Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
File:                     3e575422-583a-3199-b11f-06ff93271a69.roa (raw, json)
Hash identifier:          rg4iNMcbaZ40ViOYEJYnaPozblM5GmNbvF8W//AXlko=
Subject key identifier:   A4:AF:51:9F:45:01:8F:C0:EB:00:3C:ED:70:B6:96:0C:36:2D:1A:1D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD97DCFA9525CD1A1DD20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d9:7d:cf:a9:52:5c:d1:a1:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=308ba93c-df0b-40e3-8d41-380bee69c2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:a4:01:02:d2:63:a8:65:e8:35:05:8e:4f:
                    e4:c9:8a:8d:12:da:a9:15:73:65:62:a1:77:21:af:
                    75:e9:5d:db:fb:1c:72:22:33:60:30:95:aa:ff:aa:
                    e7:eb:19:41:8d:e8:56:c6:7e:53:bd:70:37:02:c8:
                    ce:83:9d:db:4a:ff:7c:f4:fd:0a:b5:dc:c0:05:b8:
                    81:19:80:11:da:c0:ae:1d:1c:3b:16:58:62:93:51:
                    21:2c:5e:6f:22:d5:70:15:2c:0c:80:ae:cc:1a:13:
                    ee:19:c8:67:4f:8e:98:b9:b0:41:af:b4:5a:90:fc:
                    df:51:e2:01:90:a9:7e:8c:fc:2c:5e:bf:dd:d6:5f:
                    b7:ec:45:b4:62:2f:45:9d:2d:77:39:5b:fa:87:08:
                    b9:41:9e:29:45:e5:5e:23:89:93:33:be:78:a0:75:
                    79:56:82:94:b9:b0:42:90:76:ab:a9:85:65:bf:02:
                    cc:37:5b:73:33:6b:bc:3d:88:41:08:52:fe:54:65:
                    66:76:af:18:11:9a:0c:f7:3b:fc:2d:1d:d8:59:f9:
                    d8:fa:57:f9:4b:b0:ea:19:ef:cd:91:19:d6:f7:32:
                    57:a8:eb:5e:de:37:ed:9b:a3:95:7e:14:5d:5a:c3:
                    8c:6b:ba:72:37:9b:93:23:11:46:10:91:97:c9:86:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:51:9F:45:01:8F:C0:EB:00:3C:ED:70:B6:96:0C:36:2D:1A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:02:00:95:31:b2:df:03:e7:bd:8f:75:c1:0d:bf:2c:45:9b:
         0b:4c:a4:dc:ff:1c:b5:aa:d2:23:0e:6d:6c:29:28:4e:59:31:
         37:00:bb:6d:bd:bc:e7:a6:8e:c7:ec:c4:fa:6d:58:d2:51:27:
         ed:c1:60:9f:cb:f1:90:d2:9a:89:d9:a1:1e:4d:29:ab:b1:70:
         f9:db:f9:bd:32:6b:88:f6:69:9f:99:78:ed:70:69:86:4a:5d:
         75:ff:d9:c3:a9:7e:9a:df:af:27:f3:cf:ea:c5:f3:e6:83:36:
         53:dc:43:f1:f9:49:61:cf:1f:c9:fc:21:61:73:5d:dc:d7:b5:
         2c:ce:6b:f5:9c:ad:76:70:e9:7d:8b:40:21:a7:bd:90:31:0c:
         33:3a:d7:ac:22:dc:97:ae:02:d6:57:b7:9e:ce:3b:e4:f8:cc:
         e9:ee:f7:7f:83:a9:17:1f:64:72:9e:87:77:34:0e:0d:d7:93:
         2c:2d:38:ef:74:bc:45:07:7b:9c:59:3d:8b:f3:96:94:7a:f0:
         5d:c3:e4:1d:d9:34:69:54:59:48:fb:1a:59:35:49:05:cb:a9:
         64:92:53:2e:cd:83:76:c5:c3:d1:d6:22:9f:a1:73:d3:bb:f7:
         0e:63:a2:54:df:81:38:b6:2e:d2:e9:f4:f6:fa:28:28:75:70:
         63:04:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:46:51 2025 by rpki-client