Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623f3dfb-338a-35fb-a671-e4bb316f4275.roa
File:                     623f3dfb-338a-35fb-a671-e4bb316f4275.roa (raw, json)
Hash identifier:          Ft3uWQis94AtJCHfle6wdjA+pXfuqYPjgp2fpxinzeg=
Subject key identifier:   E7:39:C0:6C:52:6D:EB:18:1D:08:2E:07:22:47:2F:24:ED:C2:D5:23
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C00F8F265196AA3FA0880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623f3dfb-338a-35fb-a671-e4bb316f4275.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        104.30.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:00:f8:f2:65:19:6a:a3:fa:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=2fc24e41-cc73-4f4b-bd39-7ae5346f9658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:2a:69:e0:45:df:93:e1:06:11:81:ac:2f:
                    14:43:df:93:4a:be:16:27:a8:90:e8:71:af:5f:ce:
                    65:cd:dd:83:ec:9d:89:12:23:ef:36:f5:2c:1c:37:
                    dd:a7:15:52:74:1a:7f:c7:60:63:c2:48:56:fd:51:
                    b5:16:c6:09:87:76:56:be:2a:e3:6a:f1:7c:51:80:
                    a3:23:cc:15:c6:89:8e:02:86:a4:e6:e6:2f:85:d0:
                    ee:a4:b8:b5:3d:31:52:36:72:dc:8b:4b:4d:4d:63:
                    da:0b:eb:df:16:f4:9d:f7:cb:e6:f9:08:3f:28:4c:
                    e1:24:89:2e:94:db:3f:34:ef:5b:1e:a2:87:51:64:
                    4c:21:c1:1a:39:44:a1:36:71:92:4c:86:ed:9a:00:
                    ff:24:3c:9b:ec:fe:ec:94:02:ae:4a:4c:97:5c:b1:
                    aa:52:90:76:b9:85:2c:a9:fe:f0:99:82:76:a3:d5:
                    8f:4a:04:12:e5:27:fe:e9:6a:33:bd:d2:5b:5a:82:
                    46:ca:c2:32:77:c9:db:57:15:22:96:48:ab:1f:fb:
                    69:be:93:97:98:bf:d9:7d:c9:67:25:b1:83:c0:70:
                    b7:ca:ed:99:a1:c5:50:38:bc:72:cf:76:08:10:09:
                    ad:63:09:0f:a1:79:18:71:3d:bd:5f:a8:3d:9f:36:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:39:C0:6C:52:6D:EB:18:1D:08:2E:07:22:47:2F:24:ED:C2:D5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/623f3dfb-338a-35fb-a671-e4bb316f4275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.30.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:8b:53:ce:a7:fe:67:64:89:cd:a4:bd:b6:b5:85:00:d0:
         56:47:47:3d:83:50:9c:dc:7f:7e:bd:b7:48:e0:55:82:de:a8:
         3a:5e:5e:39:e3:cc:a7:ee:24:60:06:c7:c3:17:9e:0f:93:67:
         bc:85:74:1c:4f:1b:4b:73:15:db:9d:d9:00:9b:c3:a0:8a:6f:
         75:39:e3:e9:2d:56:27:34:fc:7a:cc:a6:e6:be:8f:36:ae:97:
         3e:71:6d:11:a2:3c:13:9e:6e:62:46:4e:f0:68:c4:93:a0:de:
         a4:4a:6f:0e:36:e3:56:7c:82:df:95:a1:ce:a3:96:11:40:84:
         ee:a0:e2:80:43:b5:a3:e4:1a:e7:c8:64:b3:4c:02:ff:8d:3a:
         4b:05:5c:a5:e7:8b:17:d5:06:49:6c:a6:0d:db:e3:c6:b0:4c:
         8e:e1:b4:3a:aa:c6:7b:f7:c7:9f:cf:f7:f9:af:8b:06:55:54:
         69:19:08:b3:fc:36:3c:64:eb:64:19:ce:d2:41:a0:8b:12:75:
         6e:cf:ca:ea:4c:af:b6:2f:e3:12:da:ca:ab:3f:fd:68:36:ee:
         f2:cd:77:20:1a:fe:f4:29:20:81:24:a6:4f:f0:22:60:d1:9b:
         34:12:37:66:17:03:f7:54:81:56:10:07:bc:40:c4:6c:74:15:
         c3:95:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:42 2025 by rpki-client