Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa
File:                     1e5f12cb-e855-3565-b100-bec476c1f053.roa (raw, json)
Hash identifier:          bMiVYtBo8qCF5c1uiTEW1aXGtZbKICkINgRmSydday8=
Subject key identifier:   94:68:5D:D6:A0:37:63:B7:44:28:5A:05:E3:D4:7B:B0:3C:4A:08:84
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584824FA8C26644FE277053025C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     3223
IP address blocks:        104.243.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:8c:26:64:4f:e2:77:05:30:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=29c57025-acaf-494e-b05e-79048e8ea67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:0f:cc:da:1e:11:a3:74:f0:bc:62:41:23:
                    66:e9:ae:47:99:e6:0e:4c:38:af:7e:5a:bd:42:0b:
                    e2:5d:f3:28:f9:ff:8a:00:47:7d:93:aa:2f:95:73:
                    c2:d9:91:2b:39:30:9e:bc:cf:3e:e4:04:dc:4d:7a:
                    d2:f2:fd:03:d9:38:29:84:0b:95:99:03:5d:45:ee:
                    fc:86:d0:36:48:2c:1c:37:7b:7f:92:10:6e:4f:9f:
                    98:c4:9b:f0:0f:ac:27:1b:46:8b:b9:b5:dc:fe:1f:
                    9c:f1:28:68:54:2c:80:a6:fc:ef:27:d6:c0:14:ec:
                    ee:53:f3:86:ae:87:0a:b1:6e:d9:a3:69:1a:4c:2f:
                    02:92:71:e7:95:e9:d0:84:0f:7e:dc:23:98:69:16:
                    d4:c9:5f:88:9c:6d:b7:54:0c:09:dc:e9:0a:fd:c1:
                    9b:a3:5e:88:cc:48:5d:c8:07:42:c7:1b:af:34:12:
                    c4:24:3e:90:b4:e2:10:7c:36:0f:23:8d:93:cc:5d:
                    34:a6:7c:d6:44:91:49:bd:6a:a0:ea:18:07:a0:bf:
                    af:5c:78:ed:7c:7b:02:d7:d4:08:86:50:f2:4f:0a:
                    7a:da:3f:c2:2a:29:f2:db:be:9e:a2:35:ed:b5:84:
                    f2:23:d2:86:92:17:c4:7d:5a:eb:42:a5:18:49:5f:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:5D:D6:A0:37:63:B7:44:28:5A:05:E3:D4:7B:B0:3C:4A:08:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:dd:08:b1:c3:74:6b:85:99:c0:3d:06:a5:2d:a9:46:9b:
         64:cb:78:ed:d7:fc:4a:70:01:6c:e9:6e:fe:81:38:26:af:92:
         01:1e:67:cd:33:c5:04:fa:f9:6f:98:d5:d7:61:bf:cc:44:fc:
         6e:19:e9:33:62:ec:c6:19:b2:7d:7d:9a:e5:70:f5:6c:29:97:
         a0:8b:6e:19:80:7f:4b:ab:16:b4:47:74:2a:2e:4c:7a:ae:41:
         25:39:ce:43:ee:93:69:a4:52:7c:b9:85:09:b2:a6:99:a4:1a:
         47:b7:6c:ff:7d:e8:63:d6:27:c0:2b:5d:6b:57:33:66:0b:3e:
         84:d6:7a:49:bb:96:e4:cb:d8:47:db:69:49:ee:a7:01:c5:02:
         49:12:9d:ee:06:7b:78:c4:83:95:14:77:b4:72:1f:bf:b2:4a:
         4c:6b:0f:7f:f4:f6:af:18:74:d5:79:60:ea:a1:75:31:3d:27:
         f0:a3:b8:fd:a2:50:6a:0e:95:17:78:33:84:25:a1:a6:d2:48:
         7e:76:c6:86:fc:3c:74:ec:b6:0e:18:2b:35:6c:96:19:01:2d:
         f2:9b:c1:3e:d5:40:11:a9:40:a0:d9:04:5c:78:a5:9e:42:84:
         9c:a1:90:15:8b:7e:f4:75:94:17:ef:19:8e:8b:9b:78:94:f4:
         0b:f7:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:25 2025 by rpki-client