Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c33deb7c-2e84-3677-a90e-973de04fa5de.roa
File:                     c33deb7c-2e84-3677-a90e-973de04fa5de.roa (raw, json)
Hash identifier:          cO0L1uCqjPr1QQkfBAKQzxGfOXvgtHlJ1YGCM5t9Hzs=
Subject key identifier:   EC:E7:7B:91:03:1A:83:6E:B3:B9:47:32:29:A8:DF:F7:86:0E:E3:72
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094CEC9DACC57C04DBFB400
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c33deb7c-2e84-3677-a90e-973de04fa5de.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ce:c9:da:cc:57:c0:4d:bf:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=a273a47e-db4c-4fb9-9519-ad7ccade8b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:a8:cb:a7:f9:15:5a:1d:6c:62:f2:82:5f:
                    5d:8f:a5:7d:2c:89:b3:59:47:24:bb:3b:b6:f5:be:
                    66:28:d4:47:5d:67:9a:f0:10:ce:43:07:67:64:b0:
                    db:39:b9:60:85:58:29:bf:e9:ab:3c:d9:cb:f8:7f:
                    35:a9:27:7b:d5:ac:06:c2:51:a5:a1:3a:cd:ff:06:
                    be:e6:8f:89:97:72:c2:0e:ff:12:60:9d:3e:f1:65:
                    ba:39:cd:33:2c:f4:a1:3d:98:d8:89:de:41:18:56:
                    87:28:a8:34:70:9f:5e:ea:97:db:ad:59:cf:5c:4a:
                    c0:fd:a5:cf:b2:7c:61:c0:8a:50:f6:a6:a2:eb:ba:
                    45:79:1c:f9:a9:5c:00:4d:64:e5:73:c4:1b:bf:d3:
                    a2:e7:b4:c8:b7:39:f5:d3:59:c6:32:e8:4d:e4:b4:
                    b7:d4:76:f6:4c:52:aa:b5:aa:b7:19:13:63:69:96:
                    e6:29:22:8c:6d:d7:68:88:77:41:9a:d8:a2:50:19:
                    36:36:db:5a:b9:dd:bd:db:50:74:fb:8a:20:5c:f1:
                    d5:08:ed:7a:9b:14:59:a6:92:9f:f7:8b:66:1c:30:
                    a8:ea:6f:64:15:84:aa:ff:8c:33:69:5e:e2:d4:2f:
                    28:37:5c:9b:c0:6b:56:4d:fd:5d:cb:8e:ff:f3:81:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:7B:91:03:1A:83:6E:B3:B9:47:32:29:A8:DF:F7:86:0E:E3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c33deb7c-2e84-3677-a90e-973de04fa5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:48:c4:ee:5d:1a:bd:7c:75:fc:32:13:cf:b3:47:e7:71:66:
         7e:9c:57:ec:fd:d5:45:ef:ec:ee:5e:e2:98:da:8a:d0:1e:eb:
         95:71:ee:76:8f:9c:53:d3:02:06:fd:87:c3:39:b9:9e:f3:c6:
         80:25:1e:ea:fe:c3:ce:ff:8e:87:a7:18:25:45:1e:e0:fe:cd:
         c7:22:62:1e:c5:48:f8:aa:4d:1d:01:28:9c:2d:ff:48:da:38:
         50:ac:4b:4d:34:cb:3c:b4:5e:44:46:29:60:3d:e1:d7:e8:57:
         c9:a9:dc:b2:5a:a0:0c:15:50:33:5f:bb:f0:c8:fc:63:8f:70:
         ef:59:5c:80:64:49:8a:1d:1f:5d:1b:06:2b:4a:58:98:b3:9d:
         b3:e7:fc:df:6b:65:fe:1b:49:92:15:90:66:0a:8c:a0:9e:cf:
         73:c8:bd:66:fc:e1:c6:ea:35:79:97:aa:e2:0e:5b:e0:54:55:
         fe:70:a5:22:78:58:c4:7e:88:17:8f:2a:45:a4:cd:fc:77:78:
         3d:d5:90:fd:78:44:d1:ed:2d:cc:c4:83:0d:c0:8c:ab:2f:23:
         05:80:6c:6a:b5:21:dc:31:95:c1:7c:10:70:0d:e0:5b:93:be:
         f5:36:01:ea:90:ed:dd:61:9c:a6:d8:1c:7c:23:e5:e3:e3:a1:
         b4:38:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:26:28 2025 by rpki-client