Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          YkWiTmnLRzy78y1vkwUjUfDMFDL7UtNhZWljwRFGLCI=
Subject key identifier:   F6:BC:65:32:2F:4B:81:1F:3B:04:EE:1A:86:33:38:BC:62:D8:8D:12
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       51517981071644048222C796DE29EF4FA4C97CE6
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20383334.roa
Signing time:             Sun 23 Mar 2025 00:00:24 +0000
ROA not before:           Sat 22 Mar 2025 23:55:24 +0000
ROA not after:            Sun 22 Mar 2026 00:00:24 +0000
asID:                     834
IP address blocks:        104.254.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:51:79:81:07:16:44:04:82:22:c7:96:de:29:ef:4f:a4:c9:7c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Mar 22 23:55:24 2025 GMT
            Not After : Mar 22 00:00:24 2026 GMT
        Subject: CN=F6BC65322F4B811F3B04EE1A863338BC62D88D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:a0:31:9f:ed:9c:b0:74:7d:e1:ff:6e:8c:
                    7d:64:7a:00:1b:5a:3d:1d:81:f7:c4:62:6b:7a:ac:
                    40:c7:4e:b6:d0:50:1f:c3:79:5c:ba:f7:f1:d8:23:
                    2c:72:47:8b:9e:df:96:6e:e8:8a:f6:ab:96:4f:35:
                    2b:97:27:b8:b4:a5:82:22:a9:cb:01:0e:bf:77:b6:
                    2b:43:9d:f3:ad:d1:f1:15:19:14:8d:48:eb:a6:6d:
                    ae:64:c9:3b:09:d9:e3:2a:61:3a:b4:f4:55:af:3b:
                    7f:9a:ea:43:2f:81:f2:3b:96:9f:1e:83:9a:00:ce:
                    cd:f2:b8:d0:82:ec:23:c6:b8:9c:9c:ac:c5:8e:f6:
                    77:5e:1e:bc:95:e4:ef:d6:71:2a:c0:87:e1:42:da:
                    a4:ca:74:b7:6c:71:cd:08:c0:82:3e:30:f6:5a:b8:
                    18:38:52:52:81:3e:c1:2b:db:d5:a4:32:de:37:7f:
                    40:1b:44:28:f0:6e:5c:cd:92:3a:be:fa:ba:49:17:
                    df:85:9f:bd:07:55:1d:ca:7b:cc:06:4c:88:48:ec:
                    8b:a8:61:a2:c3:21:6c:cb:59:ca:96:c0:c3:22:21:
                    83:b5:28:9e:9d:13:80:40:d9:50:3c:8e:93:00:1e:
                    6c:86:28:b5:3f:16:2f:8c:b0:bb:ab:2d:cd:e6:2b:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:65:32:2F:4B:81:1F:3B:04:EE:1A:86:33:38:BC:62:D8:8D:12
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:77:e9:b1:97:52:6c:3b:e6:dc:a4:a1:69:c1:2d:57:d9:f0:
         7e:8a:dc:51:bc:d3:8e:11:3c:f9:34:8d:66:6b:cf:b9:37:2e:
         0b:55:2e:3b:4a:38:b8:bf:07:ee:93:27:d4:62:75:31:db:21:
         4a:7b:77:86:98:1e:ed:f1:03:0c:c2:6e:dc:27:51:82:24:c1:
         f9:40:b2:c2:ce:01:5f:f8:cf:71:d9:85:ab:38:66:57:8e:5f:
         a5:34:71:ef:0d:cc:f7:af:ba:2b:cb:4c:fa:19:12:51:b8:1d:
         0c:8d:c7:83:7a:5e:bd:a3:c2:2c:7a:a4:49:6b:82:5f:16:54:
         cc:7d:96:80:98:a1:65:e5:e3:3e:df:e7:0a:58:a9:80:66:b2:
         a9:e8:1d:84:bc:e1:f5:0f:7f:e4:27:f8:8d:c7:b8:99:2e:05:
         cd:cb:90:2e:27:a5:65:25:a9:e6:b7:f2:bb:27:e6:8e:3c:3c:
         79:cc:9b:f4:3e:8d:bb:05:a4:2f:ce:bc:44:30:eb:61:e8:a6:
         aa:0e:fa:28:83:e3:f1:15:4d:df:8a:5e:72:d2:6a:aa:90:3e:
         d3:68:33:67:26:e2:41:0d:19:b1:3d:3c:22:5b:59:f5:a7:0b:
         51:67:aa:78:98:da:0b:9b:4b:9a:36:0a:9f:5b:46:87:6a:12:
         d5:67:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:34 2025 by rpki-client