Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ece71982-890c-30f9-b8c9-1153c638ad6f.roa
File:                     ece71982-890c-30f9-b8c9-1153c638ad6f.roa (raw, json)
Hash identifier:          05cF731Mua9pzyT8X4M8f4bozpJ1iC36olF4tfaczsA=
Subject key identifier:   E2:68:5A:DD:27:06:9D:A5:A3:31:15:4B:A7:C3:36:6A:09:25:33:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858486AC59F83EFE953E640F2C010
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ece71982-890c-30f9-b8c9-1153c638ad6f.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     19446
IP address blocks:        104.224.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:9f:83:ef:e9:53:e6:40:f2:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=35c8d1f5-f894-496c-8483-f16ded77195b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:4a:46:55:2e:35:48:bc:db:34:b9:f9:99:
                    d0:25:72:5c:13:ee:66:1e:90:c2:40:75:00:64:12:
                    eb:fc:15:2a:12:5d:9d:1a:74:ef:d1:9b:03:3a:25:
                    cf:bc:c3:33:f4:96:32:3f:0e:70:2d:cc:1c:22:2f:
                    ab:b8:ed:fc:e0:69:b9:ae:ef:9b:e7:da:ad:83:1b:
                    7d:c2:c0:6e:5b:48:29:cc:a8:03:ff:d9:a4:fe:42:
                    cb:3c:d5:b9:08:76:47:ec:3d:c7:1c:ac:7d:57:61:
                    bc:0a:c1:af:23:12:76:ba:84:7b:c8:26:86:f1:be:
                    dd:e4:34:7e:f9:50:cf:b3:94:23:9d:25:15:c9:dc:
                    ca:b2:fb:6d:e9:73:0c:43:2b:13:c7:23:dc:47:f7:
                    19:ab:34:b7:19:52:af:1a:a1:74:87:e4:06:ac:6a:
                    5c:94:79:dc:38:cb:3a:93:6d:96:3c:08:af:07:25:
                    d4:3b:99:ca:6f:56:30:20:fe:c5:64:6c:d1:42:e6:
                    b2:1b:0e:d3:16:4c:18:67:98:e6:9c:9f:11:07:cc:
                    7b:44:47:18:8c:78:e7:90:09:1f:b3:b4:54:b9:40:
                    33:71:c5:e3:7a:f2:df:50:06:48:c8:35:cc:da:86:
                    ed:bb:d1:8d:03:33:72:2f:2f:2e:70:a1:04:a2:89:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:5A:DD:27:06:9D:A5:A3:31:15:4B:A7:C3:36:6A:09:25:33:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ece71982-890c-30f9-b8c9-1153c638ad6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:07:fd:f2:63:f5:76:ad:78:dd:ec:8e:09:98:10:89:6f:cc:
         46:24:c5:fe:ce:8c:b9:83:c1:d5:e8:e0:93:a8:f1:2c:4f:5d:
         21:df:a2:43:6b:83:fe:27:95:10:1c:26:b1:76:37:0e:a6:48:
         b3:ee:17:d8:d8:09:68:c5:63:fb:4f:7c:2a:ac:43:19:e5:9c:
         04:61:17:14:ce:2f:f2:65:6a:1e:ae:fe:2d:6f:c1:7b:44:4b:
         40:df:9a:18:d4:69:46:92:1d:eb:26:14:c3:c2:3a:78:89:14:
         e6:9c:84:c7:fa:49:a0:b6:5b:83:65:c3:fd:f6:4a:d2:13:0f:
         a6:4a:2e:f0:d5:ff:97:37:ac:85:0f:2d:c0:c1:e1:9a:b1:9a:
         f8:a5:2a:38:16:82:89:e5:b8:76:e0:83:75:da:7b:de:69:16:
         d9:26:c0:aa:25:9e:cf:d9:2a:8f:7f:06:ce:d1:07:84:87:11:
         0d:a9:42:78:e3:4d:69:e8:43:9c:bf:bf:72:ba:06:a0:7e:6c:
         3e:6e:a4:89:1b:c8:05:ae:59:6a:8a:aa:f7:de:6d:00:e2:ac:
         ac:17:d1:41:aa:be:34:a8:12:98:e4:05:7b:27:44:30:0b:e2:
         da:9f:64:89:ec:6b:b0:7d:64:b2:01:6a:7a:91:9d:f5:4e:b5:
         b0:7e:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:23:10 2025 by rpki-client