Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
File:                     84343704-c93f-31bb-ae2f-4e88f3e7612a.roa (raw, json)
Hash identifier:          Cx+mGcgBTmPxSw/Puf990CvO22ppHIsm0XlLAahSD+Q=
Subject key identifier:   31:BE:7F:A0:BC:24:CE:18:F6:B7:22:42:95:CF:FE:04:9D:8E:28:1C
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F432858482EC0021E0EA7E8E281F17200
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        104.192.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:02:1e:0e:a7:e8:e2:81:f1:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=ad7d808d-6a2b-4d43-95e3-4e2d778f3393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:11:0b:19:5e:39:80:14:6e:0d:9b:7b:35:
                    e6:b9:cf:3f:73:ba:75:3a:36:1f:11:16:26:87:f0:
                    5a:55:8a:5f:a5:41:da:bc:fe:3a:fe:06:6a:6c:e6:
                    67:8e:42:4a:c1:f4:78:ea:3d:60:19:13:8a:2c:78:
                    eb:25:d5:73:f4:70:95:2f:fc:3c:1d:48:54:25:ce:
                    f2:1e:27:16:96:f1:b7:a1:f7:02:4f:6d:d6:c5:95:
                    f0:41:ad:22:82:3d:c3:88:1f:da:5b:22:87:71:e4:
                    38:73:77:49:44:97:46:a1:18:3e:0a:60:08:8c:32:
                    2f:7d:36:4d:42:88:5b:a4:d3:38:0d:34:92:2f:91:
                    e4:6e:f2:c5:b7:f2:41:46:1c:ba:e5:0e:92:54:77:
                    03:95:a6:e3:5c:b7:0f:2d:0b:14:c6:08:69:f3:80:
                    2f:f7:63:08:68:79:47:37:05:31:c5:ec:9a:6a:f7:
                    2f:0f:e5:c5:5f:30:9c:f3:01:7c:95:b7:37:6d:f9:
                    7a:36:33:16:1f:19:de:51:eb:45:43:a5:ff:af:c3:
                    85:eb:62:3c:cd:8d:bc:2d:20:bb:c6:e9:49:c4:a3:
                    cf:aa:4a:b4:9a:07:eb:9e:62:35:0e:d1:b5:54:92:
                    92:ef:bc:a5:8f:54:5a:d0:2f:5b:78:25:18:c6:b6:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BE:7F:A0:BC:24:CE:18:F6:B7:22:42:95:CF:FE:04:9D:8E:28:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:5f:44:e5:95:91:13:7c:a3:19:a1:16:aa:84:37:7f:7d:
         0b:a0:c1:02:10:d0:8f:ea:71:d0:5c:62:74:7f:c3:21:5e:85:
         bb:0d:04:9b:7f:02:cd:a0:b0:ea:33:e9:61:8e:48:ec:a9:68:
         69:11:f8:be:7e:eb:7f:c0:23:28:e7:f1:41:86:af:9a:03:b7:
         50:02:28:d2:30:cc:46:e0:52:bc:ed:55:62:e1:c5:fb:1b:30:
         fd:2a:6e:7d:06:6e:0f:ec:cc:75:4f:07:82:55:24:f4:bc:36:
         e6:f6:da:17:6f:96:b7:32:8b:cc:f6:89:68:e2:c9:45:c5:2e:
         ee:a9:d6:55:3f:c4:00:52:f6:67:35:59:73:0e:0e:1f:a9:35:
         9b:f8:17:43:0e:7b:41:e9:5d:b7:a9:3c:06:af:17:c6:6d:a1:
         08:9c:3e:fb:db:3e:d4:ae:f2:63:83:fd:44:3b:b1:5d:ea:f1:
         e9:fa:7a:00:7f:0a:90:ad:1f:4d:a2:2f:13:42:41:9b:fa:6e:
         6a:4f:de:26:df:db:a1:20:6d:97:ee:0c:cc:3e:7f:f1:64:81:
         90:b6:d2:91:7f:2e:5d:75:bd:82:bb:2a:f3:41:45:be:6e:a9:
         7e:d9:c2:2d:0d:a6:b8:35:bd:3f:1a:67:2f:d9:55:36:10:c9:
         e5:62:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:25 2025 by rpki-client