Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/908965ad-c225-3c6a-9e65-6402687458e8.roa
File:                     908965ad-c225-3c6a-9e65-6402687458e8.roa (raw, json)
Hash identifier:          3nosjH6HIJNZNQnGVEz8qQQSIxWpiOht1Zv4UPK26QY=
Subject key identifier:   58:A6:8A:F1:6C:11:EC:B6:8B:21:71:C5:EE:A2:DF:7D:B7:51:B1:0E
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F43285840696EDAF43A1D67BCC9F1F280
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/908965ad-c225-3c6a-9e65-6402687458e8.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Thu 03 Apr 2025 04:00:00 +0000
asID:                     62240
IP address blocks:        104.234.167.0/24 maxlen: 24
                          104.234.62.0/24 maxlen: 24
                          104.234.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:69:6e:da:f4:3a:1d:67:bc:c9:f1:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Apr  3 04:00:00 2025 GMT
        Subject: CN=28194377-cb8e-4535-afb4-19ec01235e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:22:de:93:b4:aa:6a:7a:dd:97:f7:cc:84:
                    78:15:ef:c5:a4:0e:2c:40:78:4e:7a:d8:77:d1:e0:
                    fe:51:ee:57:03:31:07:bb:92:c6:fa:70:2d:cd:c5:
                    e8:97:73:86:99:7a:a9:3e:6e:9d:4d:7d:84:f4:ed:
                    81:d7:ce:0f:7d:2b:ff:bc:6c:cb:53:8e:07:94:f5:
                    1a:cc:75:b4:30:29:b9:e7:36:81:67:07:03:f0:44:
                    7f:df:25:5b:5f:a1:fe:b9:6a:7b:3d:cb:b6:6c:e7:
                    ab:70:e1:97:fb:57:d8:5b:26:4d:ad:38:a4:4c:b8:
                    a0:c3:99:a7:c0:18:cc:0c:57:ba:62:f3:48:64:93:
                    d9:9b:77:de:44:72:80:ad:e6:b6:dc:51:2a:f9:3c:
                    6d:47:cc:7e:12:33:be:46:ee:16:e7:fe:14:e0:f1:
                    e8:7f:38:98:b3:a6:08:38:9f:c4:22:67:11:dd:16:
                    3b:3b:c4:9c:0d:29:d6:e2:e7:94:d6:9f:3e:6f:5c:
                    e0:42:2b:63:d8:69:99:d0:61:1b:51:21:fc:7d:0f:
                    35:ae:1a:33:c8:9a:77:37:47:20:95:1f:c0:a8:cd:
                    5a:e2:b3:96:0a:d5:f9:24:bd:d9:51:56:8e:f6:f7:
                    fd:7c:46:33:19:a9:1a:ae:74:ac:83:b1:00:a1:88:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A6:8A:F1:6C:11:EC:B6:8B:21:71:C5:EE:A2:DF:7D:B7:51:B1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/908965ad-c225-3c6a-9e65-6402687458e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.3.0/24
                  104.234.62.0/24
                  104.234.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:79:f7:92:d9:e4:04:f9:b2:29:70:10:61:98:cf:dc:8c:90:
         1c:0a:1b:c7:ee:bf:6b:0c:a2:58:12:36:76:ed:11:f2:25:4f:
         eb:89:0a:c3:bf:9c:a4:7f:c7:b5:2e:cb:ce:f0:f8:91:f3:70:
         33:f5:f0:1f:bc:63:c8:3d:70:4a:69:79:4a:af:77:43:81:38:
         1b:a3:5a:cc:99:25:10:74:96:04:af:8d:41:41:c9:65:a5:68:
         74:09:1a:4e:ae:f8:32:c7:e0:54:ae:33:a2:5e:0b:28:18:f3:
         73:b5:f1:2e:13:fa:b3:15:05:35:6e:4d:06:70:0c:c1:be:b8:
         62:95:ae:a9:7d:c4:f8:d6:40:ba:e9:79:33:67:45:d9:ca:ee:
         bc:3d:36:d6:18:c9:66:a5:2d:21:67:e2:a9:79:b4:79:69:78:
         62:bf:3d:0d:38:0b:b8:3c:4e:4b:59:6b:e3:7a:0d:a9:bc:6f:
         9c:87:2f:83:50:3f:b7:e6:4a:f2:7d:b2:92:15:cf:a9:32:c0:
         67:7b:e3:3b:e7:d4:06:5d:28:3d:8e:e8:b4:b7:45:12:68:66:
         31:d1:73:02:66:ca:fd:f0:01:33:9c:50:8b:22:5b:7e:2f:00:
         4b:46:2e:c5:5e:81:e6:46:db:77:b1:d1:89:5c:ae:65:74:b8:
         96:fb:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:57 2024 by rpki-client on console-ams.rpki-client.org