Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa
File:                     dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa (raw, json)
Hash identifier:          bKEhx/xLzNpR9alM9Imt5nsTsPuW3xxuK/wkDoBGPHI=
Subject key identifier:   94:CF:82:45:39:FE:65:87:33:92:8E:C4:D9:68:86:F1:27:03:30:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849287E701D6A576C5773268040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        104.80.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:70:1d:6a:57:6c:57:73:26:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=11de6163-3178-4d1c-aef4-5adf6a3bb26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:39:11:8b:5c:b4:7c:89:36:c6:5b:06:d0:
                    a6:43:6a:b7:29:79:b2:34:1a:72:3f:b3:4a:92:7f:
                    d8:a0:4c:79:e4:ab:78:21:c7:b6:80:5e:7f:d3:9c:
                    3c:51:b3:5a:0c:3b:46:b9:c4:bc:a4:69:89:cc:f4:
                    30:cd:70:32:f7:d8:5f:f7:1b:bc:2a:c2:c7:2e:78:
                    b8:75:92:94:b3:1a:71:d7:13:1d:eb:40:a7:53:cb:
                    63:76:e0:c9:d1:ea:21:8b:bd:76:d6:d6:99:6d:e6:
                    fd:9f:3b:33:7d:a7:50:69:09:4d:70:57:a8:b5:9a:
                    6c:b5:8f:c7:36:b4:af:6a:32:02:4c:e8:61:ca:62:
                    b9:6e:c4:52:b6:38:49:3b:7c:9a:f4:b2:91:0f:68:
                    25:dd:38:db:48:ea:1b:c3:21:74:21:6b:00:cf:6c:
                    f0:99:eb:a6:77:f7:02:4d:f9:a0:c9:ec:ab:b4:95:
                    3b:0e:76:dd:b8:75:3d:da:dd:08:a4:31:79:87:9e:
                    f8:15:90:1f:81:da:f7:f5:85:9e:a7:67:9a:82:5d:
                    3f:a2:fa:8c:6a:e7:8f:f8:74:f1:41:c4:27:48:ba:
                    e3:e7:75:d3:ab:71:79:f1:ac:52:e4:3b:65:35:23:
                    63:09:ae:11:ed:11:a5:8f:3c:49:ff:6d:e2:2a:e1:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:82:45:39:FE:65:87:33:92:8E:C4:D9:68:86:F1:27:03:30:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd5b1e88-de65-37f4-b0ad-c165ce9a176d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.80.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:41:43:e1:dd:7b:6e:04:e5:b4:d7:f6:56:96:d1:09:d9:
         ea:58:69:ba:3e:da:bd:02:bc:d0:1e:1e:a3:ba:49:98:aa:ba:
         77:87:14:28:24:cc:77:4b:d8:57:55:e2:05:c0:52:4b:0f:d8:
         78:65:a2:84:2a:3b:62:bd:97:57:ec:48:83:e9:e3:94:70:52:
         65:c1:42:14:1d:d2:86:7b:a8:bc:12:da:8d:e3:f7:12:f9:ab:
         d4:40:20:e6:6d:4d:d4:f1:7f:76:96:e0:24:71:c4:ec:33:d8:
         0f:89:fb:e0:ff:cb:af:6a:2b:ba:a6:9f:d0:1e:d1:1a:7f:e1:
         24:a5:35:66:09:f9:ce:8a:ed:39:1e:0e:1e:6d:bd:27:3c:0a:
         51:7c:81:d0:8e:c6:dd:e0:01:6e:b1:eb:bf:2b:87:db:7b:71:
         67:ad:10:9e:26:1a:5a:cc:c1:55:79:81:5e:e5:47:98:4b:40:
         43:86:cc:84:82:21:f4:45:16:2c:e7:46:ef:83:ac:44:10:bf:
         ab:68:25:5c:f2:1f:86:3a:63:27:44:32:a7:54:ba:7d:40:77:
         e0:d3:14:b7:69:55:91:9c:a5:1b:6d:77:97:bf:dd:f5:46:0d:
         9a:95:66:2f:f8:03:9b:8b:c3:51:08:a2:b5:b1:9e:21:96:25:
         6b:2b:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:33 2025 by rpki-client