Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
File:                     e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa (raw, json)
Hash identifier:          wJXADOMu/s6XsITwTX73/q4sCnU4dN421eI8e5bpYnc=
Subject key identifier:   EF:9B:C6:F8:1A:BB:18:4E:FE:A6:46:B7:2C:91:B1:C1:93:44:E1:05
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB0CD9BE08639564C1A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        104.137.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b0:cd:9b:e0:86:39:56:4c:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=63ff7576-1ad4-44dc-bf00-cebf4d6641f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:83:3a:5b:ee:ad:0c:04:76:70:bb:dc:b1:
                    26:3d:73:a8:db:6c:82:e8:4a:c9:41:26:7d:d8:4c:
                    e1:b0:65:55:d8:92:a8:b9:2f:d0:d2:be:bf:f1:74:
                    c6:cb:ca:0e:18:be:1d:30:a9:26:a3:53:4c:6f:68:
                    0b:a6:4c:b8:93:ad:49:c3:76:7a:4d:5c:cf:e1:d3:
                    3e:1b:31:3e:aa:54:f9:ee:46:af:2b:5f:84:77:78:
                    79:75:b4:7e:e4:c2:41:cc:1f:0a:3c:72:0c:31:f0:
                    73:a0:91:f9:84:0d:e3:ff:cf:90:e3:11:c8:45:5c:
                    84:4e:0f:d9:59:57:00:6c:94:81:27:df:59:aa:94:
                    e5:04:72:84:f4:26:9c:9c:3d:82:99:4f:fd:00:87:
                    d3:df:d9:84:dd:cd:b4:6e:d1:d3:7c:5a:e6:5f:f2:
                    81:32:d7:a5:d1:46:f0:b7:16:36:d9:05:a7:d7:2c:
                    e4:a0:40:22:58:ea:a2:62:a0:05:09:40:6d:d2:eb:
                    cb:fa:89:17:ea:22:5d:a2:29:1a:3c:c0:4f:3d:2e:
                    49:d0:a2:26:eb:23:34:b8:9c:90:80:01:8a:5d:4d:
                    f8:38:1d:f7:aa:0f:b4:7c:6a:b4:24:45:c7:22:d3:
                    79:79:eb:ed:45:a8:b4:49:54:54:60:f1:df:6f:17:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9B:C6:F8:1A:BB:18:4E:FE:A6:46:B7:2C:91:B1:C1:93:44:E1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:42:35:38:95:3b:4e:4e:88:e3:06:05:c8:21:0a:00:4e:
         e0:e1:57:5f:d9:45:66:36:32:03:cf:d8:6c:34:08:4e:2e:41:
         6c:a9:13:eb:32:aa:ce:ba:6e:93:14:71:3b:31:34:35:ae:f0:
         cf:04:23:d5:98:a6:ae:72:18:93:1a:5d:0e:61:aa:a6:87:bc:
         83:b9:47:87:26:e5:68:86:de:96:b8:76:70:b3:37:cf:56:4e:
         87:7e:a2:75:a1:83:99:f4:88:98:af:17:a5:e8:ee:23:8e:32:
         6e:75:d4:c0:15:e7:6f:ff:d5:b6:7f:24:28:13:e8:56:7c:fd:
         e2:6c:31:a6:45:16:34:c2:80:0e:09:82:d7:4b:d6:d9:c4:b3:
         46:a2:87:41:85:02:c3:dc:4e:d6:de:3c:b4:a2:cf:30:a0:c5:
         aa:60:74:05:f8:02:4f:80:7b:3e:fc:89:be:90:9c:6f:6d:37:
         74:4c:cf:ea:66:84:db:5c:b7:e3:57:4f:ff:9d:34:21:6b:eb:
         ae:db:88:fc:2a:a4:8c:0c:4c:f0:d9:bf:f6:ff:6b:50:7a:c5:
         cf:12:c8:36:01:22:b8:27:89:f6:ea:40:89:05:5c:9c:60:cd:
         0f:2b:e2:90:3d:7f:36:f2:a1:20:f0:80:14:b0:81:57:5e:f2:
         c9:0b:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:13 2025 by rpki-client