Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e064806a-cc0b-3bdb-96b9-573ca4dbc16c.roa
File:                     e064806a-cc0b-3bdb-96b9-573ca4dbc16c.roa (raw, json)
Hash identifier:          mZsTw1Rv+rt2OliHhox+Fr6QSzN2ngNf1+pGJUmZNzg=
Subject key identifier:   A6:5D:54:17:38:7A:34:79:2C:4B:A2:AE:3F:BA:51:BC:4C:B5:3B:F7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C6EB21202102DFF9AE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e064806a-cc0b-3bdb-96b9-573ca4dbc16c.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.24.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c6:eb:21:20:21:02:df:f9:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=0a794d54-9a6f-4732-9759-e663828768c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:26:1d:1b:7c:a2:0c:a7:bd:46:76:d6:ef:
                    5e:50:cb:19:18:38:9f:0d:d0:2e:e1:4b:50:d4:24:
                    3a:5f:f4:9c:cc:ca:7b:c5:67:f0:ae:c1:86:6a:d0:
                    a2:13:27:2b:25:8b:e9:0c:a9:64:19:76:a5:3c:2d:
                    27:fa:5b:16:d9:97:73:05:59:dc:98:6b:ad:c9:40:
                    de:43:c6:be:ba:a7:14:bc:64:99:ef:fa:2f:94:22:
                    06:60:01:4f:20:93:33:77:a7:28:01:6f:7b:ca:22:
                    cc:b1:9f:56:13:0f:51:07:77:da:73:ca:52:95:24:
                    38:09:04:2a:a1:dc:76:b2:1d:58:f4:c3:05:77:89:
                    33:b2:63:24:b7:77:e0:1a:d3:2f:37:31:88:a3:db:
                    5d:9b:9d:d4:48:c2:a9:6e:eb:25:a1:ef:a0:b3:72:
                    89:db:26:88:29:02:f6:c5:31:9a:78:b3:e5:a2:88:
                    8c:71:37:84:07:43:11:33:d5:de:7e:bd:96:9e:e1:
                    c9:fc:ce:0f:7e:f7:0d:36:9d:11:a8:c5:16:b1:73:
                    e6:44:16:4b:ac:b3:2b:c2:28:d9:e5:b4:74:b4:6a:
                    38:45:4d:bf:a2:e1:70:be:03:d4:e1:83:6c:18:b3:
                    0d:ed:24:b5:0d:51:d1:e0:c1:b0:90:d4:70:36:6c:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:54:17:38:7A:34:79:2C:4B:A2:AE:3F:BA:51:BC:4C:B5:3B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e064806a-cc0b-3bdb-96b9-573ca4dbc16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:5e:35:8f:ab:25:43:37:e4:65:62:9d:d6:0a:d8:92:d6:7d:
         bc:42:9e:7d:4f:2d:4b:65:6e:40:f8:fb:64:48:05:50:9c:09:
         3b:d5:4b:71:4a:cc:27:db:64:e6:fc:b1:19:65:90:fa:8e:f7:
         57:d2:af:34:9b:1a:7b:e5:64:6c:92:81:e2:53:f8:33:a7:68:
         0b:05:e4:15:69:c1:c1:75:ee:90:59:e6:e3:c2:a0:27:69:e4:
         bb:46:98:db:8b:3e:e0:7c:90:f4:da:4e:2a:e5:7a:f7:2e:84:
         f0:8b:c1:9f:97:75:14:61:57:00:49:2c:99:09:a8:8a:b9:31:
         50:ac:6c:4a:dd:62:86:71:b5:9c:4a:96:e6:04:d4:8f:ad:f2:
         c1:90:75:a0:10:f7:26:48:4a:0a:91:70:77:83:85:5c:42:33:
         56:fa:08:d1:c0:ca:25:cf:eb:12:99:66:53:e9:d0:e7:0b:8b:
         ad:f2:1c:8e:8d:38:eb:7d:8c:d6:90:ec:25:ec:fb:0a:85:ad:
         e3:86:ba:07:40:54:65:76:34:3d:09:5c:0e:b7:6b:d3:9c:30:
         2c:d2:d0:ca:af:0d:69:fc:c2:d8:62:fa:c9:81:75:6b:dd:4f:
         87:cb:ef:30:c3:e0:3a:4f:f6:77:f0:81:d2:73:4d:bf:7e:0c:
         45:49:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:47 2025 by rpki-client