Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e174e18-ce7d-3737-afed-4dc268a90142.roa
File:                     9e174e18-ce7d-3737-afed-4dc268a90142.roa (raw, json)
Hash identifier:          fOgTQXSpRQPQ5QkYgRRq7kDFP6CSrBphUW4XrpkIi+I=
Subject key identifier:   CF:6A:07:0D:1D:02:03:1D:78:84:57:49:3F:B3:38:0A:38:2C:4C:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848424AFADBF0AC761DF2489310
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e174e18-ce7d-3737-afed-4dc268a90142.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        184.29.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:fa:db:f0:ac:76:1d:f2:48:93:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=db6274bf-7143-4174-9a55-82d0ffdb815f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:47:fd:39:aa:ff:1f:5d:d3:c8:65:fe:8c:
                    d5:1b:da:1b:01:48:40:48:84:1b:58:41:0d:ab:ca:
                    f4:05:1b:1b:9a:6b:2c:2d:fc:a6:a8:20:04:bd:ac:
                    84:2e:ba:01:84:00:36:ce:81:b0:b5:ca:93:f2:c8:
                    42:cd:48:d9:a5:6a:2f:95:91:da:9c:c0:28:3c:3b:
                    15:71:f4:ce:57:41:e1:04:75:3f:e4:a0:a2:5e:6a:
                    bc:fc:0c:55:60:f7:5b:f4:6c:f7:cc:8e:e2:80:ad:
                    0c:31:ea:c5:cb:64:05:0a:2c:be:fb:79:71:89:9b:
                    c7:bf:a3:87:99:ff:8d:6c:52:7a:6c:2f:2e:14:de:
                    79:16:41:c5:6b:ee:7b:66:fe:39:e6:e7:c7:b2:5a:
                    1c:88:9f:48:c6:7d:33:a1:b1:aa:27:64:3a:ad:07:
                    71:fd:db:92:ee:02:51:69:ff:49:d1:8d:f6:d4:44:
                    d5:7b:25:67:ab:f6:8f:4b:70:be:df:d1:11:7c:e7:
                    3a:9a:94:4f:95:76:e8:5a:24:ad:9c:44:ee:4a:44:
                    86:63:15:6c:74:10:8b:ee:3b:99:24:7e:80:87:b1:
                    9f:38:c4:ec:49:50:cf:dd:b7:48:b5:27:68:7b:09:
                    e2:6e:a3:cf:3c:1e:be:1b:19:b5:eb:36:3e:04:e1:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:07:0D:1D:02:03:1D:78:84:57:49:3F:B3:38:0A:38:2C:4C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e174e18-ce7d-3737-afed-4dc268a90142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:76:38:1c:47:29:f5:d3:35:3f:0b:87:ec:28:b9:e7:67:
         71:9a:c6:90:77:71:f8:2d:b1:9d:b3:5e:2c:4d:35:ef:ca:49:
         08:b6:25:56:74:b2:49:46:68:87:8a:92:14:15:8f:bf:ca:3d:
         a6:04:c1:01:62:5d:25:44:ee:2f:93:38:66:e7:4a:be:7b:03:
         9e:41:4c:37:ec:70:51:d4:a0:13:d0:77:54:63:b1:44:95:62:
         44:b3:d0:08:d1:db:04:15:73:4e:a0:f2:92:33:00:d0:39:54:
         94:ad:01:3d:80:55:ec:c5:95:99:34:7d:57:83:bd:8c:31:29:
         8e:fe:c4:aa:6d:99:11:a8:7f:59:ad:9d:f2:c2:86:29:7b:b9:
         c3:3d:1b:6a:b5:cd:d5:01:57:b3:d5:fa:5e:87:22:4f:26:e9:
         2c:7a:68:c4:6c:f6:e3:94:c4:6f:d2:da:6c:da:4b:cd:67:1a:
         fb:9d:78:d5:a3:2c:96:f6:14:4c:95:0d:aa:73:3d:cd:37:76:
         34:9a:cf:99:20:06:26:88:43:5f:69:d6:8b:0d:4f:07:bb:2a:
         23:71:57:c3:82:ca:d6:3f:ae:9c:a7:b8:81:2a:a9:08:a4:39:
         66:5a:90:53:dd:7f:99:5c:19:92:28:9a:39:df:2d:01:41:a7:
         fd:51:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:08 2025 by rpki-client