Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/02062a13-ddc4-3a24-911a-1b037896e1c4.roa
File:                     02062a13-ddc4-3a24-911a-1b037896e1c4.roa (raw, json)
Hash identifier:          HS2l+vaBFuWqwTiQbvqcLUG3ymDneC4pKQxWnj34brI=
Subject key identifier:   F0:7E:0D:2B:1D:62:F5:48:0F:C4:27:B2:76:45:B3:49:F4:2C:B7:36
Certificate issuer:       /CN=dac9cb7f-b46d-477e-8698-95f66c423aab
Certificate serial:       010D0C9F43285847E35F77A4BB941148B10E1880
Authority key identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/02062a13-ddc4-3a24-911a-1b037896e1c4.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     17160
IP address blocks:        104.247.116.0/24 maxlen: 24
                          2602:f93a::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:77:a4:bb:94:11:48:b1:0e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac9cb7f-b46d-477e-8698-95f66c423aab
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=1a596d8f-2b95-48b5-bf0b-d316aa33b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:f0:ef:db:08:06:88:df:3a:09:da:32:80:
                    70:5d:c5:ef:3f:35:91:bf:4c:c4:97:3d:f4:92:e0:
                    46:49:6a:33:ec:45:df:82:82:1c:cf:84:d5:c3:9e:
                    bb:c5:d2:0a:aa:62:23:5a:0e:4b:2b:27:44:f8:57:
                    fd:40:42:c3:b9:28:c3:68:44:29:b4:c2:0f:0e:a6:
                    ad:db:52:12:f6:4f:2b:e9:5c:a6:9c:cb:e8:d1:c4:
                    36:a1:5e:41:14:1f:4e:54:f1:b0:11:97:d0:04:b6:
                    21:ba:99:08:24:3b:d8:c2:b1:07:28:bf:43:45:1d:
                    29:aa:5b:b9:9d:e5:d6:d8:07:03:cf:90:4b:0e:4b:
                    03:64:5e:8b:84:8e:85:d4:4d:af:2d:dd:c0:5a:73:
                    65:1c:97:e4:53:cd:79:a9:db:be:97:73:e8:c0:96:
                    79:14:12:17:55:88:94:f9:0b:ee:4c:58:ba:b8:fe:
                    90:13:87:b8:fa:38:cc:b9:bd:a4:33:ee:51:e5:3b:
                    d0:81:c4:48:db:01:6c:88:14:84:6c:40:ed:35:78:
                    bb:b7:f3:66:d0:e8:81:bc:2c:3e:15:d9:23:27:8f:
                    e3:2c:c4:41:76:c7:69:e0:24:27:24:1a:11:ea:31:
                    1e:a6:41:ef:32:ba:c6:aa:ef:f3:a7:d5:81:af:6b:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7E:0D:2B:1D:62:F5:48:0F:C4:27:B2:76:45:B3:49:F4:2C:B7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/02062a13-ddc4-3a24-911a-1b037896e1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl

            X509v3 Authority Key Identifier:
                keyid:A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.116.0/24
                IPv6:
                  2602:f93a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:78:c6:8b:79:83:b2:6a:c3:6d:87:8a:0d:bb:0a:e6:b7:3d:
         82:ed:16:ad:73:a1:b5:d8:da:fc:b8:d8:c3:5b:60:b7:70:e7:
         56:6d:f7:3b:0e:5e:ae:71:d5:d4:09:42:b1:36:6c:07:6e:bf:
         50:9c:16:fc:77:5c:36:7a:ca:3e:25:97:fd:14:0e:6d:c4:0f:
         c8:46:bc:ac:ac:cd:a3:41:51:43:97:4b:60:49:19:b4:2d:c4:
         51:c8:8c:75:bb:71:45:f5:a0:af:d8:e1:a1:35:f7:58:3c:41:
         69:26:22:20:4e:e2:40:99:8e:f0:94:e0:39:8b:1e:2a:44:91:
         fd:e6:8c:9e:67:e9:59:2a:6e:66:86:29:b6:1b:65:fa:b5:52:
         f7:dc:db:bc:4c:bf:3c:d5:2f:45:c3:af:c1:e8:11:40:be:4a:
         c3:86:48:4b:ca:09:b8:1a:60:e1:49:49:1d:0a:54:c5:c8:5a:
         de:9a:22:95:9d:ed:4a:bd:5e:df:a9:ca:f6:a5:e7:e2:5f:8e:
         70:d3:8e:c0:36:1f:b4:e2:a8:a1:bb:4f:03:88:d5:c1:9b:bf:
         86:7c:8b:28:1c:21:bf:c0:63:3a:58:0d:c7:28:9f:f6:7d:64:
         b1:f2:ae:5c:dd:af:fc:76:42:5a:06:a2:cd:34:3e:26:d5:c8:
         8a:d4:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:28:29 2025 by rpki-client