Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
File:                     12457d9b-1b73-3fa3-9936-55d404c83c78.roa (raw, json)
Hash identifier:          Xbcq7syHbai4+0ccuog7Zm6cTckN9ungVSpzAle8FBo=
Subject key identifier:   BE:AD:15:5F:C6:44:A7:70:E6:0A:72:CF:0D:DC:5B:E2:B3:78:E4:F7
Certificate issuer:       /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial:       010D0C9F4328584858A04F0EED07DF04DD2E0580
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     203020
IP address blocks:        104.247.113.0/24 maxlen: 24
                          104.247.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4f:0e:ed:07:df:04:dd:2e:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=e29ca26b-4ad7-4e0f-8caa-46fea96afaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:2a:30:a1:ab:cd:a4:55:44:54:02:46:a5:
                    d3:2f:51:58:80:1b:fe:91:96:ad:d7:77:ce:44:69:
                    f7:96:83:24:c5:73:17:d2:db:c7:e5:cf:52:34:55:
                    f1:c3:38:f1:e3:09:d9:1d:63:2d:a0:17:0d:59:cd:
                    7e:2b:14:d6:65:1d:4f:ce:28:b9:be:a4:5b:9c:f8:
                    f7:68:01:c7:5e:e4:48:3c:a2:08:ca:b3:de:ea:75:
                    76:7f:5e:d9:08:71:2c:ac:1d:ea:7a:ac:6d:52:1d:
                    77:6f:2d:56:f6:b3:85:b1:9c:7d:8d:5a:0a:8d:4f:
                    54:ec:02:47:35:68:76:8a:12:8d:d8:46:ad:c3:14:
                    e3:c6:31:c1:77:89:a5:29:64:a3:af:e5:54:d4:f8:
                    88:9b:ff:0b:9f:4c:89:63:5b:bb:56:b7:95:76:a8:
                    e7:9e:4e:89:43:60:d1:d5:d7:a3:e5:e8:53:ab:f2:
                    be:b4:43:99:c4:35:09:40:37:11:44:1c:1d:fa:09:
                    45:60:b4:37:3f:2b:f3:e2:a7:26:e9:4f:e1:72:fe:
                    ac:7b:e9:e9:93:bb:08:61:a5:de:82:60:1e:d6:ae:
                    37:d1:c0:b8:2a:fe:c5:b0:55:97:73:87:f6:63:ba:
                    c4:79:f8:0a:ba:13:06:12:74:bd:c6:f9:3f:08:b0:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:15:5F:C6:44:A7:70:E6:0A:72:CF:0D:DC:5B:E2:B3:78:E4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/12457d9b-1b73-3fa3-9936-55d404c83c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl

            X509v3 Authority Key Identifier:
                keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.113.0/24
                  104.247.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:06:49:93:6f:15:80:8b:14:0e:d3:f5:ef:e9:df:86:ac:b0:
         9b:26:1c:cc:87:4b:2f:f7:75:50:f6:79:2a:e1:40:2c:10:c3:
         1a:13:05:2f:4c:62:3f:94:9a:a4:9b:d6:b1:b7:0c:09:b1:f1:
         c3:61:b7:2f:0f:20:40:db:dc:71:d6:53:8e:8f:99:f0:2d:4e:
         9b:95:04:fb:5d:16:9f:f9:0c:28:ac:32:0c:c8:01:aa:57:4c:
         ca:40:a0:99:b7:d2:3f:98:f3:73:0c:bd:30:1a:ee:30:b4:1d:
         f5:16:c8:95:23:09:f1:30:e3:04:f9:28:9f:7f:76:b6:c6:82:
         37:f2:d0:62:a2:db:37:0e:f1:c5:71:ff:1e:99:f3:b7:9b:59:
         81:55:f7:04:d6:6f:8e:9d:82:63:20:13:d5:01:22:96:f2:57:
         45:52:cb:82:d3:ee:9a:fa:f9:55:47:21:ec:ed:5e:86:d6:35:
         d3:88:cf:cf:c5:60:97:f2:58:c3:cf:81:5d:6b:45:16:ae:39:
         6f:90:3e:cd:30:4f:3a:ea:18:65:b1:30:70:98:40:37:47:4b:
         f3:2f:30:a0:ed:cc:15:28:ab:1a:17:e6:5b:ef:a7:ad:ec:b4:
         b1:1f:b9:43:68:96:fd:bc:86:5e:15:8e:12:14:da:1e:a8:09:
         35:51:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:38:35 2025 by rpki-client