Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f3d1c7e6-6425-3c6b-b6bc-62d873ced443.roa
File:                     f3d1c7e6-6425-3c6b-b6bc-62d873ced443.roa (raw, json)
Hash identifier:          l6uc4qVOl3mUDG+1ME+9YwiccX92y9tdCTsmc2On+Ek=
Subject key identifier:   50:75:7F:3A:C1:F8:67:90:AB:D6:F4:47:67:F3:31:6A:B7:4F:3C:77
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094D480F9ECC3A214F4D9C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f3d1c7e6-6425-3c6b-b6bc-62d873ced443.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     41264
IP address blocks:        104.134.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d4:80:f9:ec:c3:a2:14:f4:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=3c4fb236-2d52-4841-bbb6-55af8fcd2f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:75:ac:7d:5e:41:c4:ab:e1:2f:fb:59:e0:
                    b6:e7:41:d1:98:1d:6a:bc:fc:55:98:f9:d7:d2:f6:
                    91:2a:5c:94:86:4b:74:96:b1:bc:d4:ff:9d:b6:87:
                    6a:5f:44:14:1d:fa:e8:b0:50:b8:ea:a6:d7:2f:ee:
                    05:34:1d:4d:0c:f5:c5:c8:13:5d:4e:6a:68:21:21:
                    0c:dc:42:1d:62:17:ef:dd:ac:bc:5e:ba:7b:5d:c2:
                    5a:77:98:fc:fc:0a:3c:d6:a1:9e:d5:a2:41:7e:e7:
                    21:ba:74:3f:73:3c:8e:fa:bf:cb:30:00:5b:69:2b:
                    04:d9:a2:c9:c0:1b:7f:59:2d:ba:e9:af:02:e8:20:
                    2d:b7:00:17:b1:ad:9e:db:74:b4:f2:af:aa:17:6b:
                    4d:79:60:bf:c1:a8:20:f4:5d:51:5b:cd:e7:96:6d:
                    2b:99:20:fe:67:42:45:e5:a4:4d:e2:7a:c3:92:9e:
                    b3:a2:78:6c:a9:3a:f6:9f:ad:ef:5e:3b:1c:e7:2d:
                    d6:2e:2c:4f:55:40:e1:4c:95:8c:4b:76:81:1a:34:
                    42:ee:cf:6c:8a:25:a8:39:f5:d6:14:ed:c3:c8:0f:
                    a9:c6:e4:30:50:0e:98:b4:40:9b:25:f6:60:27:60:
                    e4:fb:dd:a4:02:eb:b6:f3:9c:35:d4:2c:f1:0c:87:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:7F:3A:C1:F8:67:90:AB:D6:F4:47:67:F3:31:6A:B7:4F:3C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f3d1c7e6-6425-3c6b-b6bc-62d873ced443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:5f:d1:11:aa:6e:e5:07:d1:2d:94:1a:b4:be:c4:42:bf:
         bf:0f:25:c5:57:6f:78:55:9c:9d:e8:81:3f:9b:9d:4a:bb:da:
         2f:04:b8:80:fd:78:13:25:db:78:39:00:b9:1f:32:7b:c9:e7:
         7d:ab:5a:77:44:7d:bf:34:29:bc:da:1b:f3:85:48:74:52:02:
         b7:c1:fd:e3:46:15:08:d3:80:35:69:27:1b:33:d1:15:81:53:
         d2:02:3b:03:e6:fb:69:0b:59:db:27:f7:3f:df:0a:bf:31:80:
         2a:30:33:24:32:b9:1b:61:bc:1d:33:5a:0a:63:5f:c1:f2:48:
         20:95:f0:a8:0a:b1:27:17:1a:48:d2:4a:c7:71:fd:59:43:29:
         9c:c0:c8:76:28:93:47:34:5f:e9:ee:b6:0c:0d:69:20:89:cb:
         aa:a3:b1:f9:8b:45:44:fc:a4:b9:e3:06:db:7e:94:b5:e9:31:
         03:51:f1:dc:5b:7c:47:99:49:6f:d7:01:dc:89:17:c6:ca:9a:
         65:5e:61:9a:19:0f:56:71:b5:39:76:a4:7b:b4:f7:99:6c:a3:
         26:1c:cb:18:99:24:09:59:b2:e5:fc:4d:80:d9:ad:b8:ff:0c:
         f8:ea:fb:06:6e:eb:d4:a8:59:db:62:95:9e:f7:9b:74:ea:9f:
         f1:ac:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:48 2025 by rpki-client