Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc8c3d06-ada6-3611-85f8-8f3595325473.roa
File:                     fc8c3d06-ada6-3611-85f8-8f3595325473.roa (raw, json)
Hash identifier:          RprUgOE6vVaJOSx92Rw5xBzZS5jLHSfsl3B4VCWb3XY=
Subject key identifier:   E2:9B:41:09:83:EE:AA:C9:6D:E2:0C:34:54:FE:07:33:C6:1B:CD:48
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848255985C1A0045315A3EA5DE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc8c3d06-ada6-3611-85f8-8f3595325473.roa
Signing time:             Mon 09 Dec 2024 05:12:10 +0000
ROA not before:           Mon 09 Dec 2024 05:12:10 +0000
ROA not after:            Sun 09 Mar 2025 05:12:10 +0000
asID:                     13335
IP address blocks:        104.24.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:59:85:c1:a0:04:53:15:a3:ea:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:12:10 2024 GMT
            Not After : Mar  9 05:12:10 2025 GMT
        Subject: CN=f9e8e8ac-e557-4b79-b36f-b329d065662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:98:10:11:86:5c:e1:41:51:67:23:33:0a:
                    dc:59:b6:70:dd:6c:41:b5:5b:3f:12:14:44:5c:af:
                    14:26:c7:0c:8e:9f:cc:71:09:f4:97:de:3b:58:8d:
                    2a:4c:6c:fc:03:bd:5a:92:58:27:ea:93:9d:a1:40:
                    00:aa:f4:45:a5:89:87:53:99:66:c9:c4:5a:42:10:
                    57:2c:6e:68:a4:50:4b:59:93:a9:52:e8:1b:4b:08:
                    8e:c9:74:ee:24:02:92:6a:63:28:fd:d0:de:0d:87:
                    45:af:15:c7:e2:99:40:b3:a2:17:0a:45:df:2b:92:
                    53:c3:b2:9b:dc:28:6f:b4:0b:ec:cc:95:f8:8e:39:
                    4c:dc:fe:a8:69:ec:3f:3d:92:32:b3:f8:d0:21:79:
                    35:c7:76:92:50:1d:83:13:cf:a9:10:2a:72:fe:08:
                    f7:25:76:c6:ed:47:c6:39:31:f8:fb:d8:f9:eb:9b:
                    21:35:89:73:64:59:8a:42:b0:cf:be:c3:f7:bd:67:
                    07:d9:3f:06:c2:b2:ad:5c:4f:17:89:f9:75:d9:b8:
                    eb:f8:a6:b8:42:e8:77:c8:11:34:fc:9a:eb:e8:7f:
                    af:c0:22:2d:2b:c9:7b:e9:1b:4f:c5:51:d1:41:05:
                    60:78:f5:fa:d0:31:c0:32:c9:97:ee:af:f6:bd:3e:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:41:09:83:EE:AA:C9:6D:E2:0C:34:54:FE:07:33:C6:1B:CD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc8c3d06-ada6-3611-85f8-8f3595325473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:05:74:22:22:af:57:e2:b8:86:8b:49:20:68:b3:b3:e6:68:
         21:d8:47:84:7b:b2:af:12:0c:63:f0:89:49:07:af:de:99:bb:
         dd:da:b7:12:27:a0:2f:3b:89:1e:a0:5d:be:bc:3c:a3:76:8c:
         3f:15:46:fe:13:52:85:1b:2e:d5:8c:22:9e:59:5e:e0:97:c7:
         fc:60:a2:43:32:89:f0:c1:0c:63:d2:58:b5:fe:81:d6:fd:f3:
         71:61:ea:bd:2b:25:35:4a:2f:27:1c:66:7e:af:92:00:f3:32:
         d0:fd:10:89:a6:0c:12:93:18:57:88:d8:39:44:4f:36:80:fc:
         d6:81:47:d4:ea:ff:cb:0b:01:64:51:b6:24:45:99:f6:49:f8:
         92:db:fc:9b:9f:e2:70:d9:76:95:fa:29:7e:df:fe:90:1a:3e:
         16:35:79:55:22:d3:cf:86:02:be:10:9c:a6:10:aa:71:aa:e3:
         c7:91:80:d3:3e:fb:df:b4:02:3f:7d:3a:16:28:80:fb:93:fd:
         4d:f5:de:12:d8:d3:ab:7e:12:58:87:70:5b:d9:77:44:ee:77:
         95:e1:bb:71:2b:c3:c9:44:9b:12:46:4d:b6:30:b8:ac:80:6f:
         10:5c:5d:db:5a:81:7e:90:28:ae:6b:46:33:9a:a8:4c:06:f8:
         ab:20:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:12 2025 by rpki-client