Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
File:                     61ea1429-2237-3dee-95fe-89a342c89790.roa (raw, json)
Hash identifier:          ANiDFMkyBJPtZJxUCGLGb164qJ44hNyG9UDtxVIfCDk=
Subject key identifier:   CC:DF:78:E1:A8:77:DC:41:71:A4:65:3B:80:78:74:F0:D0:CA:3B:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094DD7E399F252EAEEED200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:dd:7e:39:9f:25:2e:ae:ee:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=5cb8e4cc-b4cb-431a-93d8-ba00766bbfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:08:63:af:5e:d5:6c:a5:6a:cf:71:f0:1f:
                    11:ad:c4:df:e2:d3:7b:ed:60:93:c3:92:f6:3f:a2:
                    ce:10:5c:69:f2:01:76:03:88:b5:c3:ba:18:be:16:
                    f3:12:7b:b9:ac:93:92:25:b4:7c:ef:43:30:23:81:
                    ab:22:ba:98:9a:a8:92:a3:cb:ee:72:23:6c:2e:ea:
                    c1:ea:45:fb:18:9a:db:ab:2e:23:8b:32:32:95:36:
                    94:5d:3a:7c:2a:6f:d5:77:d5:e1:b8:f9:6a:de:83:
                    c0:00:51:4a:ba:5d:97:c3:69:61:c0:a7:8c:9e:bb:
                    ce:aa:48:9f:55:ac:0d:23:8a:b5:4d:6e:08:63:1f:
                    d5:67:9e:e7:3a:9f:77:e2:00:c6:97:d9:0a:d6:bf:
                    50:f3:02:67:2f:59:5e:86:10:88:36:7e:c7:de:bd:
                    40:d2:06:47:51:d1:d6:06:51:c2:9a:03:fa:db:2b:
                    ec:74:0c:dd:66:23:28:21:dc:59:1b:91:7a:77:2d:
                    82:9e:bc:02:f2:92:19:84:9d:d1:df:cd:da:fb:70:
                    6d:ad:f2:42:53:c2:a8:b5:77:f4:79:86:ff:a8:bf:
                    80:b4:c5:54:49:c4:c2:06:a2:c6:4b:b0:e4:75:e6:
                    27:34:71:0f:35:03:87:ee:43:d7:6a:9c:a3:df:16:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:78:E1:A8:77:DC:41:71:A4:65:3B:80:78:74:F0:D0:CA:3B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:1c:dd:9b:a8:b0:4b:21:36:ae:a7:4d:f5:ef:48:48:fe:
         70:f1:b1:fd:e0:44:37:df:4d:c2:77:92:b5:ee:0e:8a:99:8a:
         95:b3:71:62:b7:08:97:4a:32:e1:7c:e3:26:01:6c:1c:00:a0:
         ec:ab:fe:9e:bf:5b:c3:85:f3:c0:59:e8:c1:64:c1:9d:fe:81:
         47:c8:c8:0d:a6:63:87:50:b4:ff:da:5a:5e:28:10:f2:dc:3a:
         ca:bd:65:da:f5:06:3b:96:89:92:fb:ad:f6:ef:63:50:e5:47:
         85:6a:d3:80:a6:60:6e:eb:44:c2:8b:26:bd:37:43:2e:0e:dc:
         d8:c6:9a:da:68:53:5a:b3:56:8d:c5:c4:7d:a5:23:5a:54:4e:
         cf:ed:56:8c:cd:83:01:bb:e3:80:32:eb:6a:be:8a:f2:6f:0c:
         43:14:f6:aa:fa:35:fd:0f:a8:1c:6f:d6:27:b6:5b:9d:a8:97:
         15:42:07:34:3e:05:ab:08:45:aa:1e:b5:15:31:ee:cc:33:0f:
         63:cd:6f:88:5c:6f:1e:09:a5:8a:60:85:bb:46:ab:5c:bf:0f:
         87:c7:cb:6c:c9:51:99:f5:92:c3:f9:a9:8b:50:9c:de:7c:6d:
         50:22:77:6f:a5:2d:30:88:b3:b8:be:4e:fa:f2:92:8b:fe:13:
         e0:d4:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----