Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6010f897-b76a-3051-a5c0-4858772be57a.roa
File:                     6010f897-b76a-3051-a5c0-4858772be57a.roa (raw, json)
Hash identifier:          E7dC9X8c1Ym+YFb39/t8RvH7Bg0t/2NQvpn1gU5cMFo=
Subject key identifier:   B5:70:8B:CF:BF:7E:DD:9E:77:B3:D1:4C:94:24:11:6A:45:79:5C:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858490296F52604A758102497B580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6010f897-b76a-3051-a5c0-4858772be57a.roa
Signing time:             Wed 26 Feb 2025 11:09:36 +0000
ROA not before:           Wed 26 Feb 2025 11:09:36 +0000
ROA not after:            Tue 27 May 2025 10:09:36 +0000
asID:                     30036
IP address blocks:        104.201.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:96:f5:26:04:a7:58:10:24:97:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:09:36 2025 GMT
            Not After : May 27 10:09:36 2025 GMT
        Subject: CN=723d5e5e-6814-4b40-835a-376e91aad124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:89:4d:17:98:41:ea:31:37:11:f4:45:8f:
                    59:8d:bb:80:10:e5:c2:e1:79:e0:f5:f2:26:af:fe:
                    43:9b:ad:4a:1c:42:65:ea:ad:c0:56:33:0c:39:15:
                    34:6e:b1:de:c5:35:a4:1a:4c:06:2c:72:55:74:9b:
                    07:c9:25:44:ae:70:42:09:61:99:3f:ab:bc:88:1b:
                    24:b6:7b:4f:c4:25:c5:73:6f:2a:96:e1:33:23:ac:
                    e5:34:3a:d0:5f:08:e7:ec:9e:4c:be:12:8d:1b:83:
                    85:86:5c:1f:2f:fa:e5:57:5f:21:be:c0:d1:bc:ca:
                    28:fb:6c:13:19:7c:ff:49:0c:8c:ba:fd:da:88:b1:
                    3d:ef:0b:fc:7a:22:ce:0c:75:27:36:a3:99:2b:fe:
                    db:5f:7d:60:55:cb:1f:ae:df:1f:3f:d9:ce:bb:e7:
                    66:63:bf:a4:f9:e3:85:64:f9:69:1a:84:82:e4:8e:
                    b1:d0:66:62:4a:ce:9c:77:15:70:8c:c9:c8:cf:52:
                    36:bf:f6:35:31:61:53:75:0b:46:96:b6:46:71:33:
                    73:cb:27:5b:92:da:d6:37:8a:33:3f:5d:64:b8:62:
                    e7:9b:53:de:e5:a4:b5:2e:26:00:ba:bf:59:a0:15:
                    9b:49:f6:e2:d7:5f:1b:9e:9e:3a:47:cc:2a:7b:ba:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:8B:CF:BF:7E:DD:9E:77:B3:D1:4C:94:24:11:6A:45:79:5C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6010f897-b76a-3051-a5c0-4858772be57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:13:61:fa:63:0c:90:4b:b9:f7:7f:60:66:1e:01:6a:c6:63:
         a6:e0:a4:73:15:96:3f:53:cb:b8:a4:6b:74:65:79:f5:1d:50:
         57:0e:4c:73:03:f9:b7:86:b3:18:71:9b:1e:3c:4a:fb:c4:9a:
         32:95:7e:36:fa:45:91:47:49:e7:de:c0:11:5b:73:73:0a:27:
         92:4e:db:1c:e9:76:39:0a:46:9e:33:80:c8:db:ac:6b:e3:54:
         91:cb:03:a6:72:b9:23:65:29:88:a4:d5:58:25:83:3d:aa:73:
         f1:87:d7:15:22:f4:53:22:f5:f4:eb:a1:e5:52:25:eb:80:16:
         b4:d6:70:e5:7e:11:92:38:41:10:5e:fe:ba:fd:1a:60:c7:08:
         3b:39:81:b7:26:6d:6b:67:17:be:03:fb:1a:5b:f9:8e:a5:55:
         0a:2a:1f:3f:be:c2:dd:93:d6:1f:a8:10:a4:c5:f2:63:85:a5:
         44:8d:93:58:e2:12:47:58:d2:1e:21:c8:59:e2:5a:ee:30:58:
         50:c8:2a:47:f6:80:38:bf:d3:15:7b:6c:b9:ef:f1:82:24:8a:
         85:68:8e:c5:b8:ef:9d:05:29:be:71:5c:c5:11:34:43:b9:d3:
         64:66:c8:71:65:01:92:af:fd:d8:81:9a:5e:66:c9:bc:31:41:
         56:d9:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:51 2025 by rpki-client