Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e352e302f32342d3234203d3e203139393137.roa
File:                     3130342e3232362e352e302f32342d3234203d3e203139393137.roa (raw, json)
Hash identifier:          kPQplL75JWUjPa/WQXU+wTrFZbLYrqbR/ibGoEFt0uU=
Subject key identifier:   EE:30:66:E3:1E:52:27:0C:C7:84:81:AB:BE:A1:6B:62:C1:BE:58:01
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       3E6DD488294C7849BF5C9B36B8265621C9C61E1A
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e352e302f32342d3234203d3e203139393137.roa
Signing time:             Wed 18 Dec 2024 05:55:08 +0000
ROA not before:           Wed 18 Dec 2024 05:50:08 +0000
ROA not after:            Wed 17 Dec 2025 05:55:08 +0000
asID:                     19917
IP address blocks:        104.226.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6d:d4:88:29:4c:78:49:bf:5c:9b:36:b8:26:56:21:c9:c6:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Dec 18 05:50:08 2024 GMT
            Not After : Dec 17 05:55:08 2025 GMT
        Subject: CN=EE3066E31E52270CC78481ABBEA16B62C1BE5801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:c5:7d:3e:e8:e4:b3:b9:33:38:c0:95:54:
                    3c:9f:4e:af:6f:cf:11:a8:90:a0:11:2c:39:b7:b2:
                    be:14:c1:4b:f0:89:b9:78:e0:38:ef:00:9d:33:2f:
                    52:03:90:f2:58:ee:34:ab:29:ec:c2:ff:3a:9d:66:
                    40:30:71:70:cd:d5:2b:5f:f9:51:71:6c:fb:3f:2b:
                    b6:67:8f:49:ad:cf:77:ea:9c:61:87:23:0a:41:0f:
                    8d:76:62:76:ec:0b:f3:50:93:be:13:89:51:25:0d:
                    39:29:75:fa:2b:17:8e:9c:bd:26:a3:32:9c:7d:5b:
                    eb:b5:84:e1:c5:ac:f7:c3:96:53:3d:71:7f:e4:74:
                    1a:69:80:be:0c:07:3c:b2:7d:41:10:5d:5c:7d:e6:
                    a7:c6:34:1a:82:db:cc:8e:ad:47:7b:5c:c9:75:37:
                    1b:d6:d8:0c:7a:9e:80:09:6c:9d:43:8b:9c:4a:6f:
                    17:20:af:34:00:6d:8e:8d:17:8a:8d:d7:b5:64:c0:
                    77:91:68:03:12:4a:62:a1:17:83:c4:28:e7:0c:6c:
                    5a:96:b1:87:9a:ae:8c:63:e0:82:4f:2a:ae:75:f7:
                    7e:f5:80:e0:86:92:44:05:f6:29:22:ed:3f:1f:98:
                    d5:fc:76:dc:51:7a:8e:f9:c1:6d:e3:f3:3c:6d:67:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:30:66:E3:1E:52:27:0C:C7:84:81:AB:BE:A1:6B:62:C1:BE:58:01
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e352e302f32342d3234203d3e203139393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.226.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:94:7d:e4:ba:4d:29:36:c2:b9:df:97:79:51:dd:d7:20:2e:
         49:43:6c:13:a0:3e:12:07:9f:e2:d8:d1:43:f9:b1:d7:42:a1:
         47:c6:51:aa:01:9d:50:a8:bc:f5:2a:60:13:2a:cd:22:aa:1d:
         d7:66:18:07:a6:76:69:a2:04:19:06:60:ba:3d:81:46:9a:a1:
         d3:13:43:a1:5d:ca:b3:1e:af:56:08:22:24:11:fe:da:63:84:
         c7:f7:db:59:31:72:09:fd:91:11:11:01:ee:42:dc:c8:47:0e:
         cf:a2:5c:7d:de:13:c5:22:e3:7c:60:b7:8e:09:7f:44:6c:62:
         27:10:06:04:e6:ce:82:c0:1a:cf:21:74:eb:c0:2b:ba:d3:ba:
         9a:71:08:ac:39:54:b2:6c:04:b6:ef:d3:23:3c:c2:41:d2:c4:
         ec:f7:fb:66:8b:ba:1f:ee:ec:61:c1:21:e0:1b:76:52:28:2a:
         20:35:cf:fd:1d:6e:22:42:6b:a9:b4:d1:15:72:8b:d4:be:ee:
         17:cd:dc:80:56:38:25:e0:b5:4d:43:2e:71:89:91:d6:7c:41:
         60:11:7c:0f:84:0e:74:82:cf:c2:af:4f:08:44:84:44:b6:c5:
         83:98:20:d4:c3:a1:9d:ff:8c:b6:b3:14:47:ba:12:39:4d:d6:
         50:c7:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:07:30 2025 by rpki-client