Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
File:                     dfa07786-4d85-30e0-967d-c30014edb829.roa (raw, json)
Hash identifier:          YBJAgrgpTNdy2P8TRPyA5s6ZWMBbJPfkldXtulUC9W0=
Subject key identifier:   68:E9:6A:3D:70:94:87:C6:03:BF:39:B2:94:92:C7:32:82:B5:A4:3D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094EF486294D5957F89D740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ef:48:62:94:d5:95:7f:89:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=341f93f2-918f-446a-8a2a-c886ff669420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:eb:b8:61:40:87:8d:bb:5d:8a:71:b0:c7:
                    f9:5f:ec:1c:db:ec:65:36:c8:15:b3:f9:67:ea:9c:
                    03:64:69:c0:2b:51:17:17:11:fb:6f:9c:59:59:07:
                    00:a3:7b:5a:58:03:80:5f:17:71:22:32:5e:b2:a7:
                    23:c8:7c:b8:8f:71:51:0b:cb:80:5b:12:6e:cb:30:
                    f9:90:05:11:3f:d2:dd:51:94:7b:3a:b9:f6:a1:31:
                    1e:72:32:75:d5:68:87:17:11:6f:89:6b:1e:f3:47:
                    9c:c9:e2:f9:55:4a:23:a2:11:4b:1e:02:e1:d0:c4:
                    03:6d:b2:32:87:1a:a9:d6:85:91:c6:fa:ea:c6:f9:
                    81:9c:70:d9:b8:40:74:26:da:30:50:49:25:bd:31:
                    b3:53:25:68:f1:e9:2c:22:57:fb:52:76:51:e6:82:
                    61:88:3e:59:fe:3c:6b:cf:74:83:7a:bb:03:44:7a:
                    4e:c5:88:ba:d7:53:2d:d1:7d:dd:e2:8b:3a:e1:13:
                    61:86:56:eb:4f:ef:7e:c1:6a:8b:43:a9:38:40:fe:
                    1a:9f:43:5a:cc:b5:7a:56:52:76:67:c9:9f:2c:92:
                    b0:6f:d4:34:7a:b2:00:95:a7:94:d7:54:ea:f3:77:
                    ae:50:1a:ca:1f:97:de:5b:7d:05:92:cc:f7:f7:5e:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:6A:3D:70:94:87:C6:03:BF:39:B2:94:92:C7:32:82:B5:A4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:19:45:fd:70:0f:3c:a1:e7:a0:a8:9d:3e:b3:1c:b2:8d:e1:
         0d:89:5d:dc:d6:66:cf:64:0c:96:53:4d:db:c7:17:18:50:74:
         97:e1:c5:95:44:52:e8:44:4a:b6:13:10:b9:7d:8e:b1:c2:83:
         3d:20:07:80:fe:8d:14:b9:44:fa:dd:1a:9d:f5:65:ba:12:5e:
         69:50:bb:61:cc:56:fd:8f:80:f2:9e:f1:f3:70:77:57:06:44:
         6c:12:f2:70:85:27:f0:fb:f4:01:e5:0b:cc:0b:a6:43:f8:cd:
         d0:d6:5a:fa:c7:07:5a:99:f8:a9:5c:ec:e3:ef:96:d9:76:f0:
         0f:fb:c2:d9:75:fa:81:f6:57:24:8b:35:db:e5:73:d5:64:fa:
         11:d3:20:2d:59:6a:f7:a8:aa:0e:01:bf:95:9a:9f:87:fb:d5:
         bd:5f:cb:62:12:cf:c8:6c:af:f4:0e:19:a6:f4:9e:be:6e:a4:
         b5:00:3f:74:f1:a0:9d:b2:fd:39:02:fe:a6:48:d9:40:53:70:
         d3:88:1d:b0:55:69:56:b2:a1:ad:b0:e2:7f:9c:d7:50:61:f6:
         1d:23:02:44:e5:2d:bd:fc:76:3b:de:11:3f:49:30:a8:67:1f:
         80:b7:3b:2b:c0:bd:b4:04:17:77:c4:53:43:86:cd:ba:64:45:
         17:44:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----