Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/bfe69443-1c03-3816-af51-e6766ddb9c65.roa
File:                     bfe69443-1c03-3816-af51-e6766ddb9c65.roa (raw, json)
Hash identifier:          6Zw3Xnp4yjINwqNEn6/SOIyEmTZMQvR/iW8cHhmfn38=
Subject key identifier:   39:AB:0F:8E:0E:D3:D4:DC:ED:33:0F:AC:8B:5A:09:B1:EC:B3:C0:83
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584917236979C2F4BFFC7157AE80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/bfe69443-1c03-3816-af51-e6766ddb9c65.roa
Signing time:             Wed 05 Mar 2025 19:48:46 +0000
ROA not before:           Wed 05 Mar 2025 19:48:46 +0000
ROA not after:            Tue 03 Jun 2025 18:48:46 +0000
asID:                     8100
IP address blocks:        104.238.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:23:69:79:c2:f4:bf:fc:71:57:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar  5 19:48:46 2025 GMT
            Not After : Jun  3 18:48:46 2025 GMT
        Subject: CN=83ba9d46-02f6-44aa-9cf6-fb6487774170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:33:3a:e4:a8:7b:36:af:7b:51:11:2d:b8:
                    9d:9f:65:cc:11:48:29:20:19:bb:25:cf:44:1b:45:
                    e5:cc:a8:7e:5e:ee:a5:8d:d3:28:3e:34:22:38:c9:
                    21:e7:04:c2:02:e4:fa:8e:46:93:b1:db:c8:30:41:
                    fc:a9:a2:08:59:4c:07:42:5c:9f:f5:02:31:a2:23:
                    ed:79:1b:52:2a:b7:85:ce:16:6b:ed:33:93:e7:56:
                    68:00:37:60:e0:56:ab:68:20:bd:49:5a:09:0b:05:
                    ac:0b:57:9f:0a:63:0a:06:f1:ca:2b:8b:7a:0f:c5:
                    11:ae:d9:e3:da:bc:35:d3:03:50:d7:12:d4:9e:04:
                    ca:ae:fd:3d:18:77:24:24:23:f4:f3:c4:de:89:62:
                    be:b4:9a:56:69:d0:f3:94:63:d1:1f:a8:2c:8c:6c:
                    48:b9:8c:d4:af:b0:0e:bb:45:ad:8d:55:fc:7d:b3:
                    62:60:64:46:90:27:ab:5a:38:37:c3:69:32:e9:8d:
                    92:34:75:64:40:ae:2c:4f:b4:d7:08:83:c3:a0:45:
                    3f:59:03:e1:93:2f:52:00:9b:37:93:18:e4:66:ff:
                    18:f7:14:a9:f4:97:8b:a7:98:d3:a0:47:16:53:f6:
                    a7:d1:da:8e:90:c2:a1:ec:61:5a:90:d8:72:2b:b0:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:0F:8E:0E:D3:D4:DC:ED:33:0F:AC:8B:5A:09:B1:EC:B3:C0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/bfe69443-1c03-3816-af51-e6766ddb9c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:d2:89:5b:a0:8a:b1:a0:cb:c8:38:4d:a0:94:fb:9d:2c:71:
         62:48:cb:4b:0c:cb:92:cc:ff:f3:68:7d:ee:96:b7:d8:c6:1a:
         ba:6e:ea:f7:46:a0:1b:a2:3d:b1:65:10:0c:4f:9a:e9:3f:1e:
         50:a1:13:f9:cd:e4:6d:c3:af:c5:31:b5:e9:56:8b:77:3f:ba:
         5d:c4:20:35:15:51:98:54:47:72:9c:91:e8:f4:17:2d:7e:bf:
         e1:ad:d3:65:75:9c:c9:1f:78:6d:ad:3c:98:e8:8d:8f:64:3d:
         f3:7a:c3:e9:44:10:7b:87:16:75:39:0c:7e:65:62:53:6c:26:
         d3:23:7e:56:54:74:48:8a:d3:df:e6:2e:56:44:13:d2:2a:da:
         d5:93:7c:85:49:7e:31:fd:e1:ef:65:47:36:0b:3d:e8:e3:93:
         66:c9:03:cf:0d:48:5c:a6:c1:0a:a3:ff:3e:7c:3c:ec:13:f1:
         c8:61:b1:be:a9:41:bb:1f:d5:4d:6f:30:11:9d:f6:69:13:fa:
         63:b7:3c:7a:d8:6e:db:83:6b:b8:2a:04:6f:58:fa:15:8f:89:
         98:3c:b2:fe:94:06:e6:70:83:3b:96:0d:3c:e4:d6:75:67:b9:
         7b:2f:af:15:c9:e6:0f:e1:de:a5:7e:c3:47:27:3f:06:e8:80:
         4e:ee:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:17 2025 by rpki-client