Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa
File:                     b510b231-5c86-397c-b89a-69e44e4abe9c.roa (raw, json)
Hash identifier:          XowB72EBfgVtFyZDjI8znnb5OzqhW3SxGwyNRIBsmdk=
Subject key identifier:   AA:E0:DE:AD:F8:45:B6:92:3F:4A:6A:6B:1C:8D:0C:89:AC:92:32:F5
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285848C6E62CEFA7753F89A8C79280
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     21743
IP address blocks:        104.247.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2c:ef:a7:75:3f:89:a8:c7:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=4d148bea-c8f0-4b77-93b3-87dc95976560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:9f:70:6f:33:0b:5a:e1:52:cb:9f:c6:7e:
                    df:12:6c:10:76:b7:ed:f1:be:76:b5:63:b6:ae:b4:
                    e6:36:af:24:32:74:3c:70:c2:3e:71:42:64:ba:1f:
                    7b:dc:7f:14:bd:fc:c0:af:b1:a7:be:3f:9d:88:43:
                    7b:da:a3:ac:6b:33:4f:3f:65:87:7a:31:e4:14:eb:
                    6b:df:74:7f:f1:d7:e7:76:96:29:59:f8:52:04:da:
                    33:72:25:97:97:f2:d4:40:17:53:2c:91:5e:95:c0:
                    8d:71:7d:10:cf:e2:4f:70:bf:66:3a:47:5e:69:88:
                    83:54:6a:22:23:f5:80:7b:2f:c6:88:6a:5f:ca:ba:
                    48:0d:05:ae:7d:52:70:75:da:c5:10:f7:df:74:f9:
                    4a:e0:2a:8f:92:72:5b:e3:28:ec:ee:37:45:01:9a:
                    7e:7c:5e:15:98:a4:94:75:16:8b:69:b9:81:09:98:
                    d5:d5:04:7f:b7:17:a7:94:14:88:4b:d8:c0:69:fc:
                    88:ff:35:98:32:98:dc:44:86:78:62:78:b2:a0:7c:
                    dc:f6:35:09:8d:dd:cb:a6:27:34:a2:97:6f:54:d7:
                    58:7d:7d:96:5c:f7:90:9e:cc:e2:9a:b5:74:30:2c:
                    a5:5c:83:88:42:f8:22:f6:6f:11:6d:f8:ba:95:96:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:DE:AD:F8:45:B6:92:3F:4A:6A:6B:1C:8D:0C:89:AC:92:32:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:c7:2d:09:2d:b4:70:ec:42:96:7d:5c:bc:42:d6:7a:8e:
         b7:f2:62:38:e2:b5:ba:a3:ab:fc:cc:92:ab:ed:4b:44:d3:9f:
         66:70:75:dc:c8:13:55:71:62:9e:4c:49:52:e1:9d:07:d0:34:
         48:6d:98:d7:fd:ee:99:69:d8:b7:ca:51:06:ef:dc:d0:2a:7c:
         79:17:5f:35:e0:44:13:a9:96:50:90:75:46:d4:c8:de:1b:c3:
         9d:ed:34:c7:33:6f:9d:5b:42:5d:db:85:fe:6a:f1:9e:85:74:
         4b:ad:4c:12:e6:b6:f2:ab:dc:4e:be:09:37:e0:05:d9:aa:5a:
         d7:97:a4:e1:9b:8f:7c:32:96:66:81:33:42:a9:01:93:4d:5a:
         2e:6a:0c:76:a0:e5:b5:06:da:61:bb:0c:4c:47:c8:39:18:d1:
         33:a8:3b:ae:47:28:65:fc:00:7c:b4:9d:ab:10:51:7f:eb:2b:
         4d:b7:a6:52:b0:28:8a:99:99:64:d7:1b:09:e7:21:d8:e9:05:
         9e:e1:c3:75:29:85:dc:19:7d:2b:6e:75:0f:27:f9:9d:bd:5f:
         de:aa:01:20:85:0e:a0:f6:80:c1:26:37:e0:0f:11:14:19:f4:
         e9:cb:fb:4d:9e:e5:09:5e:3c:1c:8d:57:d0:87:7b:8f:d3:45:
         8b:35:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:29 2025 by rpki-client