95:ed:7b:20:20:36:1c:f0:9f:9a:
                    ef:bb:fa:ec:72:4a:4e:bb:f7:e2:8f:dc:b9:fe:ba:
                    c3:a9:95:91:42:64:1c:3c:a9:63:0c:72:67:b5:90:
                    44:0d:49:51:62:5b:a0:3d:85:ee:d3:ba:30:74:48:
                    d3:99:05:d9:93:23:62:ce:1c:96:f8:3b:44:0d:15:
                    38:c5:44:e4:a5:56:f8:d6:b8:49:80:6b:ba:95:eb:
                    85:e6:dd:dd:f5:a8:80:7f:9d:05:54:3d:79:6b:00:
                    a1:e9:f0:ca:36:ad:a4:16:14:06:31:ca:1b:ce:ed:
                    72:63:b2:33:f6:09:c0:fc:ed:05:fe:52:f7:ab:c8:
                    18:37:65:19:1e:4c:17:bc:78:85:7c:d0:31:f7:0d:
                    27:45:03:75:94:6e:4f:40:16:e9:62:56:c2:de:d8:
                    a8:fa:c7:05:5b:f7:9c:b3:1d:3b:97:75:42:50:3d:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:38:00:B6:3B:60:ED:42:7D:6C:C2:4E:2C:77:6E:CA:82:FF:01:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f852a5e0-19b3-365d-83de-5ffeb7361a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:ba:7d:16:78:61:02:af:7b:85:e7:cf:e7:c3:c3:39:fe:
         d9:bd:d0:9e:1d:43:4a:83:06:6d:20:13:91:81:2a:7f:61:79:
         e0:ee:48:39:c3:30:86:8e:ba:16:d9:47:56:d5:b5:67:88:4b:
         26:f0:c4:25:69:09:4f:50:9b:9f:fc:3f:fd:32:3f:4f:cc:c9:
         ce:85:d6:cd:78:f8:64:e8:7d:49:05:0e:ae:7e:41:36:3e:ff:
         a8:60:e6:86:51:1e:47:32:78:9c:f1:85:95:8b:1f:63:7e:f5:
         23:da:bf:0c:b1:f5:bc:3e:e4:b4:28:46:83:75:97:44:ba:16:
         9f:cc:cf:14:cf:30:b3:fe:68:6c:a8:66:92:2c:f2:f0:d9:dd:
         7a:7c:a0:46:4d:41:a9:c9:09:d7:af:aa:42:2c:9c:45:73:5e:
         64:02:57:82:a5:38:1f:1f:43:31:b7:1f:5f:98:8b:57:dd:da:
         0e:7c:76:3f:d8:d2:d1:52:07:1c:f9:77:0a:af:60:9a:3f:23:
         7a:5b:4c:eb:bc:83:34:eb:c7:97:84:64:33:f3:99:6c:9b:c9:
         f7:f0:cb:aa:c7:e7:2a:57:3e:11:a1:28:83:9f:e6:18:4a:37:
         29:07:67:05:aa:ba:f2:c4:fb:c8:ff:f1:dd:09:bd:3f:13:41:
         34:2d:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:48 2025 by rpki-client