Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5059fc2-310c-374b-9039-593d87185c62.roa
File:                     e5059fc2-310c-374b-9039-593d87185c62.roa (raw, json)
Hash identifier:          TGegdJ/yYh5qEFp8L0oRaCQc9KlAvCYiy1oDlywsU4k=
Subject key identifier:   53:89:62:85:35:E3:32:24:87:BF:1A:74:BB:7F:6B:73:1E:FB:2D:82
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848255AEE8E6FDA4C3F88439DC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5059fc2-310c-374b-9039-593d87185c62.roa
Signing time:             Mon 09 Dec 2024 05:15:01 +0000
ROA not before:           Mon 09 Dec 2024 05:15:01 +0000
ROA not after:            Sun 09 Mar 2025 05:15:01 +0000
asID:                     13335
IP address blocks:        104.25.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:5a:ee:8e:6f:da:4c:3f:88:43:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:15:01 2024 GMT
            Not After : Mar  9 05:15:01 2025 GMT
        Subject: CN=4ec4fa01-237e-4891-b9a2-5b524064063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:03:f4:14:5b:b3:19:2c:a2:82:82:89:66:f9:
                    55:36:07:8b:51:0d:5d:1f:6c:6a:12:44:2f:0c:5d:
                    7d:26:80:12:c1:fb:38:56:0c:17:21:a6:f0:8c:6e:
                    2d:ed:11:83:9d:20:0a:13:07:e9:ac:83:af:25:2b:
                    11:c0:18:18:11:ad:2b:f5:2a:eb:c0:59:33:1b:7c:
                    bd:1b:dc:45:38:7a:25:f8:31:0d:08:14:d8:b0:8b:
                    13:13:0d:a0:17:f7:b4:cf:7a:5f:e3:d8:61:e5:85:
                    7d:a3:a9:21:a7:b6:12:a2:c9:ab:27:d2:05:4e:e5:
                    37:81:f6:a4:49:88:d3:19:62:33:5f:cf:74:f5:9b:
                    43:08:96:7a:81:75:46:0e:f2:dd:5f:54:76:77:41:
                    06:38:89:66:92:ed:3f:d0:05:fb:c2:f4:00:ee:77:
                    93:ab:d8:1e:47:63:35:0d:30:5c:00:7d:55:11:d5:
                    22:5c:2c:4e:5f:75:87:a6:88:72:de:9f:d3:1b:c6:
                    7b:e3:df:ec:b8:a6:db:6d:a3:f8:66:7e:b3:8f:f1:
                    7d:6b:89:5d:09:dd:ea:7b:64:70:90:c2:f5:09:e5:
                    aa:5a:86:06:54:17:7f:fc:54:03:33:e9:dc:c1:ed:
                    7d:a8:35:d8:84:91:4e:84:e9:e6:92:69:e9:63:d7:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:62:85:35:E3:32:24:87:BF:1A:74:BB:7F:6B:73:1E:FB:2D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5059fc2-310c-374b-9039-593d87185c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.25.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:5a:6a:da:97:38:f5:a4:c8:3c:55:4d:cd:05:ee:92:47:
         2e:e3:90:ac:aa:fe:91:94:32:10:0f:63:87:93:26:10:42:97:
         85:ac:53:72:28:5a:f7:f8:e7:88:e7:db:0b:59:f4:cd:67:db:
         c2:61:19:61:73:b4:67:e3:ff:59:5c:2d:21:07:aa:71:2c:6b:
         43:2d:8f:86:63:bb:7e:e0:e5:1e:c5:de:21:71:73:b2:cb:c9:
         d2:c9:cc:2a:8a:70:e6:fa:9d:89:49:7a:5d:cd:93:09:c7:5d:
         3e:c4:6f:20:d2:aa:0d:77:13:fe:5f:0c:58:71:a9:32:ae:16:
         d6:66:35:f2:4b:81:e3:33:bf:f0:7e:e6:a1:75:12:36:30:32:
         d1:61:6d:42:62:2c:d8:71:37:2b:27:99:2d:b7:78:c4:a1:7c:
         ad:ee:0c:3b:0c:63:a8:23:8b:89:d2:cf:ce:f9:6a:37:ba:1c:
         76:48:14:36:4a:9b:77:f4:6e:e0:a2:36:a2:0b:bc:94:c6:5c:
         ff:1e:0d:0c:09:c1:a3:bd:4c:53:26:26:a8:a6:38:21:7a:fc:
         c4:f6:17:d7:ce:d4:a7:d8:3a:54:e2:75:24:21:b9:47:16:e5:
         b4:ba:16:e1:1f:19:26:98:51:3e:dc:23:5a:1b:3f:06:19:dd:
         a8:f6:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:08 2025 by rpki-client