Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa
File:                     9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa (raw, json)
Hash identifier:          4Mng1QMG2h7wqoZ/rxDAcPMvxMJZFaH/b4sXkq6Vl8Y=
Subject key identifier:   10:A1:5B:B8:F1:53:F7:96:7A:ED:AE:F3:0E:1B:F8:DD:73:E7:E3:0B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848D705A2A6197C344B40784000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa
Signing time:             Mon 10 Feb 2025 20:37:02 +0000
ROA not before:           Mon 10 Feb 2025 20:37:02 +0000
ROA not after:            Sun 11 May 2025 19:37:02 +0000
asID:                     36383
IP address blocks:        104.135.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:05:a2:a6:19:7c:34:4b:40:78:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb 10 20:37:02 2025 GMT
            Not After : May 11 19:37:02 2025 GMT
        Subject: CN=eedff52a-d382-4b01-b612-34c656e3dbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:4c:b7:77:0c:bc:59:03:b4:93:8d:75:96:
                    44:b4:68:ec:3a:29:b4:20:2b:01:df:b7:94:f5:13:
                    a0:60:c9:59:fb:83:6a:02:65:17:db:b9:d7:c3:5b:
                    dd:35:26:7f:e5:41:38:4e:af:f8:9e:ea:f5:59:a7:
                    54:26:93:20:cf:e7:f2:a4:4f:86:b6:f9:ab:96:5c:
                    c5:75:81:66:64:89:0f:f4:04:56:f5:00:6b:8c:5f:
                    98:19:e3:ba:c4:5f:57:bb:a6:1e:c0:3f:a5:72:63:
                    22:d6:8c:70:c7:a8:30:77:53:f9:94:bd:7c:5c:bf:
                    4e:76:4f:85:46:9b:40:7a:a0:26:fa:da:fe:d0:5e:
                    a6:40:5e:02:63:ef:56:12:24:a7:1f:e4:53:4f:fa:
                    02:3b:de:66:d9:ca:ca:be:ee:cb:7d:a4:9c:78:74:
                    a0:21:13:42:58:44:ac:56:c2:c0:fa:98:d2:ec:bb:
                    ff:b1:9c:cb:be:b1:e1:23:ed:a5:d0:a8:2d:44:1d:
                    34:67:bf:ed:e4:16:5e:66:04:7b:2a:25:ce:a5:b6:
                    ed:00:e5:6f:91:77:53:e2:3c:00:e6:24:1f:e9:2c:
                    39:fc:30:7b:c5:89:07:93:ba:88:67:26:28:23:5e:
                    4f:c1:32:7f:ef:fb:0a:34:bc:05:c7:ad:bc:c8:9c:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:5B:B8:F1:53:F7:96:7A:ED:AE:F3:0E:1B:F8:DD:73:E7:E3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:cb:da:19:de:f3:1a:70:99:96:cc:15:83:6b:87:04:cd:
         f9:38:85:96:ca:1a:0d:fa:a7:06:26:eb:43:83:c5:14:b5:be:
         24:31:83:02:dd:ed:d2:2d:88:1b:66:25:6a:51:8e:8a:d0:78:
         d8:15:c5:be:52:57:68:01:2c:c4:b7:f4:37:3d:e8:0c:ea:bc:
         e9:2e:2a:92:1b:de:e6:f5:70:e1:cd:c0:81:8e:7a:6a:00:5a:
         ed:62:1a:45:f0:79:8d:bf:26:cc:eb:10:88:0f:82:b6:f3:73:
         1f:a9:cf:fd:ff:d3:42:4e:91:60:f5:43:4f:7b:1a:ae:25:9e:
         e4:65:94:e1:59:44:c6:3b:b9:07:12:aa:67:0e:c0:f7:16:b7:
         1b:dd:66:bf:df:e8:ba:44:36:c6:07:4b:aa:52:a3:3f:1f:15:
         85:e3:c6:54:c0:8b:06:51:cb:ac:08:24:91:08:15:58:6b:ca:
         e9:ec:aa:b5:ea:57:5c:86:c8:f6:91:5d:88:3f:66:3b:e3:be:
         38:c2:92:04:ec:93:83:c3:49:c1:eb:3c:a5:a3:b1:e7:fb:96:
         f0:dc:93:9b:0b:01:62:fa:6b:e6:57:90:db:3f:bd:f0:5f:92:
         cd:f3:5f:d9:e9:44:af:a3:76:3d:55:8f:c3:e1:24:fa:8b:80:
         f2:30:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:10 2025 by rpki-client