Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/705e6722-a0ca-3f2b-afd4-5534cf5119d7.roa
File:                     705e6722-a0ca-3f2b-afd4-5534cf5119d7.roa (raw, json)
Hash identifier:          6r5cnink3YyYnenA31+/A5FXr5ezbw6L7oQngge2LTM=
Subject key identifier:   F4:95:A7:BF:FE:58:63:1E:B8:B6:0E:E5:B3:91:87:B9:B0:53:0A:26
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584891DDB4D6CC23718AC22B5E80
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/705e6722-a0ca-3f2b-afd4-5534cf5119d7.roa
Signing time:             Fri 17 Jan 2025 02:05:49 +0000
ROA not before:           Fri 17 Jan 2025 02:05:49 +0000
ROA not after:            Thu 17 Apr 2025 01:05:49 +0000
asID:                     398465
IP address blocks:        104.171.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:dd:b4:d6:cc:23:71:8a:c2:2b:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Jan 17 02:05:49 2025 GMT
            Not After : Apr 17 01:05:49 2025 GMT
        Subject: CN=32075285-19dd-4c15-94d7-2887cf0a5503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:b3:86:1d:9a:6c:02:7e:c3:b1:1b:fb:3f:
                    df:d8:5b:ea:05:00:cd:99:e2:da:b3:42:aa:df:5a:
                    1e:43:03:91:0a:88:67:b4:34:49:ff:b7:65:7c:5e:
                    47:35:59:93:9a:d2:4a:28:a7:71:e9:a4:ed:0c:c2:
                    39:4d:2f:73:87:e5:26:0e:41:5c:a2:74:91:cf:b7:
                    bc:68:be:7a:08:6c:05:53:8f:90:d4:48:a8:9f:5b:
                    f7:0b:46:43:ce:a1:6f:3c:42:e9:02:24:54:01:55:
                    b1:21:a2:d5:3d:02:9d:fb:ca:18:48:af:98:6b:60:
                    2f:23:f6:7f:cb:d1:21:44:57:16:28:d5:b2:86:9c:
                    f6:4d:9a:9b:37:80:bf:17:19:51:50:5f:d8:75:2e:
                    65:75:6a:b9:45:db:3c:a4:f1:71:6c:27:c4:06:06:
                    59:d2:e6:5c:c6:e9:00:0d:67:db:74:61:43:1f:e6:
                    a7:8d:ab:98:cf:f6:ab:49:6d:db:34:3e:9a:f2:68:
                    db:3a:52:d3:dd:47:93:d1:99:93:3d:68:81:d8:03:
                    c7:00:00:b3:66:5a:1d:dd:60:f6:a7:a5:4b:7f:d8:
                    6c:d2:40:1f:3e:89:da:49:e7:11:53:1e:98:1b:d4:
                    ae:0b:4f:0a:97:26:d8:74:54:87:c8:46:67:1c:ba:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:A7:BF:FE:58:63:1E:B8:B6:0E:E5:B3:91:87:B9:B0:53:0A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/705e6722-a0ca-3f2b-afd4-5534cf5119d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:89:21:1f:6f:e1:73:27:75:f8:d7:a5:a4:2d:00:4b:3b:58:
         2f:66:10:4f:65:85:72:55:02:6a:d3:36:97:4f:19:76:84:f5:
         ea:46:7c:7e:91:52:68:07:f0:50:9d:0b:af:73:77:e3:d6:1c:
         0b:20:73:a8:18:04:d4:d5:12:d1:49:6a:6b:64:12:d1:74:70:
         96:6e:45:db:40:49:83:c1:14:19:e8:82:6b:9c:22:27:7a:c9:
         83:91:85:39:04:e5:31:92:8c:55:19:fd:ec:18:da:2c:ea:39:
         0c:a9:f2:2a:9a:4e:a5:eb:62:7b:97:19:42:73:d6:5b:a6:42:
         92:98:44:1e:93:9d:52:c2:c3:c8:3d:fc:14:6c:92:ff:89:52:
         4d:7f:8b:e3:b8:df:f7:84:29:df:3f:1d:4e:98:85:87:5d:17:
         cb:ea:d1:94:98:06:b7:72:18:d3:a9:e6:e9:ce:07:55:6d:c2:
         7e:7b:fd:38:12:14:05:77:26:40:ff:de:d6:37:c6:4f:fa:11:
         41:ae:f9:d6:0c:68:79:64:d1:d9:9a:8a:25:0f:0d:53:81:01:
         a6:0d:66:b5:69:7d:b2:2d:d7:7c:23:37:13:39:92:01:7c:82:
         e9:94:8a:c5:33:b0:c1:6c:bc:49:a2:0c:e5:0c:1d:02:50:ca:
         71:64:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:20 2025 by rpki-client