Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e282dfd4-1623-331e-8f44-733473cf303e.roa
File:                     e282dfd4-1623-331e-8f44-733473cf303e.roa (raw, json)
Hash identifier:          yIiu1HOZzdYtQn9eOHzU5+ajUwtr+ZalwIMetNJ5qdo=
Subject key identifier:   E8:D8:7C:BC:83:3E:E8:DD:25:05:27:30:A2:3B:A2:60:7A:50:00:F4
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858485E35AE286379D2969B17B380
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e282dfd4-1623-331e-8f44-733473cf303e.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     36231
IP address blocks:        104.152.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ae:28:63:79:d2:96:9b:17:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=73c9fe56-f920-4ffe-9339-8e7b601c3bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:74:fb:a0:86:5c:85:a6:66:20:6c:5d:97:
                    db:bf:c6:6a:25:21:3a:57:4a:ef:06:1d:f1:3e:70:
                    09:c1:79:8d:a2:41:5d:c4:77:38:4a:b8:4e:36:9c:
                    7e:59:19:67:b8:0a:1c:2e:6a:02:25:8b:8e:2e:ec:
                    7a:74:69:45:16:43:0d:f4:ea:95:bd:fd:09:a0:0e:
                    8d:34:de:55:e8:ba:0e:f3:93:7e:f1:14:d3:ef:3f:
                    51:fb:29:57:84:56:65:aa:89:4c:2b:62:bd:80:31:
                    08:f8:28:15:42:f6:20:35:e9:61:d1:1f:0a:e5:4c:
                    00:d6:80:96:36:d4:69:a2:5c:9f:16:5b:ac:63:69:
                    27:5d:70:d1:c4:d7:f6:c3:da:41:48:ed:d6:00:b7:
                    97:bc:4b:75:df:c1:b3:10:64:7a:27:ca:79:f2:0c:
                    43:04:f5:2e:fb:b7:79:99:77:7f:51:76:ea:90:c3:
                    75:1d:b5:95:cc:a5:77:b6:b1:7e:5b:d7:ac:97:9f:
                    c0:df:2e:38:b7:da:da:10:54:08:d0:23:3b:5a:a2:
                    10:d4:64:09:c1:87:fb:5e:3b:36:a8:7d:fa:6c:e3:
                    06:4b:ae:3d:59:45:fb:c0:a1:9f:29:7b:e4:eb:49:
                    33:6e:75:4d:d9:88:57:69:aa:61:99:2f:f4:b8:52:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D8:7C:BC:83:3E:E8:DD:25:05:27:30:A2:3B:A2:60:7A:50:00:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e282dfd4-1623-331e-8f44-733473cf303e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:ad:d6:31:29:e7:2f:15:df:9e:c1:03:28:a2:8d:ef:3e:
         b1:25:5b:a8:ad:4c:ed:cc:a5:f6:4d:99:0b:fa:7f:f6:2b:e7:
         33:d2:bf:f3:2b:57:ed:c5:19:45:8a:9b:e1:61:bf:77:60:51:
         5d:db:cf:cb:30:16:42:04:eb:06:8d:d5:9b:9d:38:be:7e:57:
         30:1a:57:32:96:67:f5:e8:20:7e:bd:a7:46:a1:72:e7:52:fe:
         23:e4:9f:98:90:89:52:8d:2e:7f:38:33:9a:52:94:ba:0e:8a:
         99:ab:78:73:be:b8:4e:d1:3f:49:c4:20:a6:cb:e1:b3:06:1c:
         11:b0:0d:58:b1:ec:ab:70:dc:77:5b:9b:7e:e7:d0:fb:8b:55:
         b4:9d:ca:57:e5:67:0b:60:67:4f:64:a6:d1:91:66:82:53:7f:
         ce:9e:b2:21:42:83:45:bb:75:14:79:3f:7e:a0:a9:91:e3:9d:
         07:d6:48:e6:96:66:de:66:a9:30:4c:36:99:92:7d:70:ec:93:
         37:e3:05:25:e1:5f:e9:81:5d:90:7b:c9:84:e6:ab:aa:4a:15:
         1a:b2:46:59:f4:68:72:b4:eb:e5:a5:47:d6:23:36:90:ee:96:
         58:89:59:1a:56:c9:a8:cf:57:47:14:25:aa:3d:6c:8a:34:a3:
         26:70:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:09 2025 by rpki-client