Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa
File:                     31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa (raw, json)
Hash identifier:          v/PEFNnSDOXbsv8ZF71CUiyIpdorYdmyYDfr0MzL1EQ=
Subject key identifier:   CF:6A:F0:C8:29:10:A7:C0:49:E1:DF:4C:0F:66:D9:31:E6:8F:A3:85
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858488A58563BFD910312F50A7038
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa
Signing time:             Tue 14 Jan 2025 09:26:26 +0000
ROA not before:           Tue 14 Jan 2025 09:26:26 +0000
ROA not after:            Mon 14 Apr 2025 08:26:26 +0000
asID:                     13335
IP address blocks:        104.23.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:58:56:3b:fd:91:03:12:f5:0a:70:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 14 09:26:26 2025 GMT
            Not After : Apr 14 08:26:26 2025 GMT
        Subject: CN=ead5f92a-f498-47cb-8c2f-173531cb2121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ce:36:63:17:50:61:29:d6:f7:4f:23:25:b3:
                    a2:ce:55:ee:57:4e:1c:e1:c6:97:4a:79:25:4b:6d:
                    e2:e5:4f:0c:7d:94:9b:31:35:f6:71:2c:85:4e:c7:
                    95:dd:56:16:21:fe:76:1a:18:b4:fd:41:e5:3e:ce:
                    c5:0f:0f:db:66:a9:d6:5e:20:38:b8:60:cc:44:1e:
                    d2:78:2e:98:8d:bd:56:e6:31:91:6e:0d:a4:eb:f7:
                    2a:3a:23:8a:18:6b:b7:f6:3f:18:ab:d5:e8:76:f5:
                    71:12:1d:ca:91:36:c7:bd:a0:ca:c4:84:8d:c2:4a:
                    34:c5:73:b5:ce:99:95:ea:79:ab:b8:b5:bb:ec:2d:
                    cb:aa:e3:2a:6c:fb:dc:6e:b7:4f:d6:4f:09:bd:87:
                    c9:0f:46:5f:ab:ef:9b:9e:52:a0:5e:f2:5b:f2:97:
                    82:7e:49:bf:f0:a1:ec:62:b0:12:2f:81:91:44:d1:
                    11:9d:15:4a:19:03:01:30:d0:7d:d3:35:2e:98:44:
                    b3:a7:06:dd:a0:1c:8a:77:23:0f:b4:a5:7a:ee:28:
                    5b:da:3f:9e:17:b1:fd:27:e3:3b:86:39:e6:2a:b4:
                    45:c7:33:10:59:7f:1f:1d:30:0c:4d:97:77:c1:a9:
                    f1:2c:1b:73:1d:31:6c:49:03:23:cb:1c:48:d1:be:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:F0:C8:29:10:A7:C0:49:E1:DF:4C:0F:66:D9:31:E6:8F:A3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31ccf2d1-aca7-3733-9c71-89225ca6d35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:a3:a4:6b:08:93:b8:83:48:f1:53:ee:25:d8:3d:ca:c4:
         65:2d:63:38:41:c5:65:73:fb:58:13:04:aa:1f:b2:0f:61:8b:
         e0:4c:f3:5b:59:62:70:d9:a3:6d:f3:3b:47:79:c5:3f:c3:40:
         5b:c5:07:a1:40:8a:05:21:c7:9b:59:b0:0f:2b:15:0a:cb:f0:
         fd:d9:ea:3d:33:91:18:bc:1f:35:a9:50:e8:93:87:46:9b:93:
         e1:9c:72:a5:16:5d:d8:8e:01:bf:dc:18:18:ef:81:6d:9e:4f:
         54:be:0d:98:51:1a:32:0e:a7:38:ef:8f:0b:d5:a2:95:33:eb:
         ff:99:87:08:e7:5a:9a:c4:f3:89:90:98:aa:04:08:5a:5e:39:
         1d:ba:84:da:37:98:6b:cb:59:c2:fa:74:de:36:ea:de:59:e3:
         1a:98:1a:51:e7:4d:7d:7c:21:c3:3c:28:ba:60:b9:6d:e3:8f:
         01:9a:95:df:fa:08:86:57:a2:55:94:6f:00:f1:3d:1d:5f:35:
         72:54:f5:7b:f5:2b:9d:44:47:85:61:c8:3c:ce:a3:13:39:15:
         b6:78:38:86:fe:14:c0:71:d8:f2:d3:56:a5:ac:5d:bb:7e:cd:
         63:bb:5c:36:4a:75:2b:c7:d9:a0:ad:48:5a:97:2d:89:f6:26:
         10:da:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:48:32 2025 by rpki-client