Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa
File:                     7f634129-9df2-33a9-9d13-537681daf704.roa (raw, json)
Hash identifier:          n5OPCFGg3WkQ6GJ1mfqyUnYQEBny/j1By32F/lc5rpg=
Subject key identifier:   BA:D8:E0:CD:44:E9:A9:80:F5:8E:DB:9C:F7:DF:D4:E5:E9:21:D4:6C
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858485E35ACDAFCEC6E88A85E3E80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     29802
IP address blocks:        104.156.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ac:da:fc:ec:6e:88:a8:5e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=e6885d5f-fdcd-4bdb-816a-1d8c672470ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:9c:75:77:7e:97:0b:14:74:6c:c9:94:90:
                    ae:65:e0:55:5b:eb:cd:33:62:43:32:f9:19:4a:0e:
                    80:02:30:2f:ba:58:61:32:3d:30:66:56:da:36:b1:
                    41:3d:e5:0e:bc:96:ae:51:b0:4c:3b:ba:31:79:ea:
                    7e:27:50:03:09:f5:28:8e:19:41:df:60:f7:0c:68:
                    07:62:69:a9:29:2c:3e:ee:c7:27:b0:f9:87:3d:8a:
                    be:ce:96:56:78:d5:70:77:ea:86:2e:ce:fb:ec:74:
                    49:8f:aa:a6:bb:80:3a:64:24:6a:01:4a:bf:1e:31:
                    d9:4d:9e:97:93:c4:16:ca:9a:ad:c9:4e:3a:06:19:
                    79:b5:6a:1e:6e:6f:9d:e6:76:53:c1:5b:31:c5:96:
                    5f:d9:2f:39:dc:18:8f:3c:e5:92:d4:b8:c1:5e:f3:
                    3b:d1:b3:e7:8c:49:64:1d:d8:87:f4:fa:a5:b1:bd:
                    34:2f:eb:03:c7:30:08:9d:f7:6e:14:b5:12:82:21:
                    54:f9:42:21:c6:10:a9:64:70:b8:24:b0:c1:1d:a9:
                    ff:31:28:87:c4:0b:bb:fa:d7:05:70:3d:e3:3e:d3:
                    9b:3f:57:3c:ad:af:fa:49:d1:8a:a2:69:d4:7b:7b:
                    04:ba:d0:6c:fa:2b:8e:a3:ae:56:3c:36:31:7b:92:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:E0:CD:44:E9:A9:80:F5:8E:DB:9C:F7:DF:D4:E5:E9:21:D4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0e:d9:ed:58:c4:e5:d7:7e:80:41:47:50:29:ff:6f:e7:4c:
         aa:ff:32:48:7d:94:e3:c2:11:00:a8:5b:dd:ba:4f:c9:fa:f9:
         de:4a:dc:06:d8:8f:ed:ef:ed:2a:9a:b6:bd:97:35:e6:82:9e:
         c1:b5:fb:b6:4d:20:7a:5d:4e:c7:b7:8f:57:4b:dd:c9:94:76:
         82:1b:03:0a:70:1a:63:0c:6c:26:81:ea:46:43:72:9f:03:a9:
         17:f9:1e:66:b5:00:64:20:41:2e:a4:30:a4:7a:5c:e6:23:32:
         5a:10:91:4b:5e:be:4b:8e:8c:83:77:9b:0b:70:ee:7f:af:d0:
         99:3b:63:b0:b1:aa:cd:a1:9f:37:a9:a7:38:1d:1d:28:f7:e7:
         4f:d7:9a:78:09:16:57:97:cd:7d:3c:db:c4:8a:dc:64:2f:af:
         f1:ea:bc:58:35:c6:a2:1c:6c:d8:de:36:ae:e6:c2:0c:bc:b7:
         3f:24:87:dd:24:2c:4c:dd:9b:40:ab:f7:b9:5b:52:c3:a0:7b:
         d6:f1:d2:1b:eb:18:d0:3c:53:dc:2c:af:36:37:04:8d:68:ce:
         68:22:bc:35:eb:01:e4:51:82:37:92:e9:09:9f:4f:1f:69:65:
         a1:23:f9:e5:a7:a0:54:85:3d:9e:09:ef:4e:94:dc:42:3d:77:
         27:fa:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:38:31 2025 by rpki-client