Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa
File:                     c6f54f63-56ea-3839-a951-dd30fc3f2557.roa (raw, json)
Hash identifier:          6xTuxXdsTVn2725jnCI4yd6ahOvVLTb8VaYEtV+oI1s=
Subject key identifier:   14:E1:17:39:CC:BB:FD:96:FA:43:F4:FF:73:92:41:99:01:FD:7B:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827A145DC537F08CBAC83C851
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa
Signing time:             Tue 10 Dec 2024 00:48:21 +0000
ROA not before:           Tue 10 Dec 2024 00:48:21 +0000
ROA not after:            Sun 09 Mar 2025 23:48:21 +0000
asID:                     13335
IP address blocks:        104.29.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:a1:45:dc:53:7f:08:cb:ac:83:c8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:48:21 2024 GMT
            Not After : Mar  9 23:48:21 2025 GMT
        Subject: CN=b6e26169-c1cf-40a0-9b87-90527a9a74ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:c0:79:40:17:af:4a:2d:6b:c1:ee:16:a9:
                    d7:5b:74:3a:af:42:97:62:18:a5:aa:e8:62:51:b1:
                    62:3e:e7:b8:75:93:43:7d:d8:24:8d:fc:2b:1b:02:
                    17:f0:eb:53:3f:92:c7:5d:cb:6b:fb:c5:29:80:ec:
                    e5:b5:ae:81:06:19:d1:db:70:a4:ae:63:13:be:4d:
                    7e:bc:eb:57:af:d0:2b:6e:c5:99:ee:51:ce:82:0c:
                    b0:dc:f9:a6:c2:59:9b:c2:ca:12:b0:35:be:e6:4c:
                    58:a6:8a:01:e5:50:ce:1c:64:a1:3f:93:38:ad:0f:
                    27:2d:cd:31:d4:07:fb:b4:b7:2c:96:d5:33:fb:99:
                    cf:1c:42:8c:06:cb:ff:6c:34:16:d1:a0:72:73:1d:
                    c2:1d:95:a1:e4:82:3d:98:b7:c1:67:93:01:f8:be:
                    df:58:2c:42:40:3a:db:bf:ea:e3:0f:83:88:05:cb:
                    0f:41:a0:ad:08:30:24:5d:45:ab:6e:c2:2e:42:59:
                    ff:d6:b4:85:e0:0a:cc:68:fa:0d:92:c9:a3:20:c1:
                    ed:3c:54:c9:8e:1d:92:00:8e:f7:5f:12:a3:11:70:
                    70:f7:81:96:32:ef:e5:a6:4c:33:f8:8a:c0:c4:ed:
                    86:d0:9e:ff:93:5f:96:f6:83:8f:4b:fb:35:1f:49:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E1:17:39:CC:BB:FD:96:FA:43:F4:FF:73:92:41:99:01:FD:7B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c6f54f63-56ea-3839-a951-dd30fc3f2557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:66:8c:b2:c0:fa:42:c6:09:d6:7a:a3:4b:a3:76:ec:8f:
         f4:88:6d:bb:8b:79:39:c6:c4:d8:4b:50:8d:78:a9:fe:2f:b5:
         e6:03:ac:da:84:be:f6:93:e4:79:7f:31:50:4d:3f:3b:58:cb:
         b8:82:6d:d0:be:ec:59:5d:70:ab:37:9d:2d:42:72:e0:62:14:
         38:96:b6:82:a0:24:5e:f5:33:ea:ed:e5:00:b5:ca:1f:aa:73:
         c1:3e:f6:59:79:e9:9a:01:ee:e6:fe:6d:18:f7:f0:be:12:57:
         b6:e2:67:a4:58:c9:08:d9:55:2e:7a:10:b2:1b:f3:a4:1f:5b:
         3a:3f:da:c5:83:94:72:14:3a:57:73:85:b5:6d:82:a0:9c:e7:
         75:2b:b6:d8:a6:a1:01:aa:fc:19:f1:46:f6:2b:a6:e0:05:92:
         6e:b0:c2:56:b6:82:1f:1e:e0:f5:79:a4:3b:b7:06:04:e2:fd:
         10:42:f0:8e:46:47:34:8b:b6:d5:41:87:a4:ff:cf:c7:2f:f2:
         95:7a:cd:88:bb:50:71:3b:bc:01:cd:53:e0:08:78:4e:59:ec:
         e8:29:8c:f3:dd:51:df:29:30:f9:62:32:bd:26:c8:3d:a0:a2:
         ab:db:c8:f1:84:cd:e6:bd:d1:5f:d3:76:c4:53:4f:34:57:f1:
         f4:e6:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:15:58 2025 by rpki-client