Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b594947f-54d6-3d26-854c-7caccfa57c01.roa
File:                     b594947f-54d6-3d26-854c-7caccfa57c01.roa (raw, json)
Hash identifier:          s+90xi3FmM7P/SStkEeRvuhe1yAyNCc/LceS1q+nbUQ=
Subject key identifier:   AF:B2:08:77:43:62:15:E5:6C:B9:F9:A9:80:2F:AA:32:CF:4E:F3:FA
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F432858487B85B342C9772933C7934FB0
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b594947f-54d6-3d26-854c-7caccfa57c01.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     63086
IP address blocks:        104.36.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b3:42:c9:77:29:33:c7:93:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=c84f8ba5-6b0f-4a89-aa37-9ac6c688e61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:11:cb:02:d6:a2:20:71:51:a5:e4:20:d1:
                    73:0c:8a:7b:2c:58:ed:8a:6c:f1:96:31:12:80:80:
                    ad:c0:ec:49:b3:39:2d:8d:2d:7d:87:9e:f4:8e:09:
                    6e:cb:5c:39:a5:15:4f:eb:ff:a4:73:36:77:8b:53:
                    77:b4:f0:7a:ba:72:de:da:9f:0b:9e:88:48:a1:ab:
                    f6:68:d4:ae:5b:6a:c3:ab:bd:f7:1e:04:f0:ed:39:
                    20:f9:68:2d:77:25:99:ee:28:14:4c:77:af:c3:3d:
                    56:03:18:f4:55:0d:2e:10:04:e4:71:8f:e6:c1:c6:
                    d2:45:66:cb:0d:0f:a0:6d:69:fd:fe:a0:5b:c6:5e:
                    5c:97:2c:16:6d:e6:61:6e:c3:79:83:a7:07:f5:b6:
                    ce:47:e8:22:e2:73:b5:68:69:a2:c9:dc:0b:24:da:
                    e3:88:2e:32:88:84:53:e5:ef:7d:ba:b4:62:55:ee:
                    fe:92:0e:18:57:55:e7:b1:6c:16:6c:01:31:c2:49:
                    32:5a:4a:9f:5e:27:f4:14:b4:0d:33:e0:2d:31:8b:
                    cf:5f:7e:d5:c4:fc:28:12:02:80:21:64:ab:62:9b:
                    00:16:de:f2:fc:a9:ef:ae:33:ea:1e:8a:89:1e:83:
                    35:bd:18:63:1e:93:98:64:b5:be:8b:a1:ef:c4:19:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B2:08:77:43:62:15:E5:6C:B9:F9:A9:80:2F:AA:32:CF:4E:F3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b594947f-54d6-3d26-854c-7caccfa57c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:89:8a:af:a8:8f:43:bd:66:e1:dc:79:25:4b:87:ef:23:90:
         c0:ce:4b:b6:a7:75:6c:0b:6c:bb:13:2c:c4:9b:21:72:7a:0f:
         88:2b:93:b4:bf:b5:2c:a7:a7:0c:74:24:54:56:f3:ac:da:aa:
         ae:f9:63:d9:19:db:95:3a:55:8b:28:0e:cd:ff:76:ba:44:5a:
         0f:ea:16:1f:2d:c5:b3:24:12:22:98:36:09:18:fb:ba:fd:80:
         03:fc:33:1a:2e:90:7f:23:bd:56:de:ba:55:7e:68:50:22:47:
         83:df:0b:a4:15:3c:2c:1b:0c:03:e7:ef:85:8c:71:7e:03:6a:
         8e:ce:9b:5d:e0:85:77:17:14:66:5a:03:e2:50:c2:2e:57:ca:
         fe:31:24:0b:ea:e8:e9:3a:99:fa:f2:54:19:bc:78:43:1f:0d:
         05:65:63:63:d8:41:fe:4e:11:cf:04:92:59:4e:3d:f1:54:d3:
         95:c3:f8:b7:d5:cd:77:5c:c4:e7:03:bd:f9:8f:05:bf:52:66:
         a2:2e:ee:94:af:68:3d:91:80:14:6f:c0:83:83:d1:76:1b:f4:
         9b:7b:b3:c6:9f:25:e7:66:3d:2d:67:d7:6a:c2:f9:51:48:fc:
         86:8e:a8:2e:d3:5f:67:06:b5:94:90:0f:fb:70:c7:13:24:26:
         0b:1d:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:45:34 2025 by rpki-client