Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/24a24568-e066-3278-8563-1461ecdbd47a.roa
File:                     24a24568-e066-3278-8563-1461ecdbd47a.roa (raw, json)
Hash identifier:          x/x39kz1ONvuVU75kIB5iW3+u24uUePkL9cmu6hCFwQ=
Subject key identifier:   84:89:FD:17:F9:15:36:1D:5F:FE:88:2C:BA:AB:F3:B1:57:19:4A:BE
Certificate issuer:       /CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
Certificate serial:       010D0C9F43285848090FAB6DED672779363A9A00
Authority key identifier: 96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/24a24568-e066-3278-8563-1461ecdbd47a.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     7954
IP address blocks:        104.254.52.0/22 maxlen: 22
                          2620:8d:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ab:6d:ed:67:27:79:36:3a:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=106dcf90-a569-41d9-9e8f-f79092daf948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:93:ce:d7:62:9d:d3:4a:00:f7:eb:a2:c1:
                    53:de:1c:2f:08:58:b2:9a:9e:b6:76:69:d1:b9:b8:
                    13:78:ea:29:1b:5f:30:06:e1:8d:d2:ce:62:45:a6:
                    03:89:ee:60:06:fa:6a:bc:0e:da:cc:56:aa:0f:b5:
                    09:2e:02:b4:d9:82:65:a0:2a:73:bc:2c:c7:3e:52:
                    c6:53:59:47:dd:03:dd:8b:67:3d:2f:72:b8:72:6d:
                    82:4d:30:be:54:2e:61:b2:44:b6:6e:0c:0e:63:00:
                    a5:2e:64:e0:4e:d3:27:6f:43:f8:33:a3:03:ac:6e:
                    1a:0e:ea:ab:d3:6e:0b:4d:f0:a4:fb:cf:f7:98:0e:
                    1f:7d:0a:bf:be:33:73:99:50:4f:e1:6b:fc:56:34:
                    01:be:99:e4:11:28:93:9a:38:bd:5a:e7:32:90:ff:
                    40:af:6b:4c:d2:81:6e:af:2f:c9:ab:d8:d8:70:32:
                    81:ed:58:a9:6e:c7:4f:bc:cc:ad:2e:fd:19:93:64:
                    9a:08:ec:f9:04:32:c3:2d:39:13:73:2d:d2:8c:0b:
                    84:c1:99:3a:c8:b3:7b:f3:fb:01:60:88:8b:4d:e3:
                    56:15:2f:40:62:97:2b:f6:29:74:56:5c:91:06:81:
                    45:d2:c4:eb:b9:0e:e5:31:a0:08:48:c0:26:44:06:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:89:FD:17:F9:15:36:1D:5F:FE:88:2C:BA:AB:F3:B1:57:19:4A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/24a24568-e066-3278-8563-1461ecdbd47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.crl

            X509v3 Authority Key Identifier:
                keyid:96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.52.0/22
                IPv6:
                  2620:8d:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:b2:ae:ef:12:da:d0:e0:23:9f:a6:73:5a:94:fe:e2:08:2b:
         aa:03:e5:64:88:c6:f6:89:90:9a:07:aa:06:4b:de:8a:71:c7:
         7e:6a:84:b7:4a:b9:16:d0:fd:ea:ff:3e:34:fa:13:68:63:1a:
         e0:3a:e2:85:77:de:64:6f:24:0c:7d:88:53:26:19:d0:d5:5a:
         33:0b:b8:c1:dc:e5:28:a3:28:55:31:8f:6e:b1:a3:8d:9d:9c:
         6a:ca:59:51:f1:f7:af:53:24:fd:0c:94:2c:d9:7c:69:9a:13:
         7c:af:7b:8f:7c:6c:ec:b5:b3:d6:17:e4:41:9f:08:e7:00:0a:
         9c:ed:97:ce:87:ff:ff:6c:da:5a:e2:16:3a:ae:4c:5c:3c:31:
         45:37:c4:df:b8:b6:ed:33:8e:42:7b:d8:e7:3a:f0:f1:90:a4:
         2b:ea:91:9c:2b:29:91:6e:03:e2:9a:25:84:d2:01:82:e7:69:
         f4:44:02:b7:0e:bf:55:23:d6:3d:a8:f8:4f:2e:ff:1c:c4:0d:
         8f:c0:5f:49:8e:f8:78:79:a7:68:84:6b:ef:e6:af:6e:d5:ae:
         f4:4e:12:a6:4d:20:52:23:7a:31:08:45:57:36:c7:e8:87:d0:
         e4:1f:d0:35:cc:04:c8:81:ec:5b:9f:37:87:29:7b:0f:25:2f:
         47:f6:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:06:06 2025 by rpki-client