Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
File:                     79b649e5-7d33-3922-8433-6718a2039a8b.roa (raw, json)
Hash identifier:          Fwh/Lh7dd5G4FpDiHJ/c6L45ukzcVNJe0vVoue/NrFI=
Subject key identifier:   89:CE:82:57:1C:03:E1:58:83:A1:07:53:B2:F4:AC:C0:68:BC:D4:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482559A866F8580DA4ADA26600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa
Signing time:             Mon 09 Dec 2024 05:12:27 +0000
ROA not before:           Mon 09 Dec 2024 05:12:27 +0000
ROA not after:            Sun 09 Mar 2025 05:12:27 +0000
asID:                     13335
IP address blocks:        104.24.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:59:a8:66:f8:58:0d:a4:ad:a2:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:12:27 2024 GMT
            Not After : Mar  9 05:12:27 2025 GMT
        Subject: CN=88f1b595-3106-43a3-ac9d-843927703060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:91:3e:41:1f:fa:17:2a:36:df:25:6f:7f:
                    ef:b0:60:db:80:5e:b8:9b:12:95:ff:5a:f8:ce:ca:
                    87:08:a9:39:08:af:d5:4e:6f:93:67:62:dc:dd:4e:
                    ba:d1:5b:c0:80:7c:48:74:87:88:7e:a8:e4:e3:dc:
                    66:a8:1d:df:e0:af:74:1f:e6:c6:fb:98:e4:84:01:
                    0b:6f:b0:8f:4c:b7:e2:74:1a:14:09:5c:23:4b:7e:
                    7f:4f:dc:e0:ac:c0:92:51:70:e9:44:29:e0:fe:55:
                    0a:31:ca:f0:ae:f7:34:f4:da:31:e8:fc:9f:af:65:
                    ee:89:e3:e4:57:4c:57:b1:28:91:6e:15:f5:9c:38:
                    e2:0c:f1:c2:d2:97:25:13:0e:4c:48:d9:6e:76:d7:
                    1e:06:da:24:a9:7f:22:29:fa:29:c2:c9:83:9f:ea:
                    f0:2d:58:1b:39:89:60:1a:0c:2b:34:5c:41:9e:5a:
                    27:69:ff:da:94:ea:4a:6d:ac:c9:e7:54:70:28:7e:
                    68:37:f7:98:40:2b:0d:c4:5a:d0:0e:6c:48:ee:93:
                    ef:cf:61:a6:b0:d0:e5:62:5a:2b:80:67:48:f0:72:
                    34:ce:49:e4:81:d7:85:47:17:a4:02:f6:e6:fe:03:
                    48:ed:95:fa:68:7e:28:9d:b3:b6:3d:5e:ce:5b:3e:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:82:57:1C:03:E1:58:83:A1:07:53:B2:F4:AC:C0:68:BC:D4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79b649e5-7d33-3922-8433-6718a2039a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:d7:10:c4:87:30:56:ac:13:11:7e:35:35:fb:b3:5d:91:b1:
         57:04:e9:fd:73:02:84:47:ac:9b:b3:27:17:18:b9:b0:11:ba:
         c6:eb:03:a1:b8:e9:ff:d3:15:a9:7b:b0:33:e5:97:ce:6e:8b:
         80:24:3f:5d:64:d4:0d:ba:85:72:7c:b0:9b:c8:3f:4d:d8:f1:
         62:ed:51:bf:4a:c7:b4:9c:85:84:80:f5:9e:fb:b8:fe:be:35:
         cc:26:c4:5b:4c:72:9e:c9:77:28:f0:45:a6:1e:c3:0d:b4:14:
         cf:b7:35:28:39:83:27:ac:df:78:5e:4d:85:be:66:0f:da:c7:
         1d:ee:02:f2:fb:05:52:f6:05:57:35:21:0b:97:bd:82:69:f8:
         ed:2e:4a:96:02:12:ce:94:82:11:8e:a7:44:b9:e8:ad:d5:86:
         84:4d:6e:03:a4:6e:fe:ae:24:39:6d:6d:76:e8:e4:89:b8:a9:
         73:ef:5a:ae:34:7b:5c:16:ad:0d:35:c0:a0:d3:4d:51:b9:47:
         b2:83:94:e4:29:70:3d:c7:ae:6d:de:74:c1:52:7b:0b:ca:82:
         e7:a7:d6:06:f4:55:71:64:53:b6:2c:67:b7:3d:8a:e6:0a:fd:
         f2:e5:98:9e:27:53:c5:cd:a3:1e:0c:68:09:48:4d:95:36:66:
         99:c8:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:35 2025 by rpki-client