Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa
File:                     fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa (raw, json)
Hash identifier:          HxQTfl4yPoFdK1/qEnm/TstIfUByLwdQSqRiLjXSeSU=
Subject key identifier:   4D:AE:3A:6E:97:02:86:98:B5:01:D6:B0:35:4E:13:97:B5:08:2B:20
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E32CC39F0ED8AFD12C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e3:2c:c3:9f:0e:d8:af:d1:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=1769a017-86dd-4aee-958f-2c835810c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:46:13:12:ca:0f:77:07:b5:7a:95:9b:f5:
                    3e:99:1b:c5:6f:ed:ce:f9:ad:fa:ad:28:eb:81:ce:
                    83:c9:b8:85:ad:ce:6a:75:73:d6:e2:21:99:47:e0:
                    db:71:aa:5c:3e:67:5b:20:86:a4:be:a4:17:e8:88:
                    38:48:70:f3:fc:45:3b:3b:50:32:eb:b7:f1:cf:34:
                    ad:73:52:97:b0:f3:6f:1a:b0:ca:6a:8d:30:38:4b:
                    11:1b:11:cc:ff:01:2c:a3:a9:ca:cb:b6:91:a5:82:
                    d4:10:d0:ed:54:fa:9d:6a:38:44:85:3d:7d:ab:bf:
                    41:51:16:66:1e:7a:03:ea:db:23:93:0a:58:3e:78:
                    6f:95:33:63:7d:0c:c1:8d:a0:f6:25:c0:59:2d:0e:
                    ca:f6:b4:4e:f1:67:cd:79:bf:20:ce:32:8c:1d:da:
                    dd:ae:41:5c:e5:76:49:85:2b:76:f6:c2:a2:3d:b5:
                    3c:e6:30:32:53:c6:32:42:56:5b:76:b8:1c:2d:25:
                    ea:20:a4:a1:7f:ff:62:3f:7c:af:64:05:7c:41:9b:
                    a4:3e:5e:f4:1a:eb:4c:1b:79:13:37:e7:d1:46:7f:
                    05:87:34:d3:b1:6a:28:37:91:09:4e:34:87:50:77:
                    e4:54:d4:c5:b2:dc:dc:bb:08:b5:2a:92:ef:2c:6a:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:3A:6E:97:02:86:98:B5:01:D6:B0:35:4E:13:97:B5:08:2B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd4175ec-0c8b-3078-ade0-d5e78f6c8add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:8e:6e:33:70:64:19:54:10:0d:7d:46:f2:de:dd:bd:92:bb:
         b9:f1:47:ca:a8:8c:5c:21:08:f1:33:56:e2:bb:a7:19:db:62:
         4d:85:1d:7d:ab:6c:47:34:52:25:bc:cc:5a:62:90:fe:45:3b:
         86:80:83:8e:5a:43:c2:a8:11:e0:ee:91:d5:6e:15:5b:78:e5:
         f1:f8:74:16:07:e6:b1:1b:e6:bb:28:5e:1e:e2:00:73:39:0e:
         25:26:95:96:94:bc:25:76:2d:e8:d0:78:5b:84:dd:f6:a4:12:
         ac:6c:36:b4:d3:02:59:41:a9:7a:7a:43:9c:ba:72:ad:c4:0b:
         3b:26:f2:be:bc:36:76:eb:d7:2b:52:99:00:e2:91:18:36:a1:
         6e:d2:4a:6a:57:fa:b7:6a:e1:ef:a2:fe:34:f5:e7:ac:e8:20:
         db:26:5d:7f:c4:11:20:a8:9b:d8:0e:27:bd:e0:1d:19:8d:b4:
         d9:53:30:db:f3:60:18:cb:d7:6b:e7:a4:75:ef:a7:b3:57:4e:
         60:15:5b:52:7d:17:f7:39:62:e2:9f:ad:5d:34:8b:14:89:21:
         eb:52:bd:11:dd:0c:c7:97:f5:3e:96:60:8e:34:fb:e4:87:60:
         0c:1b:30:f3:e3:c1:63:90:29:b4:3d:d0:3e:b6:c7:e6:70:c3:
         1c:30:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:08 2025 by rpki-client