Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
File:                     285ac7ac-6745-33d7-9dce-52cc8033ef65.roa (raw, json)
Hash identifier:          SlDW+Dc772lglLMKXwPbM9QethU+RMLlB+x85HhwRrY=
Subject key identifier:   DF:C2:EB:48:F0:56:61:AD:7E:3A:D9:FA:46:88:30:5C:AE:15:7E:3F
Certificate issuer:       /CN=15364252-9e65-4f74-ba62-8a3b8ccc7e5f
Certificate serial:       010D0C9F43285848FD56AC20CFD266EA46ECEA04
Authority key identifier: 7A:1A:42:77:DE:20:1B:27:E2:1E:42:FE:C8:06:B1:0E:0E:FB:A9:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     63275
IP address blocks:        104.237.96.0/20 maxlen: 24
                          169.197.72.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ac:20:cf:d2:66:ea:46:ec:ea:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15364252-9e65-4f74-ba62-8a3b8ccc7e5f
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=f6045663-9684-4689-ba8c-3173679b6128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:5a:c3:52:42:0f:0d:bf:85:e0:08:34:25:
                    53:77:02:d1:47:38:26:b1:aa:fe:2c:59:5f:29:24:
                    66:a7:03:9e:76:54:3f:72:b3:82:5a:ef:ed:c0:9b:
                    d2:3f:d5:72:91:96:79:2c:05:36:9b:a1:34:62:04:
                    62:63:a9:05:9b:e8:41:98:f0:ef:f0:76:3d:0f:b7:
                    98:44:e7:6a:f2:e7:0d:35:fa:4e:9a:18:80:52:0d:
                    75:9f:a6:99:5c:bf:71:57:99:b5:b8:5c:3f:31:f6:
                    06:50:20:27:e3:2c:ed:f8:f7:7e:a1:f7:e2:e4:3c:
                    b9:d3:e7:51:90:e1:a7:9c:fe:26:7a:eb:1f:36:dd:
                    02:d3:72:f4:60:ef:71:f9:2e:2b:6f:dd:cd:0a:87:
                    a1:aa:63:86:de:47:e6:6b:98:1e:d8:b4:0d:0c:6d:
                    ab:8a:6e:d8:8b:cd:d4:93:0c:a1:89:d3:b6:3b:18:
                    80:6e:b6:eb:bf:de:97:9c:7a:7e:35:58:e3:aa:76:
                    21:3b:f7:fa:03:fd:b4:41:bc:2d:d3:07:8c:b7:9f:
                    1b:bc:ff:75:5b:63:f9:06:a2:06:de:af:58:6a:bf:
                    07:b3:f3:98:76:56:8e:d2:64:02:0f:70:b8:50:86:
                    b9:27:f4:17:f8:a8:5e:3c:6b:69:9e:4d:c1:45:bd:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:EB:48:F0:56:61:AD:7E:3A:D9:FA:46:88:30:5C:AE:15:7E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/285ac7ac-6745-33d7-9dce-52cc8033ef65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.crl

            X509v3 Authority Key Identifier:
                keyid:7A:1A:42:77:DE:20:1B:27:E2:1E:42:FE:C8:06:B1:0E:0E:FB:A9:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15364252-9e65-4f74-ba62-8a3b8ccc7e5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.96.0/20
                  169.197.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:e2:18:b3:74:c5:b4:d5:cf:aa:4a:aa:82:02:93:2d:06:
         9d:1c:c0:83:80:d1:9c:db:72:2a:f6:83:60:d9:09:bb:bf:db:
         1b:1a:ae:f2:aa:97:0e:f8:25:cc:a0:03:ab:41:f7:84:7a:53:
         80:f8:9d:45:35:d6:27:dd:5c:ae:5e:c4:3f:6f:ac:71:31:ad:
         35:91:31:fb:1f:bc:af:3a:61:95:8a:bf:26:9e:28:40:03:3f:
         90:5f:ab:b4:f6:04:f3:d8:cd:a0:78:45:35:04:52:a2:e4:3c:
         88:d7:68:34:1a:62:41:7b:94:f3:69:51:e4:37:5c:36:cc:04:
         bc:01:26:3a:09:51:fd:1a:61:da:7d:c4:d0:12:a8:5f:69:ec:
         41:76:6f:b4:b5:d8:af:be:69:65:fb:bd:ca:c9:1c:5f:07:e7:
         9f:a9:69:86:ba:cf:de:71:af:f4:6c:2d:6c:35:83:d0:46:09:
         d7:36:a9:f5:95:21:8b:7c:84:84:24:10:59:b1:01:09:17:ba:
         cc:ea:2e:97:2f:e2:e2:d0:39:28:0b:91:a9:17:01:d6:f5:27:
         12:6a:54:94:82:85:63:27:75:b2:05:b5:79:61:db:a1:96:d3:
         32:e5:41:91:7e:50:73:e8:b1:62:ad:43:64:53:84:8f:92:23:
         3a:fe:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:24 2025 by rpki-client