Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18761e4c-b96f-315d-9095-bd00c94195bb.roa
File:                     18761e4c-b96f-315d-9095-bd00c94195bb.roa (raw, json)
Hash identifier:          PRpG6NjsF14r6TjfmeRIHHwJYlCdyGGI+VkPDaEPAu4=
Subject key identifier:   AA:07:55:E7:5E:CF:77:49:EF:84:7D:14:46:58:52:2D:9F:5D:A4:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584957F410D1E4D8A59B3133EB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18761e4c-b96f-315d-9095-bd00c94195bb.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     395973
IP address blocks:        104.134.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:10:d1:e4:d8:a5:9b:31:33:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=4271b2b3-7f2b-4107-91da-5df18bf8a677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:8a:b5:0e:02:33:a7:ab:53:54:05:5e:f8:
                    da:27:95:37:b4:c4:b9:4b:08:29:de:f4:ea:bd:4f:
                    0c:ee:7f:9b:70:89:7e:ab:c7:79:30:7e:48:99:0d:
                    09:35:50:35:0b:b4:bd:d5:12:c2:d6:cd:a1:fa:b3:
                    1f:c8:d1:e9:24:bb:d1:ca:85:02:83:05:f0:6b:bc:
                    91:f1:3c:c0:37:69:be:c4:ec:24:3a:58:03:75:7c:
                    05:d6:87:97:45:82:fc:8e:80:0a:4a:95:d5:c7:47:
                    9c:99:11:52:b2:0d:36:99:08:38:c1:82:d2:c4:a4:
                    00:61:b1:bc:cd:df:d4:06:d4:6e:02:0e:ef:80:14:
                    13:81:4b:96:7b:22:44:ae:31:69:f1:6e:5b:e3:26:
                    23:04:3f:07:8d:50:21:00:c1:cf:45:35:4c:0d:f6:
                    8e:a6:8c:1a:1a:cc:ab:59:2c:ec:7f:23:22:a0:f3:
                    13:f4:0c:fd:5a:15:a2:c6:11:90:d5:56:67:85:15:
                    b9:23:c6:8a:13:f0:c2:61:4f:51:a5:45:26:fa:b2:
                    a6:4f:2d:50:7b:8f:e5:3c:23:3c:42:be:e2:ec:b1:
                    85:e2:50:f0:3d:6f:28:f0:57:48:44:c2:dc:a0:54:
                    d6:f9:d4:f7:2d:ea:7f:bf:ed:22:77:26:e6:a7:be:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:07:55:E7:5E:CF:77:49:EF:84:7D:14:46:58:52:2D:9F:5D:A4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18761e4c-b96f-315d-9095-bd00c94195bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:33:f1:4f:dc:71:0c:ec:cb:f1:88:e3:39:8e:fa:34:43:
         e8:49:42:de:d0:cf:e5:66:b1:cb:5f:ed:9d:0b:13:07:a0:d6:
         ed:86:79:47:61:a9:93:83:02:3d:56:4b:bb:04:21:ac:74:ed:
         7f:28:8a:35:3b:eb:25:67:e5:69:a3:76:29:1f:5e:c7:b7:ab:
         8f:7b:18:6e:07:8b:3c:f1:22:ad:08:f7:f4:49:a6:9b:10:2e:
         01:29:3b:f3:56:51:8c:e1:ca:4e:bd:4e:53:8d:34:a9:ec:76:
         78:d5:18:26:6c:cc:20:70:bf:e2:29:7e:50:33:fa:02:39:80:
         0a:27:8f:a9:b7:e7:49:63:09:22:30:34:f6:0c:d5:a3:06:7d:
         3c:31:40:ca:34:5f:bc:ad:70:61:ae:c2:35:29:0c:bc:f3:05:
         fb:0a:57:cd:8e:6f:fe:4d:91:84:0e:a6:f6:cf:41:8b:d0:29:
         bf:46:db:0e:1d:8e:a4:38:6a:57:54:99:a0:86:18:50:a5:a0:
         71:e8:42:bf:6f:f1:f3:0d:64:6e:5d:03:32:a2:13:3f:ad:53:
         28:da:ef:13:f2:27:c5:cf:f3:e6:c1:33:0b:84:9b:45:82:41:
         22:8b:3c:2f:9c:5b:26:2b:ab:bb:ad:3b:53:ab:4c:12:fa:93:
         92:dc:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:17 2025 by rpki-client