Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa
File:                     7aa385db-0ce4-3f6e-889e-18919de224f6.roa (raw, json)
Hash identifier:          ea7DPUapT4eGh151qYBco6vmazENbVcbYXlcxZmNAeE=
Subject key identifier:   8B:55:8A:39:1E:B7:D4:4B:67:1C:03:20:54:91:C3:DD:CA:5D:67:0B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848254B00B696F1545A5D54A000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa
Signing time:             Mon 09 Dec 2024 04:42:55 +0000
ROA not before:           Mon 09 Dec 2024 04:42:55 +0000
ROA not after:            Sun 09 Mar 2025 04:42:55 +0000
asID:                     13335
IP address blocks:        104.21.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:4b:00:b6:96:f1:54:5a:5d:54:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 04:42:55 2024 GMT
            Not After : Mar  9 04:42:55 2025 GMT
        Subject: CN=8b20bbf8-f6a6-4c96-9f72-d40fbbb1deb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:86:54:15:14:39:50:99:bf:d0:01:3a:53:
                    48:13:b1:40:92:90:7d:e6:e2:34:c2:70:1e:60:a7:
                    97:10:1d:80:01:b9:ea:94:d6:6d:52:5e:1f:4f:d8:
                    fd:e2:3a:0b:da:c0:c3:29:87:78:15:e0:00:94:9b:
                    f3:33:96:0f:a0:49:6f:6b:9a:15:2e:af:92:f1:66:
                    8f:20:0a:50:40:3b:fe:4a:82:86:01:40:01:91:c3:
                    bc:ad:ef:31:0d:f3:dd:c3:9d:ff:26:2b:3e:1e:0a:
                    f3:01:51:18:19:2f:1e:f0:0c:29:e4:db:42:ce:3e:
                    5f:3f:a7:8c:f6:bb:ea:53:15:26:4b:d3:dc:f8:7b:
                    d0:1b:38:37:9a:40:fc:fe:5f:31:39:ba:93:a6:af:
                    6f:45:df:8f:0f:ea:7a:d4:ba:a4:48:dc:43:43:af:
                    8b:d8:b1:61:39:06:f0:d4:f1:9e:78:c5:a8:10:12:
                    d0:b2:63:24:a0:9e:9b:d5:e0:58:91:33:9c:83:37:
                    e3:f4:66:06:a2:23:60:33:7c:e0:e3:71:d4:00:72:
                    b5:ec:0d:ea:6c:14:5f:e9:2d:3f:e9:06:8a:fa:2a:
                    30:94:ca:da:83:df:c5:33:2a:2b:9e:92:6d:6c:6d:
                    98:4c:bd:53:64:bf:cf:cf:46:d3:f6:6d:db:22:4e:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:55:8A:39:1E:B7:D4:4B:67:1C:03:20:54:91:C3:DD:CA:5D:67:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aa385db-0ce4-3f6e-889e-18919de224f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.21.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ba:f8:38:03:18:d1:72:b4:f4:30:2c:64:03:f5:8f:52:50:
         80:15:d0:ff:75:92:d4:29:27:ea:e3:e7:00:55:01:88:3e:5f:
         3d:5c:c6:2d:ac:a7:65:a7:68:6e:5c:e1:c1:ef:73:71:8b:4c:
         a1:e9:73:ea:a2:4f:d6:f3:09:bf:c4:b2:08:79:5a:f2:78:9c:
         a2:85:69:e1:1e:fc:f5:8e:c6:ee:87:d5:c8:78:0f:8b:6f:ca:
         03:17:99:2f:5c:28:ec:b8:60:c5:04:fd:5c:4f:36:ab:55:7c:
         58:38:fa:39:de:5d:96:b8:9e:50:34:63:9b:7f:93:6b:8c:94:
         ac:bd:08:d3:06:9f:82:78:6e:ac:0b:56:c3:2a:8b:bc:4a:57:
         2c:b3:fc:73:6b:b6:a2:3e:cc:2e:be:cd:1e:6e:b8:6b:24:0b:
         42:c7:ba:71:fe:f0:ae:fe:ef:5f:ab:92:9d:95:15:e8:91:85:
         e4:d3:cc:61:66:a5:31:43:29:54:ea:49:54:e7:8b:36:9b:2b:
         1c:87:8d:68:04:b8:aa:84:26:52:9c:c8:f7:ef:ba:1b:3a:fd:
         82:e6:35:33:bb:ef:80:7c:4e:3e:4f:0d:1f:ff:29:b0:8c:ec:
         b3:d8:da:a0:9d:3c:66:9f:7d:67:95:19:25:e6:ad:1a:c4:28:
         50:84:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:28 2025 by rpki-client