Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
File:                     5f27d521-7a00-308c-a254-7b4b123cddaf.roa (raw, json)
Hash identifier:          x6s0+5wgiZl9ypSmlnsKMWgDGQDh7lHHNsE5PuwuBiI=
Subject key identifier:   1C:F0:6B:3D:18:24:D1:DE:2F:99:96:A3:F4:19:B5:92:51:CE:06:22
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C328DE54364849E0FC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.19.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c3:28:de:54:36:48:49:e0:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=a7a0d1c5-193c-4b67-b4f8-1c9b5a217db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:74:ae:fb:c5:18:e6:e8:91:24:6b:83:e1:
                    a8:ea:0b:6d:2c:13:a9:f5:85:ea:81:a4:e7:09:a5:
                    bd:16:73:00:95:c5:4b:c3:a0:d4:a9:7c:42:cc:1f:
                    48:ad:96:bc:57:c6:52:c4:78:6d:a1:e9:5c:d9:f8:
                    f2:0d:54:a8:73:b2:15:f1:81:9f:a4:7e:68:8a:7a:
                    dc:b6:d2:77:4b:da:c6:59:fc:83:97:a4:54:6d:68:
                    39:01:5f:6d:e5:ca:9a:35:8b:27:ce:6c:e1:82:ad:
                    58:7a:ea:72:39:3f:2b:02:d9:7c:a4:5e:7e:69:9f:
                    74:65:85:7a:21:b6:ac:fd:b1:0f:6f:6b:d8:91:91:
                    60:75:5a:9d:8c:09:f0:75:cb:9f:20:65:ff:c3:3f:
                    79:8c:3d:34:28:0d:28:01:32:79:f4:1b:3d:a2:cf:
                    95:ba:eb:45:67:6d:fc:d9:f7:2f:00:05:f7:45:f1:
                    34:30:cf:93:0e:f9:06:46:51:9c:f9:d1:3b:cc:76:
                    57:b3:2a:2c:fc:17:8e:97:21:84:bd:e1:47:37:58:
                    eb:f6:08:5e:f8:19:6e:62:3e:b9:f8:4e:6f:f7:d3:
                    a7:57:fb:92:c2:d6:73:d7:c1:4d:45:e6:ea:69:5a:
                    52:3b:9f:78:8f:bc:2e:1b:d8:38:12:2c:25:53:7b:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:6B:3D:18:24:D1:DE:2F:99:96:A3:F4:19:B5:92:51:CE:06:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f27d521-7a00-308c-a254-7b4b123cddaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:df:41:28:de:0c:9a:39:ce:b9:4c:34:9f:23:e1:52:e6:
         fc:b0:9a:51:89:03:06:c9:00:b3:a6:e2:47:29:40:ef:40:7a:
         60:93:07:78:15:60:9a:16:91:27:fb:8a:d7:54:5a:6b:c7:1f:
         93:76:13:51:43:15:81:b1:02:e1:1b:99:1a:76:a5:9f:11:c2:
         88:82:02:ee:6b:51:e2:53:01:6e:76:7e:85:e2:2a:41:75:61:
         ec:36:41:cc:35:e0:d4:d5:d4:f8:8a:00:e3:14:22:83:70:04:
         35:e8:52:24:11:2b:af:1f:95:eb:36:ee:36:da:b6:ac:d7:a1:
         99:0c:58:8b:43:8e:32:d7:c3:ae:79:18:9f:88:e1:67:d9:ab:
         8a:ca:ac:86:71:04:91:3f:37:50:02:e9:e4:0c:83:ad:93:9d:
         dd:9d:95:b2:7c:6f:ac:e3:15:b0:8f:ff:3b:10:90:8f:85:a8:
         68:7a:64:1e:be:cc:bf:22:91:c9:e3:d1:6a:29:05:3b:95:2a:
         d9:cc:e6:15:00:0c:4b:5d:2f:60:07:1b:5e:d6:45:c5:8a:37:
         d1:66:fe:dc:9a:6c:07:c2:65:1e:c2:6b:43:14:89:34:65:06:
         b7:5c:59:b5:00:b1:72:f7:b5:78:11:74:33:f8:fb:16:f7:df:
         9c:d9:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:23 2025 by rpki-client