Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0494a3f-f6a3-3e74-b5de-a573e347113b.roa
File:                     a0494a3f-f6a3-3e74-b5de-a573e347113b.roa (raw, json)
Hash identifier:          VbobkloBDIF8SCs4DeaLEtg402CpH3f6mXyoeVZN6xs=
Subject key identifier:   6A:9C:A3:1F:D3:A4:37:17:30:02:A9:50:CD:78:7D:A8:3E:BA:26:49
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F43285848653041F30749D96D0E7FBE00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0494a3f-f6a3-3e74-b5de-a573e347113b.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        104.244.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:41:f3:07:49:d9:6d:0e:7f:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=d86b44b2-49b0-4ae8-b3d2-c4b2668cd4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:2c:44:6a:14:1e:a6:60:c0:b7:aa:91:6b:
                    0a:38:e6:a4:16:c3:88:01:1a:c5:66:5a:f6:11:f1:
                    b3:aa:b6:81:3a:4d:4a:6c:10:09:9f:70:b5:ab:21:
                    34:92:48:22:ce:7a:df:c3:8f:c7:f6:69:b4:60:a9:
                    50:66:06:ec:75:21:00:da:7c:6f:ba:38:77:c2:7c:
                    d3:f8:6a:7c:9a:33:24:b3:84:ee:c8:83:36:97:c3:
                    98:9d:15:bc:96:85:ce:67:bc:28:b1:c2:78:b7:60:
                    c4:8a:40:a4:6c:57:da:d6:d8:7e:b8:08:40:ad:f6:
                    3f:e2:42:09:56:7b:a8:86:fe:bb:00:ff:de:6b:62:
                    fa:7e:8c:97:2c:72:6b:e5:05:83:4b:5d:fd:4e:23:
                    88:f1:e0:9f:0f:5a:58:3b:81:26:d7:40:8a:3b:78:
                    68:84:06:da:4e:95:c9:c7:1e:39:19:50:c2:b6:61:
                    75:46:1c:40:22:20:06:68:af:e9:0f:3d:25:de:7d:
                    b5:0a:36:a7:5b:bf:35:0c:74:ed:08:92:e8:08:ef:
                    72:4e:9a:ea:a7:ff:91:40:81:4e:bd:f4:19:72:43:
                    99:68:cf:d3:2a:8f:1f:ad:66:77:d6:40:bc:32:29:
                    7e:2c:89:45:f7:7d:be:e1:f8:ea:5c:73:b5:63:7f:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:A3:1F:D3:A4:37:17:30:02:A9:50:CD:78:7D:A8:3E:BA:26:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0494a3f-f6a3-3e74-b5de-a573e347113b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:75:0d:e6:75:f6:0d:17:bc:51:40:32:60:ba:f1:af:1e:6a:
         59:26:50:6c:6d:0f:d3:fd:1f:fd:81:8d:07:d8:cf:be:f7:8a:
         90:48:a4:a9:c4:37:42:8a:79:67:55:05:d2:d2:7c:8e:a2:76:
         97:61:bb:46:c1:5a:e1:27:d1:d3:ff:e8:f2:91:27:e1:87:2f:
         a2:20:e5:8a:8f:9f:0a:a9:57:0a:f1:38:e3:c0:75:35:56:d0:
         2d:01:fe:39:b6:22:c1:41:83:a0:cd:03:d5:64:1a:dc:40:51:
         04:72:ff:08:c3:c4:5f:4a:49:7d:a6:26:06:9f:44:c6:f5:4e:
         f2:f6:95:8c:50:cb:71:1c:ee:d9:75:98:35:f9:06:fd:63:b6:
         23:d3:9e:ef:d5:b6:84:a1:4a:c7:a4:c6:ef:1e:2f:ce:76:05:
         ec:6a:96:36:f3:98:81:31:57:98:2a:b2:4a:c1:26:24:6c:da:
         a6:2b:57:23:52:b5:d5:98:93:4e:67:bd:88:7f:66:4e:ec:71:
         6b:87:36:d3:7c:bc:3e:91:da:2f:fa:1d:d3:0a:90:e7:c0:38:
         84:12:68:0f:5c:cd:0c:42:44:be:2a:35:68:93:d1:4a:d3:f5:
         37:e1:21:54:da:41:93:31:64:be:39:ae:ab:b7:39:dc:8b:c0:
         b0:b9:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:33 2025 by rpki-client