Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
File:                     d182af8f-f865-3799-883e-ff117bfac6cd.roa (raw, json)
Hash identifier:          v308aG34uledRbZRidqSrR/2FWILRNLRFJNrUTUNdj4=
Subject key identifier:   A6:2D:23:DA:79:6D:EC:46:E4:62:72:3C:31:36:DF:EB:84:C8:34:CD
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F432858487BBBDC2D9D91C010C3B2C980
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
Signing time:             Thu 09 Jan 2025 03:49:50 +0000
ROA not before:           Thu 09 Jan 2025 03:49:50 +0000
ROA not after:            Wed 09 Apr 2025 02:49:50 +0000
asID:                     46172
IP address blocks:        104.232.11.0/24 maxlen: 24
                          2602:f899:fe::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:bb:dc:2d:9d:91:c0:10:c3:b2:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Jan  9 03:49:50 2025 GMT
            Not After : Apr  9 02:49:50 2025 GMT
        Subject: CN=c1cea386-bed9-46d2-a9d9-626f1f60a18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:ce:b7:39:eb:30:f4:85:f0:d3:59:83:2e:
                    ab:09:0b:c2:cd:e4:73:58:0b:4d:29:0f:ea:dc:d7:
                    59:a7:c8:55:14:bf:f1:21:b3:25:02:32:b9:d9:b3:
                    6c:62:7b:55:c1:e3:0a:98:22:1d:93:00:2d:03:ac:
                    2d:bc:d1:41:c3:18:39:55:c2:e8:bb:b0:0e:ae:a2:
                    46:3f:2c:bc:94:ab:d7:63:42:70:c5:e9:e1:da:27:
                    2e:76:ec:79:5b:aa:93:4e:08:63:a5:8d:51:d9:0e:
                    f2:07:72:cb:da:73:8a:10:2d:d5:73:d0:31:72:a1:
                    bb:5f:ab:d3:f5:4d:40:c0:93:e7:66:3d:ff:01:dc:
                    2c:43:89:ca:7c:ed:86:31:21:09:bb:51:b1:87:7c:
                    11:f4:2d:36:bb:b2:df:bb:6c:43:1b:7a:77:75:91:
                    ea:76:37:2f:c9:21:5a:64:62:17:21:a7:1a:0a:31:
                    41:dc:8b:52:97:1d:1f:b6:49:b8:c9:47:e4:08:f7:
                    51:4c:fe:b8:14:3a:dc:cb:7c:b7:9e:2e:2b:82:34:
                    4c:12:67:dc:b2:19:df:a2:8f:bc:7b:53:8d:36:8c:
                    c5:1c:7a:0c:2f:ef:73:e0:12:33:91:a5:78:cf:f8:
                    30:88:c5:6d:fa:25:1a:e9:8b:4b:28:e4:49:20:fd:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2D:23:DA:79:6D:EC:46:E4:62:72:3C:31:36:DF:EB:84:C8:34:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.11.0/24
                IPv6:
                  2602:f899:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:96:40:f4:42:31:9d:17:de:e9:a9:47:7a:56:7e:dd:92:
         d8:ef:1c:76:b7:53:2a:4a:af:a0:72:a8:53:9d:a8:8a:b0:fd:
         28:b2:19:83:cb:6f:1b:c5:f5:0a:06:c6:20:d7:b1:4c:eb:7f:
         2e:0c:c2:bf:7e:5d:ee:d9:97:c8:7e:31:98:e5:79:ed:1a:e8:
         b3:fa:b5:fa:04:83:f5:ad:95:43:ba:6d:0d:b5:50:64:1f:34:
         24:64:52:e0:31:f1:57:fb:c1:b7:72:b6:43:d4:57:e7:7b:5c:
         83:05:53:6e:e8:4c:f3:97:6f:00:94:90:e5:0b:df:ff:f3:33:
         91:b4:50:54:f7:b5:3e:a2:30:af:d5:07:9e:d6:58:4c:f0:da:
         c7:43:5b:a1:6a:b3:6a:45:2d:5f:79:08:45:f4:cb:18:ab:3e:
         57:95:4b:4b:0b:fa:4d:24:cc:f3:4a:90:7b:70:a5:f1:47:92:
         fc:f7:cc:61:a4:06:05:63:ec:07:a4:ac:af:14:0f:41:55:98:
         de:a0:84:91:9f:41:bc:5e:dc:1a:95:22:fb:3f:c5:72:9f:8b:
         b7:33:02:34:95:66:e7:7f:f4:dc:f8:ff:5e:69:be:02:53:c6:
         b9:43:9c:bd:c6:be:48:7f:ee:6b:82:f1:28:2b:4d:10:c5:ec:
         a2:f3:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:19:02 2025 by rpki-client