Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e2e7a7-80f2-3f3c-ae71-16c5e27cdbeb.roa
File:                     c8e2e7a7-80f2-3f3c-ae71-16c5e27cdbeb.roa (raw, json)
Hash identifier:          8rbRiTj6ERiU3pwrDUBAz952yZKsfnwwLxntsouP5rU=
Subject key identifier:   CB:00:82:F3:36:57:5C:CF:7C:09:58:79:B6:1B:A6:A1:CD:74:5A:A5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBB07A6C3BC2C4B959AB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e2e7a7-80f2-3f3c-ae71-16c5e27cdbeb.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b0:7a:6c:3b:c2:c4:b9:59:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=d202adfc-798d-4a6e-8d97-e53fb1cfe06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:c8:ef:e4:e7:a4:8e:b6:d4:6c:63:19:4d:
                    6c:63:f8:a5:6f:d9:d8:c5:08:d8:62:f4:50:aa:17:
                    84:b4:6c:ac:a0:6f:7d:7d:fb:e4:d8:8f:5e:f8:11:
                    f7:6c:47:5c:39:e6:11:91:dd:64:a3:35:3c:21:94:
                    f9:f0:41:fe:a5:f0:c0:ee:2f:15:da:52:d1:5a:4d:
                    b3:5c:72:c9:d6:75:62:de:f8:50:1c:73:c8:5b:4f:
                    8e:4f:08:23:a0:cc:8c:c8:87:bb:5c:9b:08:f7:72:
                    be:1a:1a:16:62:38:a3:50:67:31:22:de:ec:f9:1a:
                    ac:d8:46:9e:82:76:dc:10:eb:31:5c:21:d0:d0:fb:
                    df:d9:f4:df:84:29:e1:37:e3:ac:48:64:8f:f0:6e:
                    ff:86:5e:0b:16:ca:0f:99:41:5c:45:c4:e1:7c:89:
                    cd:c4:c0:96:29:f2:4e:df:e2:88:19:28:63:53:b2:
                    75:9a:1d:ce:4f:a8:b0:a3:e8:db:08:83:e2:0c:ec:
                    32:8f:e6:42:a4:b0:b3:24:99:67:35:be:d0:fa:de:
                    88:3e:57:78:b0:fb:95:bb:5d:e0:c5:8f:c7:6c:6f:
                    39:b2:2a:3e:43:3d:bc:50:ad:eb:a2:c0:d4:80:7a:
                    71:c3:cb:d9:89:cd:0f:10:6c:df:d5:50:7a:d3:10:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:82:F3:36:57:5C:CF:7C:09:58:79:B6:1B:A6:A1:CD:74:5A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e2e7a7-80f2-3f3c-ae71-16c5e27cdbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:7f:30:62:18:aa:a9:42:45:ce:f4:6d:35:05:5c:72:ea:05:
         bf:79:97:0a:72:88:25:17:4b:aa:7c:ef:06:e3:d8:40:dd:dc:
         a5:fb:c1:68:b6:b1:a6:d4:eb:35:14:d3:9d:bd:8a:95:cf:9d:
         61:5d:50:ed:b3:14:ea:c1:0d:06:fb:e3:87:c2:bb:a9:03:11:
         b7:8e:91:c9:26:c0:3c:d7:8c:cd:51:ba:69:3d:4b:0d:ab:57:
         68:44:45:18:eb:74:e8:c7:a2:36:64:d2:31:a7:3d:54:c2:bd:
         2f:de:86:03:1f:1e:de:45:7a:47:43:36:6e:78:d5:18:07:25:
         10:d8:63:9b:c4:3a:88:6e:ac:af:ce:62:40:d6:8e:23:5e:bb:
         02:14:c6:df:bf:7c:7c:29:60:60:0a:7e:89:ec:55:86:36:4f:
         08:10:00:b6:43:3e:2a:09:a0:43:62:17:75:bc:05:41:ff:09:
         03:dc:35:7c:10:da:3b:43:59:70:f6:46:eb:8b:62:d5:9d:8a:
         9b:2e:b9:65:d6:a6:a8:c4:da:b0:67:86:f0:22:db:47:17:5a:
         b8:ac:1c:7e:ca:1c:69:da:f0:3d:17:b6:3f:22:22:58:40:da:
         bf:e0:a1:5f:98:88:35:89:8d:be:6c:08:59:ac:43:fd:90:1c:
         eb:a4:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:29:31 2025 by rpki-client