Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa
File:                     0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa (raw, json)
Hash identifier:          ETlIZw0iHcIB5M6DgxX/J3cPmSGVZFUGD7VyOaHL9Xg=
Subject key identifier:   FE:EE:00:9A:C4:AC:5E:A6:A5:22:3C:B8:02:D6:F3:4E:0A:90:0B:02
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBACCEED14807D68606CE8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        104.154.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:ac:ce:ed:14:80:7d:68:60:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=10854d8d-2da0-43a7-bbb4-40dcf6a7a963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:65:fb:d2:d1:c5:7c:88:1f:f1:3e:b0:98:
                    80:aa:bf:b0:42:84:42:64:4b:f4:c4:c0:a8:e8:58:
                    45:63:7c:bb:8a:c3:a0:bd:68:cd:1a:22:69:7b:47:
                    a6:9f:cf:63:06:be:75:d3:9f:cf:2b:d2:7a:e2:26:
                    a9:43:66:76:26:c8:e3:a3:c3:6f:b7:c4:3b:cd:1d:
                    9c:47:0c:70:20:7f:9d:fd:50:61:59:2b:58:1a:02:
                    38:04:48:73:64:f9:e9:56:e4:42:9c:60:f9:d5:ed:
                    07:48:4c:8e:eb:04:33:98:c7:21:dd:4b:af:c5:29:
                    15:34:88:18:c5:fd:13:4e:50:2f:2d:ec:86:02:7a:
                    8a:e0:99:81:71:e5:6b:76:ac:48:02:ff:4f:50:5e:
                    0b:95:6c:af:6c:db:9c:f8:b6:3a:89:76:05:3b:10:
                    79:1f:39:d3:64:d4:e6:d6:61:6b:e7:e0:c7:db:46:
                    4a:a5:96:72:8f:65:3b:e2:59:6e:a0:31:c1:f9:54:
                    6a:83:58:c7:06:f6:51:f4:e6:d3:ee:ae:c1:ae:87:
                    e2:17:70:48:a8:b1:d9:84:01:fe:2b:ef:f7:ce:c9:
                    71:8f:fe:18:54:1f:f6:e3:59:d1:43:b8:cd:ea:1e:
                    2b:db:0c:18:3b:e1:b3:6f:21:61:f8:f4:d8:e1:fb:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:00:9A:C4:AC:5E:A6:A5:22:3C:B8:02:D6:F3:4E:0A:90:0B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d3d63ca-6a7a-3eac-b8fc-7d3628514462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:62:24:4a:15:fc:34:10:87:71:a5:0f:6b:05:cc:af:f5:b4:
         18:a4:03:53:47:e7:e6:3a:4b:ab:d7:90:11:ea:c0:6b:0a:64:
         2a:80:fe:64:a6:87:22:ac:8d:af:14:71:19:2d:3c:a9:d8:68:
         ce:99:24:5a:73:2f:3a:fe:20:00:32:e9:01:5c:fe:b3:0c:8a:
         18:22:ed:fb:5a:af:33:99:1e:d8:d0:01:ec:f8:43:52:ae:5d:
         bd:bd:d8:1c:a7:74:18:15:66:d9:48:37:4c:5e:43:b0:31:9d:
         c9:9d:f3:19:78:53:5a:55:60:ce:8d:75:3e:b1:59:64:dd:91:
         95:02:80:70:10:34:c8:66:c6:d8:3a:4a:2c:02:6c:b9:f9:e0:
         02:b0:f5:0b:2c:ad:69:92:ed:b3:25:38:79:9e:73:36:df:e1:
         c0:88:bc:c0:35:c0:27:55:a5:eb:7e:27:07:b3:da:dd:a4:ef:
         41:80:2c:4d:6f:b1:12:0b:33:f2:f5:8c:52:c1:d8:53:5b:e5:
         42:6d:d6:78:ef:94:26:f3:c1:2c:ab:04:e6:6f:d0:c6:48:b0:
         d7:76:87:66:d7:da:5b:f8:ed:74:9b:7d:3e:ed:cd:0a:50:4c:
         17:26:fa:01:7e:b3:7b:20:71:3a:26:6e:12:46:4d:69:ea:81:
         84:1d:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:34 2025 by rpki-client