Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d9ac1d-c6b3-32d5-acb8-20ade82575a4.roa
File:                     70d9ac1d-c6b3-32d5-acb8-20ade82575a4.roa (raw, json)
Hash identifier:          53XbvNKrHP24sVICKTO+lnyhDhXAoQGqo7aFa2H4Z/U=
Subject key identifier:   92:77:79:D4:DC:0D:11:01:8A:F9:D3:EC:07:33:EB:D6:31:18:1D:01
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BFC116C9AB9880F053840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d9ac1d-c6b3-32d5-acb8-20ade82575a4.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        104.29.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:fc:11:6c:9a:b9:88:0f:05:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=88b347b9-9bf5-4294-948b-667807d24473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:46:3a:0d:f5:88:2b:21:53:56:00:2d:13:
                    6f:3c:53:f3:c5:c5:34:95:90:e3:92:79:25:bd:e5:
                    ab:5b:66:43:aa:ad:a3:e9:32:c0:08:ae:bc:d3:c1:
                    9f:d9:84:2b:74:7a:2f:83:2f:8e:db:c9:ce:c9:15:
                    85:3c:d2:25:6b:99:f5:11:1a:8c:cb:7e:ae:b4:0a:
                    b7:ac:f1:9f:35:cf:d7:ec:a3:5f:13:c9:4c:57:42:
                    fc:d0:63:f1:b8:c9:0a:16:20:c7:f2:06:c0:1d:46:
                    79:4e:40:ab:7e:51:45:34:c9:af:e6:72:e3:8e:31:
                    bf:2f:6c:1e:19:df:29:68:e4:68:9f:c0:b5:37:aa:
                    1e:05:05:06:26:4e:fd:18:22:ae:cf:6e:e9:76:24:
                    45:1b:3b:4e:90:bc:17:60:85:1e:31:dd:e6:6b:55:
                    d6:a6:40:3e:66:9f:ba:2f:a5:2e:26:36:9f:54:17:
                    11:1a:87:66:30:ed:7d:07:68:e4:a9:40:a3:a8:99:
                    c8:0d:d3:ea:68:f9:eb:43:47:14:7b:91:4a:6e:27:
                    82:fe:a2:4c:9b:25:b9:e8:3d:3c:24:8d:1f:13:fb:
                    43:83:20:0d:b0:a4:99:22:cc:9a:b1:72:70:aa:75:
                    78:2d:19:0a:5e:c4:43:52:68:b6:d9:a1:02:5e:2e:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:79:D4:DC:0D:11:01:8A:F9:D3:EC:07:33:EB:D6:31:18:1D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d9ac1d-c6b3-32d5-acb8-20ade82575a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:6e:8b:33:c7:7a:35:19:cd:ee:18:a1:0c:10:21:97:79:
         ae:d5:c4:1d:88:51:bc:1a:61:ec:93:ee:8f:1c:3b:09:7c:0c:
         50:a4:f1:52:23:6e:b1:64:f1:ee:d2:b9:3b:04:55:7b:f6:b6:
         69:bb:e5:1a:c5:fc:b3:10:0d:60:2a:ab:47:f7:75:02:fa:23:
         88:ca:0f:39:6a:51:c0:f4:fe:c9:e9:99:c0:3d:40:74:57:47:
         31:18:46:9b:62:dd:77:1a:1a:1b:0b:57:3a:08:6c:96:5e:bd:
         33:e7:50:00:43:97:36:a6:9f:c2:2c:df:b0:73:a5:0e:b5:37:
         83:ca:50:9d:18:ab:2c:81:c9:10:19:4a:d8:ce:bc:96:ea:0c:
         d0:08:39:f7:f2:d8:69:e2:6c:70:d5:05:28:9a:42:df:91:66:
         d4:07:b5:b7:8a:68:b6:7b:fc:46:b2:fa:c5:26:81:53:8e:95:
         9b:27:34:b0:5d:81:0b:bb:49:1f:ba:62:9a:f9:1f:71:10:b9:
         8a:47:a1:f9:72:b4:60:77:85:43:73:b7:6b:bf:cc:33:88:75:
         53:6f:68:6c:c4:bb:7d:e3:32:2b:e5:f4:bf:a9:5f:3b:30:72:
         b5:4d:dd:e9:b5:ae:c4:0e:3e:14:16:1a:45:71:ad:68:ab:96:
         ff:ae:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----