Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/792febf9-3075-33da-aa95-d2e635e353cb.roa
File:                     792febf9-3075-33da-aa95-d2e635e353cb.roa (raw, json)
Hash identifier:          2x6l/cJs3E9RHrz/KupVAa7XKt4Z8IlYRJ5G9R8QblQ=
Subject key identifier:   C7:83:63:3C:16:74:4A:42:EB:26:56:82:8B:F9:44:37:BA:13:60:03
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBBCD2DDC2CA53E2AF4480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/792febf9-3075-33da-aa95-d2e635e353cb.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36383
IP address blocks:        104.134.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:bc:d2:dd:c2:ca:53:e2:af:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=4a2c8122-50ac-4ce6-a0aa-5d1fed1804bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:6e:69:bb:6e:08:b2:6f:d9:bf:6f:5f:b5:
                    7a:43:a4:b4:3e:fb:b4:5d:0d:7e:aa:28:1e:46:e5:
                    1e:b2:07:17:88:be:c8:75:5d:cd:85:ff:43:6d:68:
                    57:9d:d3:5b:af:ec:0f:b8:1d:6a:1d:9d:cd:f8:fd:
                    d2:e9:56:b6:a5:bd:5a:3b:1d:07:94:42:66:52:c5:
                    6b:63:ce:1d:6e:3a:fe:e0:86:6c:fc:81:ce:1f:c5:
                    e6:69:be:2b:df:70:24:e4:c9:ca:72:7b:ee:2c:1c:
                    5c:2a:31:ca:59:a2:30:c3:3f:c5:92:fa:ab:3f:6f:
                    47:30:53:5e:fd:54:93:22:5d:8e:c2:9d:e0:8c:22:
                    94:16:9b:fa:7e:16:0a:24:11:1f:a9:80:9f:f3:65:
                    b4:3c:35:be:47:88:c4:73:fe:9a:ab:fa:fe:e2:02:
                    b6:fa:aa:85:e5:1d:01:bc:b0:26:ac:c1:58:0a:45:
                    06:a6:9b:29:5a:5d:2d:15:d5:51:a5:af:18:d1:c9:
                    20:3f:5d:74:fe:40:1e:cd:19:a3:0b:91:5a:b7:16:
                    7d:d3:2e:47:20:8d:01:45:d3:d7:5c:41:f6:0d:54:
                    57:e3:0e:71:c0:7b:bc:d0:4d:5b:0c:b5:b3:c7:87:
                    a5:9f:c3:b4:4d:11:e1:61:7e:7e:7e:e0:2b:2c:57:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:63:3C:16:74:4A:42:EB:26:56:82:8B:F9:44:37:BA:13:60:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/792febf9-3075-33da-aa95-d2e635e353cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:36:2a:95:56:65:7f:49:8e:b0:55:01:9d:99:59:a4:51:d5:
         7f:61:93:92:b2:85:43:03:5e:f4:5e:3a:59:ad:93:a5:53:d9:
         1a:00:10:ad:f5:b4:ce:e1:b2:28:e4:4c:fc:02:04:4b:14:7c:
         39:21:ce:a5:9f:36:93:58:a9:01:a3:a4:c1:6b:1f:d1:99:f2:
         d4:df:13:30:f7:0c:ef:4b:af:85:8d:bc:a9:e0:c1:85:da:cf:
         87:a1:c6:6c:7e:5b:bc:d2:63:4c:f2:cc:f6:24:0b:59:f0:cf:
         29:82:6f:ef:55:4e:5e:1d:18:98:2b:63:40:0c:13:38:1b:de:
         b1:8f:79:32:0c:f9:ca:ab:c7:5b:b9:3f:63:6b:7c:03:9d:da:
         6e:1a:66:98:7b:94:41:b1:a5:f6:65:c3:17:31:25:1e:b3:bc:
         35:bc:0d:c0:03:36:58:b7:2f:76:a6:73:31:62:a5:7f:20:4e:
         4b:3a:68:03:14:46:36:c5:75:36:8b:d5:dd:bd:1a:b1:8b:08:
         e9:11:c9:90:3a:ca:3e:10:35:5f:78:76:e9:fb:42:85:d5:57:
         df:f9:f0:e7:2b:22:12:f1:8f:a1:5f:99:c0:69:51:ed:0b:16:
         21:dc:7e:6a:d3:35:c6:00:5f:b7:89:24:ad:9a:e6:d6:97:1d:
         8f:f5:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:19 2025 by rpki-client