Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3460352f-2764-3320-a9f9-0426c4bdd1d7.roa
File:                     3460352f-2764-3320-a9f9-0426c4bdd1d7.roa (raw, json)
Hash identifier:          NGH+sGDZiFZsPfO3ko2AhNxAj7KxKdRUHzJT56Wrm/I=
Subject key identifier:   05:73:9F:34:5B:6B:D7:44:FE:15:D9:83:D9:16:DA:A4:9D:94:35:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C089C15C8B63829A2900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3460352f-2764-3320-a9f9-0426c4bdd1d7.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.18.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c0:89:c1:5c:8b:63:82:9a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=dd3ee972-882c-4ba1-ad31-4e3ff0020a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:a0:57:fd:08:2e:cb:3d:e9:58:df:20:22:
                    6b:aa:fe:c6:f1:10:97:f5:47:77:b3:cb:f3:c1:f9:
                    6e:aa:9b:73:55:2c:b5:0a:0e:e7:51:30:3b:a7:67:
                    17:a2:ec:64:52:e0:72:4d:8e:34:a3:17:f1:b8:ac:
                    7b:21:56:cb:4e:81:91:0d:02:fb:e5:22:ac:1a:83:
                    a2:44:6a:de:8b:8c:eb:92:68:7e:a2:e5:67:95:1e:
                    47:9b:38:09:98:fd:0e:a1:84:98:33:b6:2e:a7:9e:
                    09:39:45:29:25:45:94:2c:bf:0f:39:07:98:52:73:
                    82:dd:6c:e9:05:07:df:de:61:df:83:e6:49:82:8d:
                    4f:47:97:c4:90:3c:38:61:ec:ae:0e:38:40:53:be:
                    ea:3b:4e:b2:b4:5a:cc:60:72:34:c3:8d:44:b8:74:
                    29:46:c4:ca:b1:c5:a8:b8:75:c4:19:4e:c7:8d:f4:
                    ba:f3:3c:91:30:21:40:f2:5f:aa:73:10:84:2a:a0:
                    e4:70:67:a2:02:5a:f7:15:22:f5:d0:e4:2a:8c:af:
                    78:26:d9:06:d8:35:4b:b8:0a:aa:2a:91:d8:60:45:
                    16:9c:23:fe:e0:7f:c0:d0:e8:6d:db:83:34:10:40:
                    f9:f6:4d:b0:a3:48:48:40:d9:e5:a9:4d:29:43:0a:
                    46:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:9F:34:5B:6B:D7:44:FE:15:D9:83:D9:16:DA:A4:9D:94:35:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3460352f-2764-3320-a9f9-0426c4bdd1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:cc:9a:9c:2f:aa:5a:9c:a5:b6:82:9b:6a:93:8d:3c:9b:
         c8:62:7c:4d:24:f2:e2:c4:43:54:fa:17:b3:0f:64:61:a0:cf:
         51:fe:9d:9a:99:85:33:39:01:1d:be:8f:ed:f6:bb:b6:a2:64:
         3f:b8:b3:2d:ef:bf:05:65:09:d5:0c:94:7d:3a:74:fa:08:4c:
         66:bf:0f:f5:0b:32:3c:08:5b:d9:b2:6f:45:53:27:e9:e9:d3:
         84:0a:06:de:c9:04:da:30:87:8f:d9:00:d5:55:fb:a7:01:cb:
         ba:f2:f9:30:68:b4:46:1b:5e:1d:4e:7f:82:af:7e:f2:93:98:
         9b:93:df:eb:c2:05:a7:a3:51:5a:98:ed:1b:b8:df:c4:63:57:
         74:11:a9:b4:db:64:9f:80:e1:56:7d:59:8b:30:62:51:ab:9a:
         a3:42:8c:b7:9f:35:64:bc:5c:a9:f4:6b:8b:a2:ec:83:7e:d6:
         ce:bd:2a:92:6c:7a:c3:f0:a0:4e:7b:67:1c:24:21:df:93:09:
         8d:0f:08:73:9e:8c:fc:85:93:c5:63:df:a9:c0:65:8b:2a:f3:
         83:e1:dd:c0:60:67:4d:98:ea:d2:07:79:d0:78:0a:8f:4c:61:
         5e:96:51:a3:d3:75:06:b4:3b:c4:ce:1b:80:2a:ac:81:aa:91:
         56:be:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:55 2025 by rpki-client