Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa
File:                     a967e86a-5d5a-3f72-8e57-9298211b0802.roa (raw, json)
Hash identifier:          UmzdRDh3ki/Or91oPJJRL74jm2NbKyFNMZq/KF1HhU4=
Subject key identifier:   D1:04:37:32:47:FB:4F:E3:F4:53:F0:5B:CE:21:49:0F:8A:30:44:F2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848255B2242E94E7BD7CE315340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa
Signing time:             Mon 09 Dec 2024 05:15:25 +0000
ROA not before:           Mon 09 Dec 2024 05:15:25 +0000
ROA not after:            Sun 09 Mar 2025 05:15:25 +0000
asID:                     13335
IP address blocks:        104.27.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:5b:22:42:e9:4e:7b:d7:ce:31:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:15:25 2024 GMT
            Not After : Mar  9 05:15:25 2025 GMT
        Subject: CN=6175facc-c4d1-402b-88f8-8037e095262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:77:a3:44:9c:f6:70:0e:1f:0d:37:41:4a:
                    64:32:21:a2:a3:7c:f4:c2:57:cb:d4:4e:cb:c4:e7:
                    07:06:90:0b:a9:e0:95:f6:35:3d:f2:8a:c6:c3:17:
                    d5:da:be:19:d2:ce:a4:0c:7e:3f:77:3e:2f:a8:4e:
                    a4:e3:73:85:92:90:7c:71:f5:76:b3:cd:94:e7:12:
                    35:06:84:68:2c:d2:31:33:7b:e9:92:36:f5:84:04:
                    24:f2:07:fa:ec:8e:86:bf:10:d5:b9:73:7d:b8:00:
                    0b:9c:a8:97:75:b9:c8:24:05:b4:1c:72:78:ce:e9:
                    5b:31:11:4d:7e:55:4d:fc:b0:cb:a2:18:08:a2:70:
                    e5:6a:f7:ca:d8:8c:c6:11:76:db:0b:d2:57:80:c6:
                    e1:82:8e:bb:95:28:fb:a0:34:62:fb:65:63:44:7c:
                    ab:f8:31:90:81:e3:b0:93:9e:7d:ab:00:86:0c:50:
                    ad:a8:26:bd:29:c9:d2:43:e7:f7:cf:c8:e8:38:ec:
                    fb:01:43:6e:ad:53:d1:e0:89:6f:2b:7c:36:d9:b5:
                    fb:22:1e:9e:b3:49:84:b7:73:5a:31:94:1a:61:7e:
                    95:42:2d:5a:c2:f5:ee:7a:06:a6:cb:64:15:a1:0e:
                    01:25:dd:44:e3:16:04:ea:00:f8:8f:c7:0d:b4:5a:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:37:32:47:FB:4F:E3:F4:53:F0:5B:CE:21:49:0F:8A:30:44:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a967e86a-5d5a-3f72-8e57-9298211b0802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.27.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:7b:91:4a:a2:b5:7d:9c:5b:28:85:c9:1f:39:3c:08:ae:
         6a:86:25:6d:97:97:aa:96:9f:25:19:20:6b:63:25:22:e6:87:
         c1:7b:b1:0b:ee:25:38:4b:55:3f:8b:1c:f1:59:9c:91:ec:c5:
         82:8d:7c:a9:4e:c1:3d:4e:30:73:2c:ba:91:7a:2b:7a:dd:43:
         b5:ad:f8:35:91:c3:14:22:69:67:f8:22:cc:08:3a:aa:58:84:
         c9:f6:d6:6d:aa:89:39:b5:46:ef:4d:11:af:79:c6:9c:37:b8:
         f8:a7:20:e1:11:da:ee:49:55:87:75:75:54:61:8c:e9:ed:55:
         92:1e:ef:b7:3b:5f:ba:70:90:bc:be:50:08:8a:3c:49:9f:81:
         01:77:ff:50:4d:f7:89:8c:ac:73:df:c2:b2:7a:2c:a8:7b:eb:
         fd:8f:54:73:2e:7c:18:46:c5:1e:7d:83:3d:ec:f3:a9:9f:b6:
         3a:d2:49:f5:4e:af:80:85:17:c5:cf:0a:11:32:ba:67:aa:43:
         01:a8:08:36:af:cf:93:4d:4a:5d:aa:88:c5:3d:8e:71:0a:d4:
         91:c9:28:94:ce:d4:7a:50:40:40:e3:ca:c7:6e:1d:5a:53:24:
         19:46:d3:7f:01:5f:00:bd:52:78:7f:ad:71:05:c1:37:a4:6f:
         1c:60:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:31 2025 by rpki-client