Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
File:                     752cc9bf-1f19-3b84-98be-45790d2ac109.roa (raw, json)
Hash identifier:          hxY9v8p0Gp4ttNhkML857UX2GW9u6O2xmOaYQgp+ARw=
Subject key identifier:   96:03:B6:1F:CF:81:A3:4F:21:95:CD:AC:53:90:22:51:BA:81:35:A0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F864A26C00C86AD18B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f8:64:a2:6c:00:c8:6a:d1:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=e4ec032f-e1df-4860-abaa-2ba515911e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:94:9b:23:53:26:0d:6d:22:32:64:ee:48:
                    ff:57:e0:2c:b9:be:73:8b:0b:9a:73:ad:dc:d7:24:
                    37:9e:da:f6:9e:ab:15:c6:2e:8f:7a:9c:f8:2d:84:
                    17:77:17:27:b0:d3:c0:65:fb:fc:60:d4:9d:d5:b1:
                    2c:2c:f1:89:5b:f4:8d:cb:fc:1f:ad:f0:6d:ad:70:
                    7f:a7:2f:99:f1:b6:47:7c:ad:ab:ee:33:86:79:de:
                    f1:bc:9a:6e:fc:ba:50:32:27:9f:55:02:26:63:ff:
                    ad:ef:ad:76:33:3b:e2:6e:4e:b2:4a:b7:4c:53:55:
                    65:46:38:19:b4:ac:93:d1:01:c8:27:0d:51:67:e9:
                    f1:44:cc:ab:32:14:4b:e0:5f:77:d8:9b:af:0c:ac:
                    54:ff:f0:26:88:e4:d2:ba:df:1e:54:f8:50:0b:e6:
                    4a:54:3b:66:7c:b5:be:79:57:0a:7b:d5:00:73:1c:
                    4c:2f:ac:d0:03:1d:c6:ea:78:23:4a:7a:ab:e8:fc:
                    ee:20:49:6d:0f:ca:d5:5e:3a:73:db:da:ea:be:73:
                    01:7b:03:a9:82:9a:4d:e0:13:9b:e1:b1:64:51:a3:
                    98:93:c6:d2:b9:fe:a7:4c:d9:e3:35:59:fb:9f:b9:
                    f7:33:fc:26:7a:09:08:d8:6a:82:f1:d6:55:4e:2c:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:03:B6:1F:CF:81:A3:4F:21:95:CD:AC:53:90:22:51:BA:81:35:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:44:dc:ee:72:8f:ea:73:ac:c5:98:cb:5b:d6:f1:4b:19:7b:
         22:3f:a9:fb:d0:c3:f8:d4:b8:49:3e:1c:65:00:a3:2e:5c:3e:
         0b:40:6b:5b:5b:17:ab:49:11:56:0b:a3:9e:72:52:07:08:79:
         74:fa:8a:f7:dc:0d:e8:83:e3:2d:2f:22:d3:1c:41:dc:4a:bd:
         1c:a9:34:0e:47:f4:f6:99:7b:cd:96:6a:94:9e:a6:01:0a:0b:
         6d:73:43:2c:3b:28:fa:bf:4c:a2:67:b9:5d:2b:5d:0c:ec:a8:
         79:95:38:f9:33:78:d7:f2:94:c8:c1:b9:ba:43:86:d3:41:ad:
         19:6a:f6:dd:58:4d:66:12:eb:8d:d6:42:1b:45:67:6f:6b:79:
         e0:85:44:7f:bd:43:d2:4e:76:c1:59:63:1c:7c:d3:eb:e7:68:
         99:a2:39:5d:89:ca:08:a2:4b:66:ee:50:68:4e:d3:53:03:9a:
         32:f7:c2:19:3e:8b:6b:e6:cf:08:a9:8e:da:eb:f2:4b:96:66:
         eb:4a:67:cd:93:44:b5:7f:e9:e0:67:01:3b:2d:50:37:d9:b2:
         a9:a8:14:64:f2:2a:b0:82:65:80:0e:2a:8b:31:ec:00:b9:ff:
         0b:17:0b:e0:9f:cd:77:62:99:66:e4:c4:e0:af:c4:f3:09:74:
         39:be:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:56 2025 by rpki-client