Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0e6ec426-a719-3e67-982c-355a030d61f1.roa
File:                     0e6ec426-a719-3e67-982c-355a030d61f1.roa (raw, json)
Hash identifier:          1lbab7zH27NWx302tovxfGA2Bt5Du7wkV2b90VmU3tc=
Subject key identifier:   9C:82:C4:0D:98:77:1E:7E:F9:F3:6D:FD:51:6D:50:6F:A7:B4:3E:2D
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A228A1F1F4C8901B43599A40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0e6ec426-a719-3e67-982c-355a030d61f1.roa
Signing time:             Wed 22 Jan 2025 22:09:43 +0000
ROA not before:           Wed 22 Jan 2025 22:09:43 +0000
ROA not after:            Tue 22 Apr 2025 21:09:43 +0000
asID:                     15164
IP address blocks:        104.218.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:28:a1:f1:f4:c8:90:1b:43:59:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 22 22:09:43 2025 GMT
            Not After : Apr 22 21:09:43 2025 GMT
        Subject: CN=037de113-e076-48b3-91ed-09542b8032a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:fe:f1:b0:95:c8:9c:dd:2f:5f:26:d3:65:
                    73:c3:73:26:0e:95:9c:bf:3c:fd:cc:d2:35:83:ce:
                    6f:8f:41:45:f9:c8:7a:bc:29:a0:4f:63:8a:85:12:
                    26:1a:82:c4:e9:b3:df:a9:e2:fa:b6:07:01:5d:d1:
                    59:4d:52:dd:cd:ba:2e:65:e7:e2:6a:d2:bf:9f:73:
                    cb:6e:51:9e:10:c0:70:8f:98:96:d9:d8:ac:7a:fb:
                    a5:b8:c1:75:fc:f0:5d:91:a4:3d:cf:ee:2c:a7:a6:
                    83:ac:7f:5f:d1:70:18:2d:68:f8:53:a5:40:55:50:
                    51:a6:30:24:19:f6:ba:30:da:62:20:94:a3:18:77:
                    a3:fb:c7:ef:68:9f:8e:fc:3d:c3:d3:46:44:69:0b:
                    ca:5f:26:67:5e:52:7c:8c:8c:99:c2:f5:0a:c7:b9:
                    3d:b7:11:9f:cb:48:72:e8:01:ec:5e:a8:a9:10:76:
                    b5:d9:09:d0:da:fa:2b:2e:7d:72:ef:8d:fd:6b:69:
                    97:cd:b2:de:9d:d6:c7:c3:c7:fe:f3:bc:33:ce:b0:
                    19:9c:d4:c8:f7:3b:57:1a:6b:3f:57:70:66:28:85:
                    75:d0:e0:a8:ae:7d:fe:bb:ea:fb:00:e6:4a:52:e0:
                    23:60:21:62:a4:7d:ea:75:1f:39:e6:68:80:eb:c0:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:82:C4:0D:98:77:1E:7E:F9:F3:6D:FD:51:6D:50:6F:A7:B4:3E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0e6ec426-a719-3e67-982c-355a030d61f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:5c:24:41:2c:7d:e2:57:07:38:a8:19:b1:f8:d7:ab:4b:
         c2:2a:9d:ae:8f:78:3f:f6:9e:fc:fb:6b:85:36:6b:ed:9e:d5:
         71:02:69:77:26:de:50:0c:8a:2c:b8:2c:85:ce:ad:2c:cd:99:
         72:e7:a2:ef:8f:58:24:72:f5:6e:4e:c7:55:77:1c:82:31:e9:
         43:33:40:1e:77:7a:75:81:5c:a7:9b:16:e0:75:c8:cb:91:50:
         a2:17:ad:8b:d0:1e:25:09:31:ee:8b:5e:35:1a:8d:1e:b5:e4:
         d1:6f:39:07:81:ad:77:e0:82:c4:99:e9:f4:cb:f8:d3:41:82:
         1a:ee:2d:99:c0:f2:e0:44:b4:38:b9:a5:71:19:14:a1:f0:13:
         09:09:2c:ad:c9:dd:ca:e8:ef:ca:cb:e6:84:99:ed:e3:21:e1:
         02:b8:c1:ac:46:ab:76:bb:46:6d:1a:32:24:6c:36:16:4d:2a:
         9d:d5:3b:58:3a:89:9a:3a:f3:a4:ad:35:09:3c:bd:4d:2c:1b:
         45:ad:47:20:83:2b:56:82:8a:ea:6b:2b:32:0f:8b:3d:78:91:
         bc:6a:09:5e:3d:99:f5:62:8a:c5:5f:ee:20:68:c6:cd:c6:56:
         c9:11:ac:bc:b1:3b:74:36:60:5c:2d:b7:90:b9:cd:09:8c:84:
         03:54:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:21 2025 by rpki-client