Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa
File:                     2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa (raw, json)
Hash identifier:          SnqjTFA2mwWl1cmPLe7W+fG74ZS4fchZktMVTe4fBh4=
Subject key identifier:   AD:C3:84:BE:3A:8B:E5:35:96:F7:54:95:BC:DE:BF:6D:30:CA:D6:4F
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F432858481C9A78CBF6A5028500F28A50
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     33387
IP address blocks:        104.224.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:78:cb:f6:a5:02:85:00:f2:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=465bb802-2e7b-4037-846e-eb55f819d2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:d6:65:fb:92:82:a4:63:39:82:3f:37:4f:
                    7a:04:2c:32:34:85:18:a7:40:6e:a9:af:76:76:c3:
                    41:10:11:8b:13:48:a9:3e:48:df:d8:b0:17:ea:e3:
                    68:3b:bc:40:05:29:38:3c:46:51:b9:a6:bf:93:76:
                    11:b8:c1:11:b4:48:46:b5:bb:32:a7:62:57:55:59:
                    a2:ad:5a:94:0b:f1:1a:03:bc:0f:2c:d2:ac:39:9b:
                    2b:fb:a1:12:88:77:5d:31:e6:52:d9:b5:1e:7f:3f:
                    a1:03:93:da:b0:30:e3:4a:98:6c:c5:60:63:c7:fc:
                    bd:57:1f:a9:ef:38:76:30:ca:0a:a8:ee:a5:10:62:
                    25:9f:6e:63:47:92:ac:cb:6f:95:b3:5e:37:08:69:
                    53:8b:69:b1:d9:65:56:27:a5:0f:73:70:5d:d1:49:
                    25:2a:b5:a8:6d:2f:7b:f7:b7:3d:2e:29:aa:26:e0:
                    60:4a:2e:62:f0:61:f5:67:6f:5a:d6:e8:59:1f:33:
                    d3:9c:e9:aa:9e:a6:9c:e5:c6:84:1b:0d:a3:c1:48:
                    44:e2:1f:8a:86:03:52:4f:09:af:b6:a1:a0:bd:59:
                    ce:82:4e:2c:56:ac:d2:03:4c:d6:89:73:0e:ba:29:
                    d0:2c:3f:c3:7e:78:04:d8:86:19:3d:5e:fa:9d:7e:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:84:BE:3A:8B:E5:35:96:F7:54:95:BC:DE:BF:6D:30:CA:D6:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/2acba3df-9f0a-3582-b2f6-62a24560f8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:42:f3:d2:b6:ff:49:b0:8e:04:9f:0a:1a:e0:cd:4e:04:
         cd:4b:64:67:72:c3:0f:2e:0a:c0:c0:93:0a:6f:92:c0:aa:9b:
         bd:63:df:c0:50:37:8d:cd:a3:8d:a1:25:81:c3:92:d2:c9:e0:
         1f:07:eb:f8:c3:1a:f1:46:f8:73:41:da:57:18:84:71:e5:cc:
         b6:1f:68:d1:10:cd:40:9c:ef:62:47:cb:da:64:69:a4:a2:68:
         6d:ce:bb:ef:7c:0f:cf:29:75:f5:f7:a0:b0:e2:44:c0:af:3d:
         61:de:b8:1e:93:4e:ac:47:84:29:73:37:c5:9a:86:12:3c:15:
         0b:47:4c:1b:a6:25:b9:3c:db:29:56:18:83:cd:b7:8d:0d:44:
         10:53:c2:88:ba:de:24:45:4f:78:3d:89:b1:6f:ec:76:f9:09:
         7b:ae:80:86:9f:c9:9d:2e:54:16:93:fa:a3:5c:45:ac:9e:63:
         15:e3:58:47:8d:92:ce:3f:65:5d:73:7f:bc:69:41:2a:40:c0:
         da:19:6a:4e:2e:c7:bb:66:0e:58:4d:a6:dc:53:e3:d0:6b:9d:
         13:4c:ef:c1:9d:21:24:0c:e8:6e:96:0c:60:e1:51:e4:81:58:
         88:ee:ee:4a:8a:b0:3f:a9:8b:ab:a2:43:ab:dd:51:74:60:66:
         84:85:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:18:41 2025 by rpki-client