Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa
File:                     a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa (raw, json)
Hash identifier:          dpSvWtO9uVXa/lNeWDSriotigKv5BfayO6TnwD786ks=
Subject key identifier:   C7:43:FE:2F:8C:03:00:28:C7:99:A4:8C:0F:0D:17:3B:06:49:F2:FC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094E27CFE75C73A8D13658F
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e2:7c:fe:75:c7:3a:8d:13:65:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=c183aa9e-3bde-4ef5-a486-3e7d6001b634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:74:00:55:42:b4:2f:ab:9e:55:57:66:3e:
                    b6:c7:4e:5a:c6:c2:9f:b9:97:ca:98:a2:6b:95:5f:
                    96:be:73:b2:20:ac:04:43:a5:b5:48:6b:ed:25:a4:
                    c8:87:bb:0a:d5:4a:04:af:96:a9:d0:4f:f2:81:c5:
                    49:1a:eb:24:57:99:fb:38:2c:cf:5c:07:e3:68:90:
                    c5:22:b8:e0:b5:55:26:b8:55:d8:3b:7b:f0:76:65:
                    fb:a3:f3:8d:f5:17:51:9f:b1:22:cd:92:3c:a4:87:
                    7d:73:0a:7b:a3:26:c6:9f:e7:d4:8a:7e:e9:5d:66:
                    92:10:81:20:2b:09:4a:a6:81:2e:71:8b:1b:b7:02:
                    1b:a3:c2:36:7b:ef:74:c7:c6:9b:11:5e:0f:5e:c7:
                    86:d7:35:85:76:26:f0:d9:16:e4:51:12:b5:a5:12:
                    33:bb:18:65:5c:5f:5e:b6:f1:25:2f:ca:51:e9:11:
                    ff:60:1c:40:35:64:13:8e:1d:c6:7c:d7:41:d0:32:
                    99:6d:e7:6b:81:90:2e:6b:e5:e5:71:57:e1:97:dc:
                    46:78:85:33:df:18:9b:8f:fa:30:b7:77:9e:36:87:
                    64:13:29:05:3b:82:0e:f1:a3:03:c9:3d:16:a6:e6:
                    16:84:06:16:3c:a5:ab:c9:45:17:37:f4:d0:be:a5:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:FE:2F:8C:03:00:28:C7:99:A4:8C:0F:0D:17:3B:06:49:F2:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:08:fb:4e:58:2a:cb:68:66:97:b0:96:2a:1e:a5:25:5c:de:
         2f:ba:75:cc:85:1b:78:68:69:da:71:07:4b:27:6e:34:c2:c7:
         2a:d3:72:bc:c2:a2:25:ff:81:37:f2:28:ae:4b:99:00:56:9b:
         c7:70:4b:84:de:0e:82:ac:b6:0b:a6:fa:83:5c:72:07:3c:fe:
         a8:a5:07:f1:5f:cd:34:02:6f:eb:b7:45:cb:0a:7f:d5:12:21:
         72:fd:28:61:70:6c:42:76:34:f6:0a:bd:b2:0f:ef:1c:c0:cc:
         35:ff:23:d5:71:c8:60:08:f1:bc:7c:0d:6d:14:cd:12:37:bd:
         b7:c8:c4:2e:0f:8f:9a:fa:ed:11:00:d9:7a:ab:47:93:00:28:
         ac:c8:fb:52:55:1d:6f:03:c4:cb:38:52:a8:38:d6:e1:fd:73:
         b9:e4:ec:71:c4:2b:71:49:c3:a8:06:15:b7:48:14:91:ed:42:
         53:b8:aa:9a:c3:0f:d8:15:00:8a:f2:7b:9e:94:cb:85:5d:c1:
         48:80:59:06:70:35:cb:9b:7b:8e:e0:1d:02:53:e5:a4:a6:33:
         5d:81:c9:7b:b5:68:6e:b4:d7:35:4c:9c:6a:bc:51:10:47:5f:
         ba:98:08:bc:bd:aa:58:8b:24:b1:6c:72:b3:7c:2a:c8:7c:98:
         4f:c9:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:42 2025 by rpki-client