Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa
File:                     1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa (raw, json)
Hash identifier:          UbMjcpiJ9aNggkcrE7dGKSJMuEbLKTAJ6TeTOVQLia0=
Subject key identifier:   E2:FC:E2:35:D9:26:5F:C7:8F:91:82:FD:64:CC:53:4E:EE:D3:6A:47
Certificate issuer:       /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial:       010D0C9F43285847DF2F53F410280FAB5506DAC0
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20473
IP address blocks:        104.171.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:53:f4:10:28:0f:ab:55:06:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=dd071d9b-316a-4992-9b1b-c85bd9e43a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:de:87:82:16:5e:86:55:31:8f:65:58:12:
                    33:d7:77:0e:c9:c5:4f:bc:a1:d1:c0:22:ca:7c:3d:
                    85:e1:e3:07:9f:c5:08:86:40:b9:74:5a:f9:db:eb:
                    f3:3f:eb:13:7a:32:80:3f:94:05:77:c1:c0:c9:93:
                    6c:e8:6e:23:00:68:ac:76:f6:a8:55:63:1e:8c:03:
                    ea:a7:d5:9f:1a:16:0f:76:80:2e:12:eb:57:23:02:
                    79:b9:99:a1:63:c5:e6:33:d6:3f:24:a1:f0:ae:ae:
                    46:51:bb:fe:d0:62:5a:f1:c7:85:5c:89:58:35:8f:
                    bb:ee:bb:f2:a6:f9:67:e4:1a:08:b4:8c:a9:f7:67:
                    2a:86:88:1f:ff:11:d9:1d:9f:21:82:ee:03:40:4f:
                    b9:b1:a1:2a:3b:4b:b8:d5:36:d6:aa:b9:81:ca:1e:
                    55:74:4a:36:5a:6c:1f:84:62:7b:c0:63:0a:0f:80:
                    08:09:fd:0c:f6:ce:6a:6d:f6:aa:91:67:05:3a:86:
                    6f:8f:f3:95:35:80:9a:9b:c6:92:85:78:9a:22:88:
                    b8:15:54:16:f4:db:8c:a9:b0:42:f1:31:c5:5a:35:
                    43:d0:4a:5c:2b:6f:18:07:bc:c3:a5:6b:a9:eb:bb:
                    c1:d7:72:22:1b:2f:af:41:77:c9:20:cb:f0:d1:d2:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:E2:35:D9:26:5F:C7:8F:91:82:FD:64:CC:53:4E:EE:D3:6A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/1f54617e-3c5e-3db3-ad0e-8c7f5e145528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl

            X509v3 Authority Key Identifier:
                keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:29:90:ac:93:25:ad:bf:fd:9f:ff:1b:27:7d:06:6c:ba:33:
         f5:27:6c:99:2e:8e:bf:e0:1b:f3:0c:d3:da:7a:2d:79:21:c5:
         5e:96:ac:72:05:51:4c:bf:9d:c6:0e:f3:99:8c:c6:e2:d6:ce:
         12:24:0b:d8:39:a5:e3:f3:f1:be:c6:63:13:b9:71:b3:3b:61:
         8b:27:1d:1c:4f:d3:be:00:da:4f:48:b5:01:28:0d:cf:32:ba:
         37:13:b6:04:92:aa:6a:37:c9:9a:35:70:5c:ed:32:57:38:7e:
         44:0e:de:7a:df:3b:a0:63:fb:ce:56:20:63:90:d5:87:92:6b:
         ea:a7:1c:0d:1e:0b:5d:11:32:c4:fa:d3:ee:34:27:50:1d:57:
         ef:16:12:ed:a4:22:d3:59:91:33:1e:e0:78:bd:61:8f:b0:ca:
         b9:fb:9f:8f:ea:d1:1a:cb:2c:27:5f:bb:2a:b9:1b:a7:dd:4c:
         a5:c4:3e:8f:a9:8f:bb:48:a8:3d:a6:e1:77:9d:4d:59:83:73:
         a3:2c:eb:20:35:c5:11:d4:fe:df:08:c8:35:6b:22:e3:f2:c4:
         3c:62:dd:f9:b6:06:fc:05:19:10:c0:33:c8:b7:91:71:86:25:
         25:9b:b2:49:3c:a1:d2:45:61:69:b8:34:62:81:e6:ab:88:02:
         e1:68:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:07:55 2025 by rpki-client