Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa
File:                     12b496d5-5cb5-36f8-baf0-9e729b598d53.roa (raw, json)
Hash identifier:          0Em4BnYZ2w2KxVgoa7DgrdkP3q0uXtLCAn5TYmyZqyk=
Subject key identifier:   E2:21:5A:DE:14:A5:CB:C6:3B:DB:2E:97:28:7B:6F:CE:59:D0:CF:39
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858488280846AFFF7B27DBA4C65C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     31898
IP address blocks:        170.114.104.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:84:6a:ff:f7:b2:7d:ba:4c:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=fdbc9dd6-25f3-41c2-bd51-443bded63fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:98:fe:2f:97:0e:bc:6a:c8:d3:77:b2:7c:
                    16:2d:c3:19:f7:2d:ac:49:3b:16:e6:42:27:a5:70:
                    c9:87:5e:14:44:fd:ed:30:61:41:ab:4c:a2:37:df:
                    b8:52:54:a2:c6:70:85:59:2d:6b:6e:f4:83:b2:43:
                    3a:82:32:b3:5c:34:e1:54:a0:b4:b2:c8:d1:63:e4:
                    f5:b1:38:1d:cd:0f:02:09:02:10:f8:75:8a:74:0a:
                    62:ed:2f:7d:83:d4:5b:f6:ab:64:12:37:b7:85:c5:
                    d6:77:81:a4:a7:e0:75:66:47:10:f6:90:bd:27:e1:
                    51:28:a8:b7:67:61:84:f5:71:eb:90:fc:a9:db:d8:
                    5b:ca:a6:55:1a:67:73:25:b2:e3:8a:91:3d:da:78:
                    1f:97:e6:37:85:99:03:50:d5:86:c2:01:6c:73:8a:
                    85:6e:52:26:66:ed:4f:78:86:79:a5:ca:57:02:13:
                    e2:e1:e1:12:dc:3c:26:41:65:bd:98:42:b4:91:0d:
                    99:ce:71:7f:00:fb:c5:aa:b8:26:5c:f6:21:ca:f1:
                    6e:9a:72:3d:e4:59:e7:d0:93:f4:f2:93:55:80:65:
                    d8:e1:42:15:9f:97:a9:57:ab:d2:aa:ea:1f:a9:3f:
                    0a:e5:b1:1c:9b:da:0f:a6:10:f8:ac:1e:8e:08:60:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:21:5A:DE:14:A5:CB:C6:3B:DB:2E:97:28:7B:6F:CE:59:D0:CF:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:22:b4:5e:e0:09:cb:a5:ee:7d:c2:5d:50:d7:80:b2:9e:1e:
         98:ff:eb:3b:10:23:8c:91:9d:7d:b0:f8:74:90:87:39:45:53:
         42:4f:77:75:1a:63:31:0e:bb:70:f7:ad:1d:21:f9:14:cb:01:
         71:ff:a5:7a:a8:d5:16:36:5b:b7:ca:ae:3e:e6:5e:f9:ff:e1:
         3c:4d:1e:b3:9b:b5:a4:5f:95:53:00:4f:22:03:45:af:93:ee:
         13:16:12:c7:40:b3:a1:60:67:85:4b:85:79:7d:fb:31:ab:7e:
         7b:2d:28:90:94:3c:62:33:ba:85:b2:fc:10:e3:8d:36:3a:55:
         4e:4c:58:66:d0:62:3f:7b:28:8c:80:14:cd:8a:a2:3e:0e:65:
         40:48:d3:7b:40:ee:51:6e:a3:4b:a2:0e:b7:7c:6a:67:08:60:
         41:db:65:12:55:27:5d:68:f7:eb:23:b5:8d:41:49:f1:45:8a:
         2d:75:7e:17:8f:a2:29:77:26:b7:35:ba:85:ac:fe:75:6c:8c:
         3f:28:e0:2b:79:df:b5:49:ac:ee:1c:84:1d:c9:dc:03:2e:81:
         4c:58:c7:16:b4:ca:72:af:82:89:20:e4:9e:aa:b9:71:e8:04:
         e1:c1:60:d9:17:84:ce:d0:ee:92:a1:0b:b8:23:e5:2d:7b:ce:
         89:51:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:20 2025 by rpki-client