Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa
File:                     47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa (raw, json)
Hash identifier:          Qal55lbMue+FFSgjf3PsHc14LdYOJ57KSZ1Uxucwsso=
Subject key identifier:   F6:E2:D1:F2:9B:0E:EE:56:91:61:38:D0:4D:70:56:7F:7B:89:64:77
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827A168FA8847C49358F5237C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa
Signing time:             Tue 10 Dec 2024 00:48:38 +0000
ROA not before:           Tue 10 Dec 2024 00:48:38 +0000
ROA not after:            Sun 09 Mar 2025 23:48:38 +0000
asID:                     13335
IP address blocks:        104.29.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:a1:68:fa:88:47:c4:93:58:f5:23:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:48:38 2024 GMT
            Not After : Mar  9 23:48:38 2025 GMT
        Subject: CN=e6846d98-b4d5-4707-ad83-620322a47255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:d7:29:30:58:f8:36:c2:ba:27:ea:c0:47:
                    3a:e2:d3:c6:cb:37:9a:93:73:14:93:e7:cb:5a:a8:
                    b5:c6:e7:ed:31:fb:1e:96:4a:93:21:bd:1d:c3:6d:
                    dd:14:86:27:56:3a:9e:de:84:ff:b9:77:5e:e3:94:
                    0a:d7:71:3c:35:a0:9c:07:fc:6c:46:e8:60:e8:c6:
                    56:b5:b0:ca:f1:c8:b3:b7:e9:9a:1c:df:96:aa:c6:
                    47:b3:9b:24:c0:5e:d7:12:f0:e1:d0:d0:f9:f1:cd:
                    8a:f6:34:fc:ac:48:ef:4e:32:2a:ec:a3:18:7c:3d:
                    3d:47:3f:3c:57:50:8a:7e:d0:95:80:d4:18:73:33:
                    bd:ae:a2:52:99:39:ac:f5:f1:6d:fd:00:8c:3c:84:
                    fd:87:29:3b:b6:e1:f7:c4:6f:02:4a:d9:d1:5a:00:
                    ad:76:32:20:f4:32:93:85:f2:51:d3:af:29:19:28:
                    10:db:8f:48:87:57:34:de:10:57:8d:ee:4f:e4:21:
                    d0:21:90:6d:c0:73:94:b1:83:bb:aa:f7:b2:92:b0:
                    37:7f:d5:04:d3:7a:25:ec:e0:3d:2c:e8:da:1a:86:
                    a4:a6:58:e5:d1:ab:57:f2:71:3c:b4:ea:2a:f8:92:
                    fc:2d:0b:1f:b1:6f:17:83:a9:94:cc:a0:ab:b7:0b:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:D1:F2:9B:0E:EE:56:91:61:38:D0:4D:70:56:7F:7B:89:64:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47c9c5ae-c2b3-3d61-9ba1-b766f730f3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e7:c2:53:25:fc:62:8f:52:10:6c:1f:f6:cd:b7:ae:c5:09:
         0f:75:f8:4b:de:77:31:bf:11:ac:e1:bb:70:0b:7e:b7:e1:71:
         3f:02:6b:75:c4:fd:1b:8b:a0:ea:6b:01:ba:09:3f:87:7c:29:
         37:a0:a2:2b:0b:b2:a9:9a:ae:74:59:b8:74:b4:95:b9:78:1a:
         12:25:55:95:7d:7c:f3:2d:23:62:6e:74:8a:c1:44:c7:29:30:
         97:f0:8f:e6:36:c3:da:9f:d7:9b:15:0e:d8:1e:e6:71:1f:1f:
         1d:46:18:f2:89:00:f8:fa:31:89:6f:28:16:97:cc:3a:69:61:
         e8:f0:10:e4:e3:d0:36:b0:df:ef:c2:bb:45:56:56:25:be:06:
         b3:52:44:28:6f:76:16:91:12:d0:b6:d7:b6:1a:63:8a:e2:e4:
         39:e4:6f:d4:c6:a6:a6:37:9e:9b:36:fb:2a:c4:c8:76:f0:f2:
         10:73:76:e7:dc:b6:df:49:78:98:66:c9:4e:e9:ea:63:f6:d9:
         5b:3f:56:59:2c:fb:9c:ed:b4:d1:5e:eb:e7:66:6a:5e:e4:a8:
         53:34:60:83:f3:34:93:b8:d4:8f:d6:c6:52:82:ca:c0:61:1a:
         c8:40:4b:03:75:a0:d3:ad:95:8a:9e:72:5a:8f:d1:af:16:76:
         0e:b8:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:27:55 2025 by rpki-client