Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50c716bf-541c-3496-b606-60ef487279dd.roa
File:                     50c716bf-541c-3496-b606-60ef487279dd.roa (raw, json)
Hash identifier:          T30SxZTDv6FrEUKuCTcVITzatvejWpf1x5l0QEOmAGM=
Subject key identifier:   5F:EC:16:3C:D2:A3:6A:D3:93:F5:01:BF:4B:69:59:50:B8:51:55:A3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858493C092F21A323940946061228
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50c716bf-541c-3496-b606-60ef487279dd.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        104.250.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:2f:21:a3:23:94:09:46:06:12:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=f81c4b6f-f45b-4a53-bcc4-0f65656b92ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:0b:99:91:a8:61:85:34:17:76:39:6b:55:
                    47:cb:72:3a:0c:3b:04:0b:36:f8:db:88:04:92:ca:
                    56:73:13:25:a3:5b:73:44:fd:d2:61:37:a1:9b:7f:
                    db:a9:94:d9:81:1b:c2:ea:94:50:83:80:e0:79:a3:
                    58:cf:5a:58:02:c0:f2:1e:73:05:9e:1c:7e:47:e7:
                    05:f6:9e:dc:27:db:cf:a5:7a:8f:14:03:79:f1:d3:
                    9a:d9:57:ef:35:98:a0:a9:73:d0:8b:f4:0a:8b:a0:
                    b5:82:db:1f:75:e0:ab:54:24:f6:bf:df:b9:3c:57:
                    c8:4d:02:56:e8:0b:d0:ff:8e:88:d9:d9:81:1a:4f:
                    30:3b:5e:10:cb:e8:4a:64:d6:0b:0d:2b:26:16:49:
                    7b:11:20:2f:2d:a9:f6:54:94:fd:cd:af:89:9e:c9:
                    e5:fc:ad:ef:39:cd:02:8e:2f:56:1f:63:50:21:c1:
                    3e:de:2e:cd:f7:6e:c5:e5:d5:8e:b3:f0:56:32:3c:
                    06:f8:32:13:cd:31:7a:eb:e5:06:06:a5:09:7a:35:
                    2e:02:47:de:0c:12:c0:b9:78:8f:9a:b4:31:34:ec:
                    73:a5:de:77:64:ea:85:85:f4:f3:66:ff:fb:96:f8:
                    25:cb:af:89:bc:98:3c:0a:cc:2d:35:80:e8:fb:a9:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EC:16:3C:D2:A3:6A:D3:93:F5:01:BF:4B:69:59:50:B8:51:55:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50c716bf-541c-3496-b606-60ef487279dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1d:14:16:bd:02:ac:01:de:91:e4:85:3b:1c:09:e0:d2:c4:
         78:8a:b3:f7:5c:d8:bb:24:ff:6c:98:36:8e:d8:3e:ba:ac:d3:
         e8:c9:89:f3:53:a5:76:b3:b9:c9:a3:1d:71:a0:1e:cf:62:57:
         00:b4:c7:54:d5:ac:3d:61:78:92:76:be:8b:3d:47:ea:f6:8f:
         c0:60:2c:6b:33:cb:e3:29:5d:24:5b:75:19:bf:5e:df:d8:07:
         76:af:9d:1d:0d:0d:ea:c2:fa:d8:c5:a8:76:ba:df:bf:8c:d9:
         ad:b2:79:37:48:75:00:b8:13:f1:20:66:0e:7b:e1:60:aa:43:
         ca:ee:6c:2f:04:7d:34:3d:67:ce:95:e3:3e:bc:0e:46:12:0d:
         86:93:30:7a:8f:c8:ac:54:ce:4a:bd:a6:d1:33:e1:bf:53:b1:
         08:22:89:31:9a:47:32:02:53:4c:81:9e:52:05:86:a1:2c:64:
         0c:2a:0f:d0:de:74:b2:3a:d5:33:6e:ce:cc:95:7b:7a:3c:41:
         ee:cb:bf:85:40:f0:44:54:d8:8f:d0:2c:22:88:76:f7:ce:14:
         04:3b:4e:d6:75:d2:6c:a3:cf:81:14:94:5f:46:28:79:02:51:
         44:76:d9:03:37:54:89:ad:d6:06:85:e3:2e:36:d1:4d:d0:d8:
         f3:14:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:02 2025 by rpki-client