Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/727188c7-88ca-3f72-b624-b9eaca5131b4.roa
File:                     727188c7-88ca-3f72-b624-b9eaca5131b4.roa (raw, json)
Hash identifier:          V5vukm4RH2+5nU3JXA02ITn0ITMqVS1uT2GOZUnb/FE=
Subject key identifier:   06:ED:2C:37:A6:8C:1D:44:63:25:60:62:AE:A1:C5:FC:B1:0B:98:B3
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F432858494C7B75D550B97BFB98985000
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/727188c7-88ca-3f72-b624-b9eaca5131b4.roa
Signing time:             Mon 24 Mar 2025 22:24:01 +0000
ROA not before:           Mon 24 Mar 2025 22:24:01 +0000
ROA not after:            Sun 22 Jun 2025 22:24:01 +0000
asID:                     214943
IP address blocks:        104.245.240.0/24 maxlen: 24
                          104.245.241.0/24 maxlen: 24
                          104.245.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:7b:75:d5:50:b9:7b:fb:98:98:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: Mar 24 22:24:01 2025 GMT
            Not After : Jun 22 22:24:01 2025 GMT
        Subject: CN=2fe30e7f-85d9-4752-bd53-1a870de8cad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:f9:a6:c7:67:d7:27:78:ec:8e:48:fb:69:
                    07:d8:46:da:2a:e6:8b:88:a5:2b:c2:c2:77:c9:9e:
                    bb:f3:c7:47:d9:be:10:60:e0:61:7f:d4:42:a0:e1:
                    c7:a0:62:cc:e9:06:04:e7:6f:d8:23:4e:03:5c:43:
                    ca:ff:a6:49:8e:d8:bc:16:d7:0f:33:34:10:a2:db:
                    bb:eb:78:b9:5c:45:1b:4c:90:12:fa:ee:4e:6a:4b:
                    5d:6f:fa:e1:cf:3f:07:b9:43:f5:9e:dd:d5:aa:ba:
                    78:aa:f2:b1:ac:ed:8c:70:aa:fb:95:30:2b:81:4a:
                    db:7a:db:84:29:49:6e:2a:40:5d:5c:e6:40:b2:a6:
                    2b:0c:e1:34:a7:24:fa:ef:d1:8c:bf:93:6d:6f:7d:
                    d5:9a:9f:91:0a:3a:14:01:8d:a3:81:23:18:16:77:
                    26:26:67:18:7a:fd:d5:91:00:2a:35:35:6a:46:8f:
                    11:a8:5b:08:84:69:45:33:56:1e:ec:d5:90:5a:37:
                    bb:fc:6c:b0:40:ae:9f:46:5c:f1:71:7b:03:27:b5:
                    14:a5:74:f2:5a:4a:28:a2:a4:eb:0e:06:58:25:15:
                    9c:93:d7:3a:36:90:4b:be:4d:62:8c:8e:4e:d3:68:
                    13:bc:09:33:f2:00:21:bd:68:08:78:78:97:33:bd:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:ED:2C:37:A6:8C:1D:44:63:25:60:62:AE:A1:C5:FC:B1:0B:98:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/727188c7-88ca-3f72-b624-b9eaca5131b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0-104.245.242.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:6c:a5:98:57:39:34:c5:2f:32:40:a6:0d:3b:5a:35:bf:
         dc:4c:15:0e:76:a8:e9:2c:fa:0c:6d:d4:a6:43:30:57:b7:97:
         83:8a:a3:4a:e4:2a:73:72:5c:a2:ec:a0:47:5f:c2:7c:b7:b2:
         4e:af:31:77:96:19:ce:f1:ad:27:81:69:61:7e:e5:b7:2e:14:
         7a:d2:83:bc:78:89:20:72:de:3f:27:c6:ee:9a:f5:ae:12:2a:
         4e:10:ab:8e:e3:88:23:e0:1d:56:92:c3:2e:3c:17:fa:5d:60:
         e5:78:4e:4a:9c:32:fe:b6:83:46:4d:51:17:a3:48:95:09:ea:
         29:d8:ca:e7:29:64:a5:4a:a2:e6:f0:ed:d7:a3:d1:ea:4a:a4:
         74:ef:72:bc:54:2b:d0:3a:ca:8c:90:54:f0:c6:da:a2:59:c6:
         bf:88:8a:01:e1:d0:4b:b3:86:11:cd:45:b3:6a:ab:17:56:ba:
         58:83:d4:87:a1:f6:79:97:76:06:fe:00:ce:ff:8e:06:cf:44:
         27:7a:2e:bf:ed:94:aa:62:23:b0:17:79:50:d2:6b:e2:6b:e1:
         dd:69:81:b9:8c:8d:4c:13:9d:7f:31:12:99:c0:01:3c:52:d8:
         21:cf:8d:17:fd:6d:d0:dc:cb:f4:75:a6:a0:98:97:3b:11:4d:
         61:77:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:24 2025 by rpki-client