Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06db2ae7-194f-39d9-bcbd-70a009b8a64e.roa
File:                     06db2ae7-194f-39d9-bcbd-70a009b8a64e.roa (raw, json)
Hash identifier:          Z2rRFa7jQ0ljnn0Tsu6610w/PMyl1MPkRNCZEughTWA=
Subject key identifier:   2D:43:16:BC:75:A2:2C:5C:C9:3B:24:9C:02:8C:C7:58:FB:0A:0F:A5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848530AFD71A4EA91189DB1FB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06db2ae7-194f-39d9-bcbd-70a009b8a64e.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     24319
IP address blocks:        104.79.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:fd:71:a4:ea:91:18:9d:b1:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=d6bb021f-a7c3-432d-9965-448784506284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:67:1e:91:29:ae:85:11:14:53:f1:8b:07:
                    62:44:aa:40:89:22:0e:d9:c4:42:5b:c6:1b:08:48:
                    32:82:c3:7e:72:c9:42:23:57:70:cd:ae:c7:95:3b:
                    2d:31:bf:82:bd:2e:ab:91:19:e3:24:49:a4:25:d1:
                    56:35:b4:15:82:b6:22:dc:b8:8a:95:cc:b9:27:bc:
                    36:ff:f5:d7:78:c6:ba:52:eb:9b:e6:bc:90:8f:2d:
                    44:b3:4e:95:4c:1e:d5:d0:77:66:45:15:a1:37:1e:
                    b3:f4:5e:b4:cb:c4:73:9c:38:17:54:0b:dc:c4:2a:
                    e7:0e:11:3b:15:94:46:04:a9:48:19:81:33:8b:bd:
                    13:f2:3d:6b:bc:9b:de:7a:13:0b:f7:52:d7:de:20:
                    62:f8:14:9c:52:36:85:6a:40:aa:a3:65:8f:23:f8:
                    f0:a8:e9:ad:8c:89:82:53:21:76:1b:32:af:70:bf:
                    99:03:f9:68:11:6b:2d:a3:43:4f:63:38:d2:33:78:
                    0f:04:21:08:80:9c:eb:6d:3e:39:65:21:11:0e:33:
                    3c:bc:30:6c:cf:31:97:17:75:60:7c:2f:55:aa:f1:
                    d3:45:bc:30:82:31:34:42:8d:44:07:e1:94:b8:7c:
                    1b:76:cf:83:0c:cd:cd:c5:e1:4d:a8:ac:cc:5a:04:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:16:BC:75:A2:2C:5C:C9:3B:24:9C:02:8C:C7:58:FB:0A:0F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06db2ae7-194f-39d9-bcbd-70a009b8a64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.79.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:e0:c7:3c:33:aa:dc:73:35:05:48:67:81:34:55:66:f3:
         90:3a:fb:b1:35:6e:7f:ba:dc:b3:4f:4a:f5:6b:8c:12:ab:13:
         c8:cd:59:e8:d7:4e:43:06:3b:5e:ae:d6:1b:64:98:a4:1f:0e:
         63:35:0e:0b:a1:b7:33:69:37:11:46:a2:19:24:31:e3:9b:56:
         ac:35:c5:43:07:51:0e:17:8c:cb:07:3d:cf:e8:1a:5f:c8:7d:
         8a:92:5f:ab:17:81:d8:b0:f5:13:6b:1e:13:b5:4b:77:57:94:
         3b:9b:16:69:df:67:9f:36:3b:af:59:76:a7:65:e3:2a:59:b7:
         07:63:6c:9e:c9:28:f5:ec:f9:11:7a:0e:83:bb:b2:6b:f9:82:
         4f:d2:e8:1d:14:0e:52:2d:85:36:6c:53:98:19:f2:9a:5b:b5:
         ef:04:0b:3f:40:d3:f5:44:09:47:b0:9d:d1:96:ff:b3:08:4c:
         7d:3f:79:1b:5e:b3:7f:55:0c:9b:e1:2b:bf:8c:9a:bd:30:86:
         45:99:36:0c:96:ba:e8:c1:42:2c:cc:c3:7e:3c:68:93:2e:7d:
         35:48:74:97:88:2d:d4:14:78:68:a7:95:03:ad:de:60:08:70:
         17:ac:0b:74:be:cd:52:5b:ff:28:92:68:ab:65:dd:08:f0:7b:
         12:bb:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:43 2025 by rpki-client