Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
File:                     77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa (raw, json)
Hash identifier:          HW9xmk3uGn2xOi8Z8RF3JSL2CMoFbUO/Rp7z5e4zxAw=
Subject key identifier:   B2:A8:92:78:22:66:FD:91:EF:25:EB:A4:AC:8A:B4:DD:29:32:AB:CC
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F432858485E35B269773AD05D3E6BFC00
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     20278
IP address blocks:        104.128.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b2:69:77:3a:d0:5d:3e:6b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=ffdc4d5a-91fa-4766-a590-215e93469a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:d3:07:fb:88:91:d2:ad:9a:2f:3b:54:0c:
                    de:47:35:fe:94:5f:dd:f6:31:cd:de:4d:13:4d:f4:
                    6a:4b:bf:29:d3:17:3c:f0:fb:3b:32:f8:78:0e:be:
                    49:4a:39:1c:df:e9:d0:46:73:72:b5:98:0f:e5:95:
                    e4:cb:0f:5e:07:9e:de:dc:61:85:2c:7b:c4:be:a6:
                    5f:fd:86:c9:cc:40:fe:ab:9b:41:28:d6:fc:15:bc:
                    91:f7:4b:e5:1f:d3:50:2e:20:17:e9:60:fb:2d:9c:
                    9b:94:27:bf:f8:2f:7f:14:fe:17:a6:5a:77:a0:7e:
                    00:a9:ba:fa:ce:b2:4a:6e:c0:c8:10:b5:44:6e:24:
                    c3:1b:71:03:1f:23:f9:6b:22:19:10:31:dc:84:10:
                    02:a0:26:3d:af:45:34:2b:81:58:bc:15:91:2f:90:
                    b2:2e:bc:03:fe:52:d6:6c:18:89:59:cb:83:18:f8:
                    dd:ad:a6:40:d3:fc:f1:e7:a6:d2:d7:85:f0:f3:95:
                    a7:2b:f3:89:c0:a0:61:01:2b:2f:0f:b7:c7:36:9a:
                    b0:3b:27:46:a9:a8:52:ed:b1:b7:1f:84:e2:0d:52:
                    fc:17:84:f8:a5:d3:25:50:e8:9c:62:10:53:e9:b0:
                    b9:f0:57:df:d4:6e:c7:13:7e:07:3c:c9:4e:96:e7:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A8:92:78:22:66:FD:91:EF:25:EB:A4:AC:8A:B4:DD:29:32:AB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:46:e8:c5:52:d0:c3:44:3d:44:e9:8a:ee:ae:9e:8e:87:66:
         19:cd:9f:67:05:a2:2c:25:6b:e6:87:b9:1d:ec:45:84:0c:97:
         57:d1:f4:66:71:4b:38:ec:86:d1:1a:ee:58:54:5a:8e:da:9d:
         58:a2:a0:8a:69:b8:1e:00:d9:82:78:64:ec:a9:43:7d:c2:e7:
         2e:77:dc:7a:82:b8:54:1e:bf:d5:18:45:44:e0:40:9c:f7:74:
         aa:c3:02:24:78:86:b3:4c:40:ae:be:be:ce:4f:cb:b6:58:57:
         78:7e:04:0f:26:ab:5f:b8:39:c4:e9:ab:8d:d3:30:25:79:21:
         e1:c1:e7:07:f8:6f:b6:7e:f7:31:9e:af:0f:55:30:4e:08:ec:
         3d:5c:fd:6b:70:3e:3c:08:28:cf:09:a7:e6:1d:21:40:0a:e6:
         da:7a:b8:36:13:52:f8:b2:49:1f:cf:57:b0:c4:64:13:49:38:
         85:da:31:75:9b:b6:cd:e0:19:57:d5:11:f5:04:a8:13:3d:6f:
         06:28:28:cf:e0:31:22:e4:16:d4:3f:77:f2:df:fe:70:4c:86:
         c8:1a:8e:6e:38:43:14:e3:dd:d2:65:13:43:96:ff:d9:7b:4d:
         f0:67:d4:5a:a2:1d:d7:67:19:28:fa:23:3c:76:e1:9f:8f:95:
         dd:47:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:43 2025 by rpki-client