Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b86073e-60e9-394e-a5c1-f33d1985047a.roa
File:                     7b86073e-60e9-394e-a5c1-f33d1985047a.roa (raw, json)
Hash identifier:          UZkV2vvvGiLwg8WNzfb1vWsJmxmyjQsC/Mzu8VC9ZOM=
Subject key identifier:   4E:C9:30:DC:49:DE:91:C9:3A:8E:CF:41:E4:8C:8C:6D:43:F0:17:C4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848D7061FDFCE9A63FCB0E0B600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b86073e-60e9-394e-a5c1-f33d1985047a.roa
Signing time:             Mon 10 Feb 2025 20:38:01 +0000
ROA not before:           Mon 10 Feb 2025 20:38:01 +0000
ROA not after:            Sun 11 May 2025 19:38:01 +0000
asID:                     36411
IP address blocks:        104.135.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:06:1f:df:ce:9a:63:fc:b0:e0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb 10 20:38:01 2025 GMT
            Not After : May 11 19:38:01 2025 GMT
        Subject: CN=94fef758-f491-4ebe-885b-01a2418e9e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:90:1f:ed:68:6d:b7:7e:88:3f:a1:b0:61:
                    7f:28:6c:cd:77:ac:84:31:51:94:d3:42:dc:18:35:
                    9e:1b:be:b8:b8:54:2b:a3:0e:e8:a5:66:36:ef:b8:
                    cf:8e:20:7d:39:60:f4:93:51:ff:b2:77:6e:94:df:
                    63:c7:0d:83:47:c7:83:1a:98:19:03:a7:d0:f9:44:
                    bc:11:1f:fd:4b:df:a6:6c:2b:6c:e9:b0:6e:4d:c9:
                    50:16:ea:36:b1:b5:9f:3c:17:98:0e:db:28:8c:33:
                    ac:ce:b4:a4:ce:db:30:49:8e:f8:1c:96:c6:d1:e5:
                    c9:9b:95:f3:61:e8:65:4e:e5:23:b2:10:04:cf:bd:
                    af:2f:d5:d8:f0:74:6c:0e:d6:e2:bb:97:a6:fa:0f:
                    68:64:74:ed:05:e2:a0:84:64:03:ec:43:dd:6e:37:
                    2f:fd:35:80:2c:24:25:51:7b:92:1f:e4:a2:94:2c:
                    2c:c3:f2:43:85:10:8c:51:e3:be:55:7b:7d:02:75:
                    98:fe:59:4f:3a:ee:48:0e:29:17:e5:07:75:47:e7:
                    24:4a:6e:d5:c9:e4:8b:96:9b:50:f4:32:37:01:30:
                    e0:2e:69:17:a3:82:91:5d:22:8f:e9:33:d5:e0:07:
                    39:17:c1:c2:de:fd:a5:74:f3:8b:1f:7d:b1:d0:68:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:30:DC:49:DE:91:C9:3A:8E:CF:41:E4:8C:8C:6D:43:F0:17:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b86073e-60e9-394e-a5c1-f33d1985047a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:84:40:e2:d0:e6:f2:0b:df:d7:62:52:08:f5:aa:36:95:e2:
         2c:65:a5:e1:a2:72:64:ee:85:bd:4d:0f:be:7a:fc:7a:ea:c4:
         a2:98:71:46:df:28:28:7e:9c:59:4b:e3:c8:88:16:62:5e:6f:
         ef:cb:7f:08:e1:97:5d:20:88:3c:cd:60:bd:3c:30:e0:12:39:
         44:e3:88:60:32:91:a7:38:4a:52:84:bf:c1:7c:ed:f5:c9:74:
         39:c1:0c:4c:17:c9:9d:93:82:74:c7:62:6f:c4:3f:fc:92:a8:
         11:6b:5c:ef:ca:b9:f1:b3:54:02:49:bf:13:b3:49:96:a6:69:
         09:2d:1c:e3:29:8e:86:a2:45:76:1d:a4:04:ae:43:55:87:e5:
         c8:57:c0:91:6d:33:37:0b:a0:df:15:16:9a:d5:0c:c5:f2:ba:
         71:b2:a8:76:01:14:64:55:b7:8f:03:f4:eb:56:2a:bd:a4:79:
         f2:c3:c8:77:41:69:7e:3a:36:73:95:53:6d:f6:33:0b:b7:ee:
         cd:d9:e8:2e:39:47:0e:1d:9d:25:f7:bd:8e:e1:74:5b:e0:f8:
         52:dc:4d:9a:b4:ad:44:bb:9b:35:bb:98:23:8d:ef:49:86:87:
         e5:b2:de:11:11:86:f6:6a:13:7d:09:7c:92:2d:03:98:a1:10:
         78:82:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:59 2025 by rpki-client