Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
File:                     303ae16a-2367-33ca-92f7-16ee2a181db7.roa (raw, json)
Hash identifier:          9jantLJuaUQAW52Q+x8YlSVymYsFzxVGgk2ey73mkMY=
Subject key identifier:   23:79:E2:A8:83:C2:44:86:6B:FF:5D:2E:BB:48:5D:00:9D:48:B5:47
Certificate issuer:       /CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
Certificate serial:       010D0C9F432858485470353681EDB1AC725691B0
Authority key identifier: 0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     147314
IP address blocks:        104.193.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:35:36:81:ed:b1:ac:72:56:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c32d4d-1a33-4637-a07d-fcaee3a3c83b
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=1942a3c4-9f0e-4f50-b507-5bc782074243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:6e:59:fa:b1:64:9d:c9:4e:4e:82:a3:71:
                    15:fd:67:1d:ff:b2:5e:88:25:19:ec:31:93:c5:d9:
                    74:a7:59:48:e3:54:83:fd:12:93:74:1b:55:0d:be:
                    f9:9b:3c:d0:a7:09:97:a9:11:49:65:7a:c8:ea:13:
                    21:90:e2:b1:ff:23:bb:ac:01:71:e9:a4:3d:3c:1f:
                    0c:c6:aa:39:62:79:31:d1:73:e3:6a:c5:3f:a6:e0:
                    4f:82:76:44:82:04:0b:71:b8:47:04:08:5e:ab:1b:
                    e8:23:b3:1e:32:6a:56:ee:e4:a5:a6:df:f7:a7:47:
                    a9:73:9e:12:2c:b4:7b:cd:f3:55:13:fc:a0:5d:c2:
                    bd:18:9d:28:d6:e8:51:fb:a6:cf:d8:1a:bf:fa:b1:
                    b8:9f:16:74:6a:ee:91:cc:69:53:47:e3:c4:6b:ca:
                    dc:70:ef:79:e9:45:0b:26:c0:ab:de:ce:f6:08:72:
                    b3:fd:51:88:08:d3:7a:bc:1c:84:1c:19:39:b9:3b:
                    de:32:be:24:64:eb:d2:ef:48:96:4a:ca:ff:ff:8a:
                    b2:df:8b:4d:23:49:ab:66:2a:1f:cf:88:b7:f0:9e:
                    6c:68:1a:5e:00:9c:6e:aa:83:ca:42:a0:3b:08:f0:
                    5a:31:88:fb:d4:30:8a:c6:69:96:61:e7:47:46:a9:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:79:E2:A8:83:C2:44:86:6B:FF:5D:2E:BB:48:5D:00:9D:48:B5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/303ae16a-2367-33ca-92f7-16ee2a181db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.crl

            X509v3 Authority Key Identifier:
                keyid:0C:27:40:58:56:BC:42:98:19:65:4F:F1:F8:9F:79:32:47:C1:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c32d4d-1a33-4637-a07d-fcaee3a3c83b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bb:ee:0e:4e:cc:fc:41:b4:72:f4:e1:bc:36:d0:27:f0:ac:
         8d:ad:c6:f1:e3:86:ca:8b:ae:b9:95:81:b8:12:42:69:e5:2b:
         32:d5:0b:6b:5f:81:ea:06:3c:e1:f3:1f:cf:f2:45:1e:17:54:
         e9:87:6d:86:02:fd:bb:a7:d4:93:73:c3:a7:bf:83:b4:53:be:
         e9:fa:66:e5:92:b4:31:4a:87:f4:c5:15:2a:75:20:be:a8:4e:
         69:b8:e7:ab:82:24:08:33:ca:9b:07:8e:5f:83:e9:15:f2:82:
         7d:40:8c:ca:04:97:38:b4:b8:66:cf:10:fe:1a:ae:bc:d4:88:
         b4:ec:e1:a2:43:93:f9:66:3d:32:e6:be:1f:76:32:29:ac:64:
         86:b4:4e:b9:45:00:d4:8d:9b:b1:d9:67:71:7e:a5:f2:f4:37:
         ea:ea:fb:c1:a1:ba:59:1c:e0:5a:53:50:23:8c:65:28:7f:da:
         97:cc:45:71:13:f8:dd:c6:06:3d:e7:7a:f7:ef:dd:1a:5a:d1:
         40:41:3c:2b:53:ef:62:00:25:27:d7:d0:67:f6:f4:e1:70:33:
         ac:2c:1d:88:c0:ee:48:02:97:3c:9c:be:e9:66:dc:35:b4:bf:
         93:5e:a3:07:31:0b:b2:ee:e7:10:4a:42:f9:93:5b:4c:5b:37:
         23:fd:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:48:45 2025 by rpki-client