Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa
File:                     6443b9d0-16ce-3791-bb89-ce585f607c9d.roa (raw, json)
Hash identifier:          TzkX+qz1lDbExvqNeQrEOpDnrPpz6JiZlgRfivnrzC0=
Subject key identifier:   07:8A:6C:4C:03:B8:94:1C:89:CE:7C:98:5E:1D:EB:B7:CB:56:89:35
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827AA7FF6EF77D5A189ABD300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa
Signing time:             Tue 10 Dec 2024 01:06:57 +0000
ROA not before:           Tue 10 Dec 2024 01:06:57 +0000
ROA not after:            Mon 10 Mar 2025 00:06:57 +0000
asID:                     13335
IP address blocks:        104.31.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:aa:7f:f6:ef:77:d5:a1:89:ab:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:06:57 2024 GMT
            Not After : Mar 10 00:06:57 2025 GMT
        Subject: CN=e95b4e83-63a6-4f61-8e72-484eea6301a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:92:bd:75:04:4d:8e:12:54:83:bb:9a:8a:
                    8a:f5:ef:e0:97:ca:09:e3:15:8c:8e:26:8f:4c:96:
                    9c:60:30:b1:64:90:33:28:60:31:46:71:5a:8a:83:
                    de:74:a4:34:88:46:28:72:d5:7d:fb:68:5e:e4:69:
                    ff:f0:ee:8d:2d:54:4a:e3:bc:fa:87:7c:8c:33:5c:
                    fe:bf:1c:d0:7d:01:0a:17:3e:d0:2b:24:99:93:bf:
                    95:2b:29:82:c6:2f:9a:d1:a1:ac:d6:ec:bc:91:2c:
                    ee:a4:76:aa:14:84:bc:d0:09:31:53:e6:a8:79:c3:
                    1b:b4:a0:a8:44:3f:7e:28:1b:76:26:c3:85:54:2d:
                    34:51:8e:9f:07:bf:0b:7d:9a:58:b1:3b:73:19:5d:
                    a5:82:84:40:ca:cf:d0:f3:97:12:c2:85:1e:23:70:
                    98:28:f7:a5:e5:75:0c:2a:ec:67:a7:c1:2b:99:e8:
                    9c:f6:a1:f3:cd:2e:ed:57:fc:ad:59:14:57:99:35:
                    5b:31:c9:e0:86:ee:26:f4:2b:ea:c1:1d:d7:3c:b2:
                    9b:a9:59:7e:4c:13:dc:e1:95:56:76:d9:81:9f:ff:
                    a1:1a:dd:8a:06:11:5a:44:94:4b:52:9e:34:9c:8f:
                    67:a4:a1:b8:d5:25:ec:61:58:76:a0:90:66:1b:55:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:6C:4C:03:B8:94:1C:89:CE:7C:98:5E:1D:EB:B7:CB:56:89:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6443b9d0-16ce-3791-bb89-ce585f607c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:a4:63:cf:c9:e1:48:53:a6:9d:a5:86:ef:57:76:20:8e:
         7d:d4:2b:b2:05:aa:64:6e:04:1f:67:17:8d:da:56:33:4e:19:
         5e:52:fc:a1:12:87:06:ae:b6:2c:99:66:10:06:08:92:2b:5e:
         9d:e8:79:68:5b:76:0e:c9:6a:a2:7e:86:80:19:72:e4:3d:3c:
         a5:2e:45:31:8f:a2:aa:33:ac:68:bd:8e:2e:38:4d:d0:07:ff:
         8c:d5:91:75:ed:6a:28:44:28:ca:05:9c:73:f8:d9:cc:79:8c:
         69:06:08:45:c5:6b:13:bf:1d:13:56:06:07:e1:aa:09:f3:95:
         c2:eb:51:4c:fd:99:42:7b:b5:95:81:95:46:2d:8f:39:57:d2:
         22:48:bc:0a:cf:df:e9:7e:ab:89:84:ac:18:fd:2d:d0:4b:8b:
         8d:48:81:eb:28:6b:b1:37:fb:1b:09:3e:b0:f5:d2:0c:d4:3c:
         04:d4:be:56:b4:71:ef:d8:76:f6:96:a3:8c:1b:84:48:4f:ad:
         b7:1f:be:df:c0:ce:a0:4e:5f:b4:32:00:4c:aa:a9:bc:f6:15:
         25:0b:8c:d3:78:85:86:67:43:4d:c4:ae:61:a9:b9:a9:8b:6e:
         64:cf:02:4f:6e:e6:52:34:87:e1:18:d3:fb:c9:ca:cf:43:e4:
         d4:2c:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:35 2025 by rpki-client