Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa
File:                     2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa (raw, json)
Hash identifier:          oC/Bw9WGMIbR4QejfubJb5OkLrP8GZUkCwVz1NCGfLU=
Subject key identifier:   E2:24:BE:2D:15:CA:21:53:B4:7E:8E:D7:8F:D5:EC:6C:78:20:2C:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C204ADFF8BCF51661CC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.18.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c2:04:ad:ff:8b:cf:51:66:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=6fcf9c88-8812-479a-b8ca-089396532aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:8d:b9:57:8c:65:dc:93:ee:4a:04:96:d3:
                    dc:bb:a1:e8:c2:34:cf:63:fe:87:d0:8a:e7:58:ae:
                    3b:ae:18:98:bf:46:71:ab:e4:21:61:4e:a4:88:21:
                    d5:8a:e6:21:50:0c:6c:07:9e:15:ff:13:1f:c1:25:
                    ef:39:8c:ec:3f:06:c2:79:d6:22:3d:a3:cc:54:4e:
                    12:53:c0:df:df:5d:7f:5c:1a:1f:0b:d2:09:b2:a5:
                    09:1b:b9:6f:0a:1b:8a:5a:de:c1:52:b7:83:2e:e7:
                    6d:7f:8c:4d:67:16:b4:ef:e9:9a:47:32:2a:2e:e7:
                    12:d3:bc:74:9c:81:4e:82:e8:ff:1e:6c:ac:89:a4:
                    b2:b3:5e:d9:77:72:19:5f:a8:b9:ee:25:c9:3d:42:
                    6c:d4:cb:5e:1d:fa:a3:06:ee:0c:f1:73:82:1e:37:
                    ab:32:53:df:20:24:f0:01:29:91:d6:ea:88:9d:b9:
                    48:fd:06:bf:b7:8b:61:d8:f4:0d:d0:35:b4:fa:d9:
                    dd:9b:76:9b:43:8b:0e:fd:2e:eb:82:4c:c9:67:a0:
                    4c:37:b2:61:2b:a0:dc:3a:44:90:21:dc:b2:4e:f1:
                    84:39:f5:5a:52:38:31:9e:c8:f3:55:80:84:3f:4e:
                    20:0c:89:07:e9:4a:8a:33:e6:60:3a:49:f5:ce:a0:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:BE:2D:15:CA:21:53:B4:7E:8E:D7:8F:D5:EC:6C:78:20:2C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c7e0b29-8648-31cc-9e50-ce972c2ab39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:a3:38:49:d3:63:2c:27:a0:0c:e7:b8:56:a2:2c:b6:f4:
         35:f8:c8:87:cf:d9:6c:b6:91:28:b0:05:af:69:44:36:ac:12:
         22:3a:b7:d3:bd:40:63:65:7f:13:c1:1e:26:45:e2:07:bf:20:
         92:57:07:bd:ed:16:e9:e6:cd:3f:0d:de:3b:82:ef:fd:01:04:
         b8:64:66:c0:b2:fd:af:32:02:2f:e6:88:3a:97:f7:db:d5:6f:
         46:ec:66:55:d2:0f:3c:d4:fc:5f:02:5e:9c:01:2e:e4:0d:d9:
         90:f9:ac:0a:5c:61:9b:36:51:9e:cc:6b:14:76:67:33:15:19:
         e8:c6:23:ae:c7:73:ef:ff:e4:41:68:80:61:6a:a1:27:ec:fc:
         11:30:48:f0:4a:1c:64:80:1a:ba:b4:5f:be:73:29:04:e4:fd:
         35:55:ff:65:9e:74:f1:f5:f7:e0:bb:95:fe:3f:55:63:a2:ad:
         b8:7c:af:a3:b6:49:1b:31:31:d4:94:ed:07:3f:6a:86:01:41:
         ae:29:17:31:6c:b4:67:e1:e9:30:44:e2:36:a5:c9:8d:54:c6:
         35:2b:53:5b:25:5c:f0:c6:43:b9:18:36:97:15:89:da:1e:84:
         50:d0:18:3d:e7:dc:ce:4c:d3:d6:96:0f:79:2b:6b:a9:4f:9c:
         89:8d:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:00 2025 by rpki-client