Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/49dc116e-08d7-3539-872f-30760092d387.roa
File:                     49dc116e-08d7-3539-872f-30760092d387.roa (raw, json)
Hash identifier:          1F7mFI5NgwDu4Mxu/65Np8Yi4pbc7JsV8EGgkOGpGZk=
Subject key identifier:   59:32:F8:42:44:1C:C8:0C:3E:50:82:E9:5A:A2:78:47:DE:45:F2:28
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB6088A518F663F0524700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/49dc116e-08d7-3539-872f-30760092d387.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3360
IP address blocks:        204.104.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:60:88:a5:18:f6:63:f0:52:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=745a7146-ff88-4dce-a518-b4e2048b2757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:b9:8e:db:b3:e6:2c:2b:ce:3e:3b:7e:2b:
                    d2:c5:c3:d1:fb:50:8f:08:e6:55:7d:fd:63:e4:5b:
                    89:1b:88:a9:54:d1:e6:2a:ba:7f:d3:ec:bd:7d:cb:
                    ca:ef:09:f8:30:c2:dc:9c:f0:8d:9a:97:a3:73:3c:
                    99:cd:ce:a8:75:73:ab:68:a4:7c:60:8e:3b:c0:ea:
                    cf:1f:cf:c2:50:24:2a:b3:7d:9a:0b:1a:e2:23:bf:
                    cd:4d:30:bc:c9:5f:01:e5:8c:c6:ee:d7:b2:0e:13:
                    42:07:3b:6a:48:86:bc:f2:78:d6:4f:f6:32:27:9b:
                    e4:97:37:09:c2:9d:b4:e9:4b:5e:df:b1:73:01:1e:
                    28:6d:6a:21:97:a1:3b:84:72:e4:22:cb:fc:26:38:
                    d0:dc:1a:62:17:2a:5d:39:68:b1:bb:7a:10:18:f3:
                    22:d2:78:df:2b:f4:cc:53:dd:1a:b0:7a:b2:58:e7:
                    84:7e:95:65:91:73:83:45:8d:15:e3:79:8e:da:f4:
                    78:2d:4f:e1:d1:e1:76:84:4d:fd:19:92:0f:8e:b1:
                    f7:84:58:16:4c:db:17:39:74:52:a0:d7:c4:38:79:
                    70:9a:77:37:ed:16:04:05:bc:37:29:3c:06:61:83:
                    d5:99:6b:00:ff:40:13:e4:b1:76:99:34:0b:3a:08:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:32:F8:42:44:1C:C8:0C:3E:50:82:E9:5A:A2:78:47:DE:45:F2:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/49dc116e-08d7-3539-872f-30760092d387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:e2:1d:2c:68:1f:b0:ec:c1:51:30:67:3d:55:cf:17:27:
         2e:ab:5a:88:8e:f6:ac:d0:3e:dc:01:8d:a7:d5:35:ca:f0:c2:
         12:4a:6c:8b:84:fd:c4:f5:45:f4:29:2f:1a:f7:3b:7c:1b:d7:
         4b:52:92:01:9b:5f:0c:02:a5:9c:84:07:a9:a6:ef:89:40:3a:
         44:e8:72:18:97:e2:00:65:6e:8c:7d:3e:97:09:52:a4:df:af:
         ce:c5:8d:d0:1d:f8:39:c6:ec:16:8d:f7:f1:66:b6:54:b9:9b:
         10:47:53:de:fc:ab:db:9b:03:e6:36:93:ac:a6:05:95:19:d8:
         04:4a:b4:0b:93:ba:9f:09:fd:a7:5a:50:bd:d3:6d:32:1d:2f:
         7a:65:52:03:14:71:12:e6:b1:d7:fb:46:15:af:a0:98:96:f7:
         70:f6:05:f6:0a:0f:f7:d0:8a:91:b1:fb:86:75:d6:e3:c1:df:
         9f:e7:92:13:20:ec:9d:e0:46:33:54:ca:b2:d5:01:53:40:33:
         49:71:48:32:c4:10:1f:80:56:8e:58:d9:93:dc:b6:c2:da:00:
         7a:11:8d:1d:bb:95:7e:28:68:d9:8f:6b:bb:6e:c4:f9:02:7a:
         5a:8d:1a:98:ad:57:40:f6:77:67:4d:4f:10:06:78:47:7a:79:
         4b:92:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:28:05 2025 by rpki-client