Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eb5f06b-f07e-3dce-b6e9-54fc2989aa2c.roa
File:                     8eb5f06b-f07e-3dce-b6e9-54fc2989aa2c.roa (raw, json)
Hash identifier:          EbvA1KhuAoLHM2V4hBrCSjupHw7TtzxVnDYouauhPrw=
Subject key identifier:   7B:20:91:56:C8:FA:DF:8D:8C:04:48:31:3A:08:EA:92:8D:68:98:42
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858484945798245CBF1030FE2C6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eb5f06b-f07e-3dce-b6e9-54fc2989aa2c.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        104.82.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:79:82:45:cb:f1:03:0f:e2:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=3cb85caa-ae9b-4c1c-b8b4-157ba54e5957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:71:dd:15:16:2c:da:38:41:5b:5b:43:26:
                    e1:17:0d:5e:52:4d:5a:43:ca:82:95:52:c6:1d:22:
                    ba:72:da:ca:c8:7b:74:45:ef:d3:26:3d:23:66:53:
                    de:bf:e8:3a:7e:81:8b:92:5b:05:46:61:9d:70:c9:
                    b1:f3:b8:c9:3f:74:4f:12:df:50:ba:d5:8c:6c:ce:
                    8e:84:e4:02:f1:88:e1:72:58:9b:e7:dc:7f:61:1d:
                    39:0d:00:21:a5:3d:87:3e:32:5d:c2:ff:15:b2:d5:
                    13:8a:6a:7d:a4:e6:9f:e7:b8:38:04:9d:cc:5f:ed:
                    5a:43:ee:7b:b8:cc:9a:76:80:e4:58:76:c6:46:0a:
                    79:4e:2a:c5:c8:54:71:8c:78:9f:27:7c:a3:6b:b3:
                    e2:61:56:35:70:91:3a:c7:ed:43:37:fa:74:ba:20:
                    c6:c0:c5:3d:89:8a:d7:9d:dc:48:9e:bc:2e:df:73:
                    56:52:54:11:db:87:30:09:4d:76:57:16:0b:a9:98:
                    63:90:7d:57:b5:66:73:2d:ba:b8:ab:3d:b6:27:8d:
                    f8:c7:ee:2e:1e:46:dc:1f:82:6a:69:84:b0:be:86:
                    61:ee:a4:d0:09:08:04:6f:e0:69:43:7e:1d:f5:09:
                    92:d8:10:ec:52:52:51:04:2d:ce:d9:25:b6:0b:15:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:91:56:C8:FA:DF:8D:8C:04:48:31:3A:08:EA:92:8D:68:98:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eb5f06b-f07e-3dce-b6e9-54fc2989aa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.82.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:8a:ff:14:5d:09:e9:ea:7f:1b:5a:a2:ac:c8:02:75:05:
         cc:0c:39:83:30:8c:e2:94:02:aa:65:f3:d1:2a:62:03:2c:bd:
         6b:1f:49:91:b3:d7:d4:8f:09:d2:92:b9:29:66:13:72:9b:aa:
         27:22:cd:06:ad:31:ba:3a:d1:b6:8b:8f:f3:16:95:f0:d2:fc:
         f2:b7:5e:b7:e0:b3:75:7b:a5:85:33:95:0c:4d:c2:60:a7:15:
         cd:05:4f:41:5e:49:46:15:c3:bf:17:b7:2d:9e:68:4f:29:e8:
         1f:39:87:e8:67:1b:8e:91:12:90:de:4a:95:4c:8f:86:38:bf:
         a1:5a:47:48:99:83:cb:55:52:25:1f:bd:9b:38:0f:4a:2a:50:
         72:01:70:5d:44:01:11:7a:a7:cf:33:ff:20:c8:6f:8f:f5:12:
         e0:e7:ae:d8:08:8d:c8:d3:b2:f9:39:ad:96:8d:4f:b6:4c:24:
         13:ea:ef:25:18:b1:6a:4d:4e:56:f3:71:75:1d:f0:ab:09:97:
         ac:55:c0:f5:84:ac:89:e3:f3:54:c7:ff:5b:84:a3:01:bc:af:
         6e:ef:86:c9:f4:6e:5f:9c:25:4f:20:81:b7:09:e4:b1:41:7c:
         ab:7b:2b:4f:05:0d:5c:bf:1f:f9:9e:b3:2e:8a:26:2d:d0:1f:
         c5:73:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:33 2025 by rpki-client