Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39b8f571-7a39-337e-bb6d-88fd05a237a1.roa
File:                     39b8f571-7a39-337e-bb6d-88fd05a237a1.roa (raw, json)
Hash identifier:          suLrdOKvM4lw+CRbfOYbbF58v8hHKbJVwZwTvfJKQj8=
Subject key identifier:   D6:1F:46:B3:F3:60:93:D0:16:8B:5E:BC:92:2F:83:FC:B2:50:65:40
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96AC0BEB382ADFEA687760
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39b8f571-7a39-337e-bb6d-88fd05a237a1.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     54600
IP address blocks:        104.253.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ac:0b:eb:38:2a:df:ea:68:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=a1d8f498-538b-4bae-81ab-f0a097d87d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:c7:6a:de:41:1a:24:0a:ca:c4:79:f7:d0:
                    5d:99:6a:8c:0b:77:05:3a:40:18:bf:be:40:ec:8f:
                    61:57:a5:dd:d9:6d:16:2c:72:71:22:db:9d:fa:b6:
                    36:3d:06:fd:c4:00:56:ac:07:40:b8:10:73:18:3a:
                    b3:90:f5:a4:c8:5c:c8:8b:1d:df:49:ec:68:69:c2:
                    b8:4b:92:09:37:b4:1e:1a:85:32:bc:58:a4:7c:04:
                    e4:ac:2d:03:0a:91:db:26:4b:36:43:a2:eb:4d:a8:
                    03:2a:d9:88:0e:90:ee:33:a8:db:fa:1d:2d:59:e4:
                    5a:7a:81:ce:83:d7:bb:49:20:26:63:9a:c9:ec:56:
                    e0:7b:9f:77:2a:31:9a:bf:92:0f:78:18:a3:e1:67:
                    f5:f9:b3:ac:79:fc:41:d8:0c:98:52:22:71:ec:bb:
                    b1:f0:1f:37:70:30:38:44:f3:16:22:32:fb:bb:72:
                    65:3a:b8:87:ab:80:5a:e4:d7:68:0e:70:fc:9c:7d:
                    25:4b:d1:7b:e1:f3:78:ae:42:47:9a:5c:79:6b:4a:
                    fd:2a:00:d0:e3:33:d6:08:34:cd:53:e1:70:7f:9a:
                    cd:7f:67:23:2f:3e:6b:2e:3c:43:5e:6a:7a:51:8e:
                    09:26:82:36:4d:da:71:ff:94:c2:c5:bc:8c:54:c8:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1F:46:B3:F3:60:93:D0:16:8B:5E:BC:92:2F:83:FC:B2:50:65:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39b8f571-7a39-337e-bb6d-88fd05a237a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:b1:35:16:c2:cf:a6:11:b6:84:e8:32:7f:27:7d:3a:71:
         79:1c:25:2b:f2:45:34:e2:a6:45:4d:9b:78:f9:e9:10:3e:08:
         5b:d0:90:c0:c5:6e:e7:13:a2:c2:09:a7:fc:34:93:e5:4f:5b:
         6e:1e:30:dc:08:55:69:c5:ac:c8:a0:a2:6e:74:22:79:72:4c:
         32:98:e7:6a:2b:27:ab:1c:73:21:84:bb:cf:d0:2c:3e:b4:6b:
         ae:0d:21:cf:86:4a:a6:68:d9:37:07:3c:39:93:f2:4a:76:24:
         ef:fb:51:5d:96:b6:f3:4b:a6:1a:a4:8a:98:32:cf:a8:71:c4:
         6b:79:89:e5:43:0b:89:b1:23:8d:c9:47:d7:9e:fc:8d:35:1e:
         c6:cc:54:9c:bd:15:db:07:31:1b:9c:3b:bb:03:ed:b7:dd:cb:
         a9:d0:67:c5:02:5b:f4:e0:70:6e:21:e1:c2:57:f4:a7:48:b1:
         60:6a:fc:62:93:f8:a8:2f:95:e1:b9:a7:aa:50:2a:ef:9f:ce:
         44:3f:53:9d:39:47:88:5a:da:99:c7:fd:4e:d9:c4:93:54:4e:
         c6:02:db:88:b5:7f:d1:84:57:35:93:ac:79:d5:86:04:14:9e:
         9c:f5:c9:95:af:b8:b3:6b:0b:ac:59:83:ff:39:aa:6d:bb:02:
         fb:ac:6c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:14 2025 by rpki-client