Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bfc6a5c-e13e-393c-9551-def2e9ba02b1.roa
File:                     8bfc6a5c-e13e-393c-9551-def2e9ba02b1.roa (raw, json)
Hash identifier:          THjOx5JSpN8m+Nihpwe+rIL5JuAuIfxqB53IQnJCJaw=
Subject key identifier:   0B:C5:D2:B9:83:CF:81:62:AB:61:3D:83:BA:33:A4:2A:35:E9:66:06
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848696058F01FC1BA3B41F57B50
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bfc6a5c-e13e-393c-9551-def2e9ba02b1.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     202656
IP address blocks:        104.250.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:58:f0:1f:c1:ba:3b:41:f5:7b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=07acfb0a-8304-43b9-9c58-e366b0ff26a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:dd:c1:f3:44:4c:23:12:54:13:19:12:65:
                    67:cb:1c:2a:67:f0:77:f9:28:0b:f2:b9:da:08:90:
                    7e:3c:37:f1:d2:13:9d:49:6b:3c:1e:9f:2f:6e:bd:
                    28:b7:70:d5:4d:ba:59:1e:c3:8a:36:a6:df:3b:f4:
                    2e:97:b1:a4:73:6b:ca:56:5c:6f:33:c4:d1:17:9f:
                    77:e0:0f:29:6f:0d:65:06:96:39:be:46:2f:cc:2e:
                    51:57:d9:6e:8f:43:e0:a9:d5:da:39:fc:33:c5:ce:
                    10:16:06:48:04:7e:b6:93:72:7d:54:66:ba:47:c9:
                    01:63:1f:51:9d:b7:2d:1d:3a:78:45:80:2a:0e:d3:
                    0f:b2:ee:ba:85:96:89:84:21:e3:08:78:bc:5d:15:
                    60:b2:1e:c0:0e:86:84:c3:cf:ca:01:78:a7:7d:5c:
                    22:07:a3:8d:74:8d:a0:fa:bf:a8:6a:25:e7:83:a4:
                    37:2e:da:27:13:44:56:41:2c:1d:d8:c0:8b:5c:bc:
                    01:bc:4c:d5:ad:17:04:00:54:2c:c0:2c:66:98:c4:
                    af:ff:7c:14:1a:85:21:d6:60:a7:ab:27:3b:ed:8f:
                    c1:57:9a:78:07:51:d5:cb:00:0e:94:8b:1d:72:8c:
                    8c:46:16:41:7e:48:1b:02:d7:5f:d5:02:81:71:d2:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:D2:B9:83:CF:81:62:AB:61:3D:83:BA:33:A4:2A:35:E9:66:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bfc6a5c-e13e-393c-9551-def2e9ba02b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:10:60:2e:af:c4:38:73:d9:aa:f0:74:73:8c:e1:ae:d0:
         84:12:54:7d:e2:79:86:99:5d:34:06:9d:b6:d3:7f:9d:d4:e5:
         d1:a1:bb:86:d9:5a:d0:45:eb:9f:4d:13:3c:90:d7:e1:78:e3:
         7f:14:49:97:0e:f9:3a:b3:f0:e0:c1:9b:14:d5:dc:03:a9:7b:
         d0:02:fb:cc:68:f1:09:e9:ce:9b:77:97:83:e6:ee:d8:07:61:
         ae:2f:0b:36:55:af:64:80:61:c2:45:9b:c2:58:eb:48:19:d3:
         e5:33:92:05:37:e1:eb:43:9c:22:cb:a5:a6:a8:51:b4:43:8a:
         a7:36:41:28:d7:59:a5:1b:3f:24:b4:69:ed:13:7a:c8:6b:a7:
         0a:d6:56:c0:ab:44:3d:45:d6:cf:5f:09:5d:08:af:7a:7d:f3:
         2e:e6:7f:2b:fc:71:2a:3b:e6:76:e9:3f:54:11:d6:0d:fa:a7:
         56:2d:73:cc:9a:05:46:4f:08:1f:fb:aa:ba:c6:b3:fc:8a:f4:
         94:4d:99:5e:79:65:36:be:72:86:81:c3:13:13:57:97:a7:48:
         0b:55:df:0c:bd:40:19:7f:7a:cd:0a:27:b1:86:0d:ea:15:7d:
         26:d1:81:d1:5e:a4:e3:28:bd:42:50:7e:89:8c:e2:6d:33:d6:
         77:d1:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:01 2025 by rpki-client