Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
File:                     a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa (raw, json)
Hash identifier:          mJhzVtykgG9wAqezsGqYjCf5oVgoFQs1OaIjA0mk1G4=
Subject key identifier:   20:31:BB:D9:93:82:80:9A:30:78:0B:9F:58:F8:D0:7B:C2:B3:2D:9A
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F43285849393E781B9C23E9028FE36C80
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     393227
IP address blocks:        104.218.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:78:1b:9c:23:e9:02:8f:e3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=69c18919-8358-4fac-a175-7d4b13ad89e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:7a:6c:1c:d8:75:1d:91:be:e7:04:18:59:
                    e4:c9:bc:a6:1b:60:e0:27:6d:51:91:ca:6d:ed:37:
                    75:7c:78:36:b4:ef:ca:9b:74:37:03:11:83:aa:5b:
                    e7:82:76:37:90:12:e4:dc:3c:df:59:ac:4e:66:56:
                    65:28:1a:fb:b6:da:89:20:e8:1a:b8:c7:b7:43:c2:
                    e4:a8:4f:33:e8:aa:50:13:9f:5d:2e:f9:2f:a8:dd:
                    a9:e8:55:33:d6:70:16:fc:1e:e3:c4:2e:14:ca:5e:
                    59:98:fc:56:6a:37:87:41:2b:c1:4a:d8:95:42:bf:
                    f0:d7:14:35:51:53:7d:75:7d:b2:1e:6f:45:1a:4b:
                    d4:ec:94:7a:6c:aa:e9:d1:1c:52:cd:17:a0:81:a4:
                    32:c1:42:a4:7d:b9:4b:90:1a:cf:95:e0:f9:bd:a8:
                    67:d6:dd:af:7b:7e:4c:1b:93:c2:b0:f5:b9:ab:79:
                    f5:fc:b7:33:60:94:93:fd:95:41:61:b4:8e:11:4d:
                    87:85:88:42:68:4d:a7:97:c5:e4:51:64:48:b3:4b:
                    cd:79:e3:31:f1:04:55:4e:24:61:fc:74:af:47:64:
                    e5:92:09:a4:d7:95:d7:19:54:c3:e3:23:21:b8:8d:
                    9b:6e:15:4f:d1:c5:69:0a:7d:24:d4:0a:93:e3:ab:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:BB:D9:93:82:80:9A:30:78:0B:9F:58:F8:D0:7B:C2:B3:2D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/a4379b6d-32c6-3b28-bff1-a8f88dea021a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:a3:4a:82:af:c1:b6:56:77:95:98:e1:57:0d:64:84:8d:
         5b:10:36:c9:3c:f4:19:50:a4:43:7d:22:70:55:b2:25:92:a5:
         17:5e:b4:13:30:3e:b4:a7:0c:62:9d:ab:a3:29:fb:d5:a1:40:
         2e:12:31:34:59:40:d8:d7:b5:e5:c4:9b:37:87:a2:73:ab:f9:
         8c:76:73:2a:bf:dd:0a:87:d6:e0:c3:fa:d3:7a:fb:40:ca:a4:
         64:1f:a9:b6:5f:d7:8e:67:43:5d:28:9b:50:1b:55:40:de:3f:
         5a:d2:4c:83:31:aa:df:0f:ef:d5:3a:87:e2:eb:95:9e:ef:13:
         62:4c:be:66:73:1e:a8:10:1c:80:aa:f9:91:ed:e6:f5:4d:1d:
         12:b9:7d:90:e5:31:b2:0d:b0:bf:e9:30:53:5b:0b:2a:c6:47:
         0b:b6:50:8b:c5:2c:52:4f:a4:3d:57:bb:27:a5:c0:cd:82:e2:
         8a:18:2f:28:2e:06:77:d2:7e:3c:0f:04:2e:51:00:d0:e2:42:
         32:a3:ed:30:75:68:fd:7c:6d:f7:d0:f7:52:dc:3c:ed:20:a1:
         f0:95:ae:af:a8:c5:d6:ad:75:f7:ca:43:8d:f0:77:ca:2b:c6:
         74:32:e9:68:bb:9a:80:65:42:d1:b4:3e:d5:8b:1e:f4:b7:11:
         de:52:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----