Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/175b6008-626a-34b4-836e-236c62267233.roa
File:                     175b6008-626a-34b4-836e-236c62267233.roa (raw, json)
Hash identifier:          Wp4Ao6bvkH2qi/VlFQK2ru9KUynpQE6QGH9xKn7sWDQ=
Subject key identifier:   5E:51:CA:1A:5D:12:A2:B0:E7:EF:33:6B:9F:6C:7A:48:71:30:A4:3A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827A9498296748B0F00DB3900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/175b6008-626a-34b4-836e-236c62267233.roa
Signing time:             Tue 10 Dec 2024 01:04:30 +0000
ROA not before:           Tue 10 Dec 2024 01:04:30 +0000
ROA not after:            Mon 10 Mar 2025 00:04:30 +0000
asID:                     13335
IP address blocks:        104.30.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:a9:49:82:96:74:8b:0f:00:db:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:04:30 2024 GMT
            Not After : Mar 10 00:04:30 2025 GMT
        Subject: CN=37160a36-9349-4695-9782-b61e8af744b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:58:70:87:0c:38:5e:8b:ae:50:da:90:17:
                    5b:c2:1f:26:e8:b4:5c:60:9c:07:a6:9c:e6:b2:c2:
                    28:37:aa:da:12:a1:2b:b6:34:06:84:8a:f5:6a:a2:
                    44:48:17:8a:5b:df:c8:92:19:24:0f:18:81:3d:9f:
                    90:b1:c3:ed:37:f2:d3:69:53:78:ae:5c:5d:39:7d:
                    f1:6a:bc:14:13:cf:41:f8:14:ed:2e:6f:1a:50:5f:
                    1e:66:c3:41:44:37:76:57:ae:16:2e:df:a3:f1:8a:
                    7d:a5:57:e5:9d:01:48:de:39:19:1b:1a:07:f6:27:
                    bd:51:86:29:7b:cf:66:31:ad:13:3b:fb:62:b5:5e:
                    21:3f:8f:73:bd:97:0d:56:47:60:6b:ba:13:68:d6:
                    50:79:38:e3:15:56:cd:9b:7d:82:85:08:63:d0:1a:
                    9d:f9:78:c1:33:0a:b7:21:08:ac:30:fd:11:11:96:
                    27:73:52:1f:3c:6a:e0:07:0b:7d:24:3f:36:ef:6d:
                    d2:e4:cb:34:2b:62:bc:d6:ba:88:4a:95:59:30:23:
                    b4:1e:a2:5d:c1:ea:b6:2b:ed:8c:54:3a:7d:a7:e2:
                    27:86:e3:84:64:bf:61:e1:6d:b4:b2:53:b7:a8:aa:
                    2b:4c:f9:3c:31:9e:03:68:34:24:f8:21:7c:f0:fa:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:CA:1A:5D:12:A2:B0:E7:EF:33:6B:9F:6C:7A:48:71:30:A4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/175b6008-626a-34b4-836e-236c62267233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.30.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:3f:ed:33:ca:1d:1d:20:be:6c:1c:2f:97:5a:34:c4:3c:
         e7:e6:f3:c0:48:57:ef:f4:3d:2c:ee:a3:a1:c0:5a:1f:13:f8:
         d0:b6:4a:eb:6c:35:f0:26:84:6b:58:71:e9:14:08:08:a3:48:
         16:dc:e0:d4:28:ab:ab:09:a5:2d:c2:48:a2:2e:13:95:d4:9d:
         75:61:28:ad:f1:50:08:de:4f:2c:f4:c2:61:c0:7d:a9:28:53:
         b7:a4:c5:22:b4:31:14:75:c3:0a:6c:5c:26:57:fe:ee:e5:21:
         4c:b4:e5:93:4c:86:cc:8c:ec:47:75:25:0d:67:bd:13:cb:42:
         2f:3c:cd:84:75:3c:2f:9c:54:bf:d2:b8:ea:c7:22:2d:4f:9a:
         b1:0f:66:5f:ca:0d:d2:aa:f9:fa:db:3e:75:a4:3c:d1:76:2a:
         7f:b8:a2:e6:99:6d:e1:48:40:93:37:af:91:70:6b:35:ef:25:
         65:84:bf:2a:00:8c:86:36:50:13:aa:73:ff:be:26:ca:5c:0a:
         fe:f9:7f:32:53:cc:71:d3:19:30:c6:3e:2c:7b:65:94:9a:85:
         95:cf:6d:c8:45:57:3a:e5:97:cb:57:9a:fe:f0:d6:1e:c5:a0:
         4e:c6:8f:0a:93:93:5f:31:94:b3:0f:10:5a:23:ea:c3:7f:47:
         7b:b4:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:24 2025 by rpki-client