Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa
File:                     c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa (raw, json)
Hash identifier:          mPteVvPKrcWtu3CPQGN7Ucu/lUZAMSVwM88H4krSBAs=
Subject key identifier:   BA:CC:13:20:A6:A6:E0:84:98:5B:73:FA:C8:21:94:E1:31:FD:0D:E1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827AA4BFC7F87D46C5613E638
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa
Signing time:             Tue 10 Dec 2024 01:06:32 +0000
ROA not before:           Tue 10 Dec 2024 01:06:32 +0000
ROA not after:            Mon 10 Mar 2025 00:06:32 +0000
asID:                     13335
IP address blocks:        104.31.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:aa:4b:fc:7f:87:d4:6c:56:13:e6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:06:32 2024 GMT
            Not After : Mar 10 00:06:32 2025 GMT
        Subject: CN=8d41b9e8-1499-4537-be13-790b14e58ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:3d:1b:65:13:50:7c:03:7a:95:bd:f3:82:
                    84:8f:8f:f9:56:6b:f8:55:3c:b1:da:53:33:07:ff:
                    aa:e9:39:3e:11:20:99:d9:32:9c:5e:09:b3:08:aa:
                    37:d5:27:5d:12:70:d3:3c:81:88:b6:5f:f9:24:2b:
                    c3:56:87:fd:d9:52:b3:85:90:ba:1a:0b:24:da:11:
                    b2:81:1e:05:3b:2f:91:8d:2c:2e:18:ae:e5:d6:f2:
                    4b:ec:a3:03:01:41:e8:cf:31:f3:29:e7:77:4c:b2:
                    45:b8:b7:15:db:ce:43:63:70:11:00:c1:03:58:93:
                    0a:e9:c2:5b:6b:a3:62:0a:b3:11:6f:31:04:65:90:
                    bb:7d:54:3a:e6:f0:10:ef:f2:16:87:a8:d3:f9:1c:
                    47:a5:c1:3b:74:c1:4c:0b:3d:f9:24:93:e9:e5:24:
                    82:01:d9:2a:9d:f8:7c:ee:e3:ed:d3:d7:c7:f9:0a:
                    35:f2:73:6a:1e:b3:3b:f5:b2:e0:32:14:69:bd:6b:
                    d9:3a:6e:c4:13:b2:b6:78:64:87:10:90:23:9f:b7:
                    0b:d9:d4:9c:ff:bf:77:54:60:9b:09:24:fe:19:91:
                    3e:87:b5:71:a2:6b:14:4a:ed:b7:08:0c:28:d8:94:
                    69:ec:3a:3a:5b:f3:00:fb:25:f5:44:1f:1b:51:47:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CC:13:20:A6:A6:E0:84:98:5B:73:FA:C8:21:94:E1:31:FD:0D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c77ddfca-7a39-3db1-8d38-b9cb6c991512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:25:82:65:69:d5:32:35:08:fb:31:04:24:f9:39:05:08:
         f7:ef:d0:87:88:a8:89:76:0b:41:dc:e1:85:ce:3a:b0:d9:0a:
         72:83:a8:fe:23:de:16:fc:a1:ea:56:62:c0:40:98:aa:ff:10:
         c6:c6:9a:f5:2b:d7:6d:39:23:56:5b:0a:cf:5a:92:ad:9e:6d:
         a7:6e:ef:c5:4a:da:81:9b:bf:b4:c9:59:e3:6f:1d:97:0e:8f:
         3b:79:60:cb:b0:04:35:aa:bb:a8:46:01:23:9d:c2:cf:28:83:
         fb:d2:ea:82:da:41:b0:ec:d9:50:a2:c7:68:ca:a3:d8:d0:64:
         ef:3f:92:78:3d:51:fe:d4:c4:61:24:55:2f:a1:ef:74:ed:22:
         ed:86:0e:fa:45:d0:31:45:7f:62:9b:66:59:36:30:de:db:c2:
         fb:e8:1e:9b:cf:a7:07:9f:0b:56:de:a4:29:95:ad:66:9b:4d:
         04:99:55:f8:3e:8c:86:ad:88:cd:dc:e9:b7:bb:59:f8:d0:0e:
         66:e5:c4:e9:74:cf:ee:ce:2d:30:62:13:cd:01:a3:df:85:4d:
         31:78:f4:ae:02:1a:12:2a:0f:72:41:87:4d:79:4d:1f:83:d0:
         f5:d3:45:3e:6d:45:9f:d7:9e:33:01:de:8b:62:f3:08:fc:1a:
         0c:f1:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----