Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
File:                     AS393278.roa (raw, json)
Hash identifier:          YiOMNu5e1ucSIPMeIY0wL++vuw1jgz4zO/LUjouQlSE=
Subject key identifier:   03:63:88:5B:B8:90:C5:0D:CC:E9:D3:47:73:2A:D2:10:06:CB:E4:CF
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       58296A816A114B054474C39155E5AA8586A286DF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
Signing time:             Wed 15 Jan 2025 21:28:23 +0000
ROA not before:           Wed 15 Jan 2025 21:23:23 +0000
ROA not after:            Wed 14 Jan 2026 21:28:23 +0000
asID:                     393278
IP address blocks:        104.234.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:29:6a:81:6a:11:4b:05:44:74:c3:91:55:e5:aa:85:86:a2:86:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 15 21:23:23 2025 GMT
            Not After : Jan 14 21:28:23 2026 GMT
        Subject: CN=0363885BB890C50DCCE9D347732AD21006CBE4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:50:5a:ad:df:6a:19:3c:f0:15:9a:79:de:
                    94:a6:a7:80:68:98:98:e5:b8:cb:8d:e7:4a:87:71:
                    7c:3e:fc:ed:48:c1:4b:a8:38:70:62:76:49:db:af:
                    6f:45:7a:01:6b:23:cd:60:72:63:7d:d0:2b:a2:d7:
                    d5:34:bd:ba:e5:f5:2d:98:91:e4:c9:d4:4b:cc:a2:
                    49:f0:25:df:ad:26:ee:5d:f9:b5:29:a0:09:74:e7:
                    73:3a:0a:41:19:84:ea:80:57:0d:da:fd:13:d2:a2:
                    d1:83:9f:34:2c:6a:32:51:b7:b2:f4:c1:39:0d:e6:
                    1d:00:a8:ea:59:93:3b:d8:38:40:6e:24:7f:b6:8f:
                    bf:c5:a2:48:67:cc:5b:ea:13:49:f9:4b:97:2f:96:
                    de:d2:84:d6:59:c6:71:3e:bd:d5:7f:a3:00:ba:53:
                    70:d3:5b:7b:72:d8:ef:40:13:04:d8:eb:f5:56:34:
                    db:5f:25:d9:30:38:a0:ba:17:62:53:bd:8f:89:f9:
                    0b:57:42:52:49:1c:fc:71:4d:c6:db:50:eb:27:52:
                    bc:05:4f:26:32:51:98:98:4a:3a:1b:5f:67:5c:b4:
                    1f:54:ce:b5:8a:83:91:aa:bc:61:26:26:09:71:4a:
                    df:a2:78:25:cd:86:db:89:36:a7:6e:ef:19:c3:bb:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:63:88:5B:B8:90:C5:0D:CC:E9:D3:47:73:2A:D2:10:06:CB:E4:CF
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:b0:14:10:cd:5b:2d:a2:1e:5e:b2:da:32:da:6a:60:4a:
         2e:38:5f:73:49:c7:f6:b5:d6:c4:26:02:c2:30:9e:0b:02:cd:
         b8:2c:a2:9a:9a:99:e1:32:21:b5:d0:6f:a3:fb:97:e3:37:04:
         49:04:7b:d7:66:79:17:da:95:40:00:86:f2:d2:12:08:ef:fb:
         1a:75:d2:64:f5:27:07:ec:36:1b:e9:bd:07:ca:8f:cd:1e:cc:
         ba:b7:b9:ca:07:36:3d:04:d1:20:7b:49:1c:ab:a9:f9:a3:46:
         e6:fe:73:59:90:a2:b5:e4:a0:13:ed:5c:51:b5:9c:5b:06:96:
         9c:26:d6:04:69:99:be:e8:b3:42:c4:2d:48:0d:19:21:73:8a:
         92:77:ba:7c:96:07:39:8c:8e:2e:ba:b6:f5:f6:e6:5d:df:d7:
         1c:34:95:0e:58:f0:0c:27:39:ac:a8:f7:6d:b8:29:df:9d:39:
         67:3b:a0:51:5a:c6:10:c3:c5:b3:77:0d:b0:0d:96:3f:55:7c:
         48:98:68:dd:12:59:34:d8:c8:f7:41:94:05:3b:1d:78:da:93:
         0e:dd:4d:59:71:14:ed:7c:85:6c:d7:9a:6f:05:cb:25:c8:b7:
         b9:39:56:a9:f4:d9:2e:e2:f9:6e:7b:07:69:4d:15:eb:83:25:
         ef:5e:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:57 2025 by rpki-client