Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa
File:                     4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa (raw, json)
Hash identifier:          mVYxzKH9NPb1gU1LwwSvHFEGI1b/ErEc05drPuDXV3o=
Subject key identifier:   39:15:C6:76:99:92:1A:E5:A8:60:3C:C5:A0:7B:B2:B5:4E:68:38:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E8850AB3F1F364356D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        104.134.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e8:85:0a:b3:f1:f3:64:35:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=e80c3e57-6519-4275-925f-38d5d46818cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:24:e1:65:bb:e0:5f:b1:52:5d:a2:49:c6:
                    b6:53:d8:47:97:93:a2:29:eb:94:a6:90:44:76:d3:
                    e6:ac:a2:e9:db:1f:0f:17:81:73:82:d7:ed:ea:45:
                    9d:58:a2:8c:be:9e:f1:87:5a:70:28:f5:dc:f6:1e:
                    92:bd:8d:39:30:45:7e:0b:fc:1b:15:12:51:af:18:
                    79:72:74:00:6b:ef:21:10:92:4c:6c:8b:67:ad:fa:
                    45:a8:cb:16:35:8e:cb:8a:98:86:36:7f:75:4e:9e:
                    c8:20:66:42:e1:c7:8b:9d:83:93:ab:00:a9:72:03:
                    d8:1d:2c:64:3d:a7:5f:df:21:2d:06:6b:79:1f:4d:
                    8e:13:86:a2:65:23:c8:94:3f:a3:8c:d5:09:6d:87:
                    c2:e4:f6:38:32:6d:5d:c7:2e:f2:b8:12:bb:5a:cf:
                    c9:8f:38:f7:51:9a:09:71:d4:ed:ee:3f:66:dc:a6:
                    92:e1:c3:e3:16:96:c5:53:b4:97:27:80:e4:70:d4:
                    e1:77:50:d6:8a:6a:d9:6b:50:a8:26:e3:24:43:0b:
                    f2:c7:f7:a0:72:32:6b:f5:22:a3:c3:b7:20:91:9d:
                    39:10:f7:78:18:80:ee:9f:9f:e7:40:bc:29:f2:5f:
                    f7:85:ba:bf:40:d2:5d:35:26:13:d8:f5:a0:cc:c8:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:15:C6:76:99:92:1A:E5:A8:60:3C:C5:A0:7B:B2:B5:4E:68:38:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:72:a8:d4:f5:92:f5:81:c6:cf:8b:a3:fd:79:ae:f4:ea:fa:
         3e:fa:84:10:13:ab:c2:31:9c:5f:d0:1b:42:e5:39:d1:50:c8:
         b3:60:34:ba:d8:f8:c5:9b:05:d2:63:26:9a:1a:8c:7b:26:06:
         83:bd:f1:72:ab:d5:fd:83:32:2f:ef:88:55:68:77:08:af:98:
         45:bb:76:13:f3:14:ad:f2:e6:e7:b9:26:60:3e:fd:46:b3:43:
         f3:96:13:3a:fa:b5:85:9b:10:e7:ed:ff:61:68:03:3b:af:6e:
         d2:da:3e:17:f0:b0:a5:de:2d:56:17:1b:30:92:91:36:07:44:
         58:aa:79:0c:b1:85:0a:66:bf:bf:47:a1:db:73:9f:ea:64:3d:
         11:ca:41:0d:a3:db:51:b2:c4:23:bc:92:02:e6:f3:dd:da:82:
         36:62:13:12:24:ad:a3:8f:98:31:bf:4f:d7:32:fa:90:8e:b1:
         88:f2:f6:bb:50:4a:eb:61:7a:6d:2d:10:47:5b:90:a3:2b:08:
         0d:86:1c:48:fd:21:84:61:7e:41:49:e1:af:88:09:e9:40:c6:
         28:53:35:79:9c:4f:bd:6f:d7:c6:4a:09:d2:df:31:ec:45:0f:
         d5:61:ab:62:c7:0e:5d:b4:4f:eb:6c:69:45:e8:8d:08:79:2a:
         9d:d2:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:34:31 2025 by rpki-client