Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa
File:                     06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa (raw, json)
Hash identifier:          e7l/0ekkQgHoC9m0H9C4fCT5QMNVkwarwoLCpPP/GA8=
Subject key identifier:   7A:A0:3A:05:5E:17:E3:CF:E7:66:F7:46:96:7B:73:4C:CC:3D:6F:AF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094CF7C311C42D61BCCC7E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     395973
IP address blocks:        104.134.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:cf:7c:31:1c:42:d6:1b:cc:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=bb7422e7-52e2-40e9-b2cb-bdde579d333b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:32:b0:8c:16:8e:9b:82:9a:2f:ba:73:ab:
                    1f:a1:0c:5d:37:e5:8b:ed:b6:d7:d4:c6:49:0a:67:
                    ef:6f:dd:0a:7c:72:2f:da:2e:6c:0c:53:f2:ce:67:
                    86:ba:03:55:c0:ae:de:d9:ea:ef:d6:84:66:e9:07:
                    13:ff:5a:70:44:f0:7d:a3:56:25:48:fd:d3:d8:a9:
                    36:60:4b:71:1e:0b:c4:d9:05:9a:ce:26:48:e6:49:
                    b5:c4:9f:ee:71:a7:9f:96:c5:82:8f:57:b3:3f:38:
                    07:37:68:44:7d:bd:c1:7e:71:9a:72:78:60:83:bb:
                    cc:34:34:ac:de:b8:ab:b8:b6:6d:15:cf:0f:63:31:
                    ac:a6:c0:a6:9e:7d:16:ae:d2:3a:cc:04:fa:5a:46:
                    81:84:8d:88:19:c1:0c:69:9a:73:da:c8:a1:84:4e:
                    f0:6a:2d:61:28:ea:c4:de:5b:b3:f1:02:b2:4d:88:
                    04:be:6b:1c:f2:62:ac:16:cb:24:fd:60:94:44:3d:
                    3d:90:68:85:e4:e9:9b:7c:c2:e8:ef:08:2a:63:e1:
                    d0:83:04:5c:ad:b5:7a:be:16:17:3a:e8:ea:95:0d:
                    d5:41:10:93:e0:4d:2c:cc:6e:d4:af:ce:b9:21:f0:
                    94:6c:a5:20:9b:da:47:26:20:0d:58:89:35:33:30:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:3A:05:5E:17:E3:CF:E7:66:F7:46:96:7B:73:4C:CC:3D:6F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:7d:66:c2:44:92:49:c6:d7:10:94:2a:ae:df:5c:a2:13:
         7f:61:1d:a7:08:46:e8:e2:97:12:ab:19:86:41:f6:10:1a:58:
         34:a2:44:5d:6b:ea:a4:a7:59:d6:20:98:39:15:a0:a1:4f:cb:
         98:50:e3:de:e4:e3:59:bd:c7:0d:48:b0:f3:89:d6:1d:43:e7:
         2c:10:f5:03:94:39:5c:0f:5a:69:1c:04:27:8f:76:68:2a:8b:
         4c:97:30:bc:f8:4d:ce:28:41:a6:89:dc:8e:dc:a7:77:05:6a:
         d8:af:10:57:8a:e6:bc:2a:a1:c1:3a:2f:c1:27:af:d6:e0:6f:
         26:45:0c:7d:fe:0c:ad:36:60:e2:fb:90:81:3e:d9:e8:1b:13:
         56:da:28:9d:5d:b1:41:5b:f7:68:06:a3:e5:a0:9b:b2:07:06:
         9c:ff:6c:5c:50:37:d9:ec:4f:77:7e:d7:90:ae:15:ad:40:37:
         f6:2b:06:48:70:84:29:41:09:2c:90:cf:7a:d9:b7:c1:96:61:
         66:25:41:d0:74:fe:8d:41:77:34:5e:19:72:e1:f4:5b:a6:3d:
         e1:c6:b4:87:a0:9a:8a:ac:6d:e4:e5:36:ac:91:ec:f6:14:2b:
         3b:10:d7:88:fc:ea:a4:0d:84:ba:69:87:da:42:54:2b:ae:90:
         97:f1:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:41:32 2025 by rpki-client