Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcfffb1-a77d-3440-b483-416848e118a5.roa
File:                     fdcfffb1-a77d-3440-b483-416848e118a5.roa (raw, json)
Hash identifier:          lU1KhhxMttgdLoW7mpDxrSUX+DuSO2jGNltp1amwDeg=
Subject key identifier:   43:04:EA:BA:79:7A:8C:13:D6:AF:51:84:4F:1D:2D:39:F9:7F:6F:1A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5DCB2D213F8E68B84780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcfffb1-a77d-3440-b483-416848e118a5.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     5714
IP address blocks:        204.104.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:5d:cb:2d:21:3f:8e:68:b8:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=09676314-5ba4-4e0e-b403-da0db75cb608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:a0:37:e9:a2:28:2d:a8:98:ff:94:06:f6:
                    f9:eb:63:87:6b:3b:29:bb:6b:4e:4e:08:97:e6:c6:
                    a9:95:c0:df:09:88:dd:b7:0b:9c:b7:ae:46:dd:e1:
                    b8:fc:23:e2:08:a1:c6:7d:58:7a:ca:8c:85:76:2d:
                    d3:e3:f7:15:b5:84:bf:f9:92:71:c0:e4:6d:fd:68:
                    04:04:0b:b0:2a:71:14:11:24:41:ee:70:4e:9d:f3:
                    bf:98:29:95:03:a9:2d:8f:05:d9:e0:8e:12:c0:c3:
                    11:ce:ee:59:4f:f4:db:54:13:cd:d3:47:0e:da:37:
                    a3:88:10:20:80:e8:b6:d9:55:eb:49:e7:c1:d0:2b:
                    00:d0:35:44:d5:0f:e5:ee:f5:c4:ce:56:73:73:75:
                    77:3c:10:2d:59:97:f5:df:a5:f1:55:17:f9:5b:f2:
                    ef:f0:a7:f6:8f:ef:1a:1e:41:fa:9c:d3:40:a8:1b:
                    1d:aa:f5:c7:6c:75:af:f0:13:d1:bd:ff:df:f3:f3:
                    73:7c:00:4c:f0:b9:41:9f:d2:f8:1e:62:e7:3a:e7:
                    0a:91:1b:ac:b3:8d:d9:1c:31:cf:e8:e1:88:60:9e:
                    86:6d:cd:59:ac:29:f1:0f:81:bc:af:50:12:a0:ee:
                    53:3c:64:20:65:d3:23:49:8e:4b:01:9f:ff:8d:05:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:04:EA:BA:79:7A:8C:13:D6:AF:51:84:4F:1D:2D:39:F9:7F:6F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcfffb1-a77d-3440-b483-416848e118a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:1c:c3:00:b2:58:32:88:f0:75:c2:ed:68:66:14:0c:f6:
         18:2f:c7:c5:26:8c:89:6d:8c:29:fb:bf:c3:d7:b9:ef:74:34:
         0f:c3:be:d8:ae:b9:a1:ef:2a:38:32:bb:5e:ef:68:4e:63:ac:
         74:4b:9a:b1:25:3e:4e:e5:22:4a:3d:53:3b:b4:a9:ac:13:67:
         c5:a8:24:fc:af:87:e1:ab:dc:fe:15:2c:49:23:2f:c3:43:7e:
         af:b7:d5:f7:e9:93:88:b1:6a:59:a5:3d:89:f9:1f:41:ba:48:
         85:fb:fe:5f:7e:17:0d:bb:db:ab:dd:29:22:31:37:cb:34:4a:
         37:bb:25:36:de:fd:6d:5f:30:7c:cf:da:75:28:78:4d:e5:4d:
         ca:47:7e:0f:36:3e:15:32:f7:ca:86:9d:fb:a8:9e:a9:12:24:
         76:02:89:df:c8:6b:95:38:f7:25:bf:22:f3:a2:e3:1e:84:b8:
         eb:84:09:43:31:5d:ff:3d:ca:c7:6a:87:48:d7:f5:ed:b2:92:
         ea:e5:7a:99:ea:6e:af:10:fb:e6:2a:4f:29:f6:72:c4:fc:48:
         84:4b:0a:24:7f:5d:97:dc:27:ea:36:ae:af:be:8d:bf:de:6c:
         9d:26:ff:a6:7f:d8:30:0c:34:73:fe:d0:ef:05:a3:21:5a:0c:
         52:b2:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:28 2025 by rpki-client