Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbdc99f8-94b6-3771-a92a-23d1f3e2e545.roa
File:                     bbdc99f8-94b6-3771-a92a-23d1f3e2e545.roa (raw, json)
Hash identifier:          KnHA4ojUUWXaWJCtyoF21yB0/ZFB1WdJ6pG1z9Zlu90=
Subject key identifier:   6B:FD:D2:9D:FD:49:3E:A6:0E:0A:C9:5B:09:58:20:19:81:FC:41:F4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094EEC8FFCBC0D36AC9DE40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbdc99f8-94b6-3771-a92a-23d1f3e2e545.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36383
IP address blocks:        104.135.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ee:c8:ff:cb:c0:d3:6a:c9:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=95a916ee-cbaf-4f8c-b50d-6a3e6433270c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ac:1d:0c:d9:5c:c2:9e:e5:35:0a:f8:dc:f6:
                    60:f4:07:5c:51:7a:bb:c1:ae:9f:d6:78:6f:e9:0f:
                    ba:01:b3:18:74:53:dd:57:59:b1:40:fa:01:c1:2d:
                    41:b5:42:50:aa:9c:4b:d3:8f:e1:96:3b:cb:27:3b:
                    a1:c7:9d:a8:d3:fc:eb:e6:5d:25:20:8a:7a:04:6c:
                    d7:1c:0e:9a:0d:5d:b9:7c:0f:6e:2e:51:cd:f5:45:
                    2a:9b:61:f5:25:f0:41:0c:2c:68:16:45:b4:b1:2a:
                    28:91:7d:85:72:4e:5d:87:63:71:35:9c:df:c1:39:
                    a9:00:fa:3f:68:08:6e:ca:a4:ea:64:1e:b1:b3:10:
                    a8:7d:93:68:63:f6:09:3a:c3:dc:7c:a6:fb:8d:ea:
                    eb:7a:cd:7f:48:44:8b:30:6d:6d:2e:d5:88:bf:75:
                    33:72:16:35:fb:58:61:62:99:7b:3d:0f:f8:ca:2d:
                    2d:43:3a:95:81:2c:6e:e5:82:c2:ef:6a:af:1d:b2:
                    3d:56:29:25:25:1a:c3:7b:82:9e:99:4c:e9:63:ef:
                    61:53:48:b9:71:c1:be:ce:71:e7:0c:a9:a6:6a:ab:
                    cc:8d:b0:27:34:63:88:b7:0e:96:e4:2d:a1:2a:ca:
                    88:ea:ca:f2:1a:82:33:6b:1f:28:3d:7f:67:d1:bc:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:D2:9D:FD:49:3E:A6:0E:0A:C9:5B:09:58:20:19:81:FC:41:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbdc99f8-94b6-3771-a92a-23d1f3e2e545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:50:6e:05:28:89:c5:51:68:f3:b7:64:cb:35:6a:7d:8e:0d:
         71:f2:5f:ce:e5:18:29:e2:79:9c:d2:39:45:e7:e1:c1:45:c7:
         83:a5:b9:a1:bb:71:6c:4d:dd:54:54:46:28:4d:96:c3:1a:54:
         08:ad:35:58:fd:fb:6b:c7:77:28:e9:2b:fa:bf:10:db:a0:07:
         2a:9f:29:32:a3:01:97:98:3e:5c:d7:1a:53:83:1c:74:db:fc:
         38:77:14:e3:fa:9d:23:d5:68:ad:f9:35:ee:8d:0b:97:4e:a3:
         21:72:e2:e8:87:39:b2:12:9d:44:4a:76:bf:51:fb:b7:03:06:
         52:9a:2e:41:2f:9f:63:d4:50:a7:cf:51:ce:af:86:24:15:a0:
         2a:af:e0:9a:cf:1a:76:15:49:0a:14:e3:07:54:af:b0:c7:7c:
         fb:45:9e:95:99:a6:02:82:16:e3:e3:a4:40:26:d2:9c:cf:c9:
         fe:4c:95:c4:68:2b:8d:98:8b:1f:a4:14:aa:d8:bb:98:3f:05:
         b1:db:1a:1e:29:c8:52:1e:26:a8:de:52:e7:e8:6a:dc:6b:bf:
         91:a2:11:5b:e6:2d:89:56:d8:0e:43:5b:61:2a:01:e5:c5:c7:
         f9:a5:16:ae:14:ec:9f:3a:74:06:28:c2:ba:ce:12:dd:a6:31:
         9a:47:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:16:30 2025 by rpki-client