Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5694977-3407-399b-81d6-fd0dfb16d131.roa
File:                     c5694977-3407-399b-81d6-fd0dfb16d131.roa (raw, json)
Hash identifier:          7k1p1SxLTHBPLTwOz702rxhPfnvxdl8Z+EAamFHFdac=
Subject key identifier:   F6:DA:43:25:4D:7C:B3:E8:F9:5C:28:B8:DC:E4:B6:29:2A:89:B7:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584858A062833FBB40C3C6D58880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5694977-3407-399b-81d6-fd0dfb16d131.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        104.123.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:62:83:3f:bb:40:c3:c6:d5:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=25ad6556-0508-40e0-bc05-aba6d3eb3b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:5a:e7:84:bf:21:5b:42:c4:92:12:2f:10:
                    14:f1:f1:a2:54:7d:6d:67:87:0e:c7:6f:0d:9e:fd:
                    4f:09:30:ea:bc:eb:95:d4:26:5a:0d:0f:c7:40:1f:
                    41:6f:0b:a7:66:1b:11:8b:ca:d9:e5:f0:bb:46:e0:
                    fc:93:b0:03:37:aa:ac:fe:48:6c:b1:28:83:b7:1e:
                    29:08:67:a1:37:53:92:8a:63:af:b0:cc:ce:2c:4a:
                    49:7f:34:e2:99:98:4b:ff:3d:9a:04:48:a3:3c:1c:
                    3f:03:6a:bc:be:91:b0:a5:71:d1:c2:97:7e:dc:0a:
                    f4:29:3a:c0:6c:45:f4:7b:9c:d1:10:3a:04:b8:64:
                    45:55:69:e7:25:47:66:6f:22:e0:2b:8e:bd:66:ad:
                    65:0c:a6:a9:c2:9a:41:cb:1b:94:04:d4:2a:c5:a2:
                    99:a3:b8:6a:87:07:81:17:62:96:de:32:30:95:45:
                    e3:0a:f6:ed:3f:04:00:33:2c:9e:df:8e:71:6b:29:
                    5b:50:61:c1:4f:3f:e4:f0:8a:13:55:89:9f:86:8f:
                    19:b7:91:b6:57:3e:b2:f6:6a:37:14:21:45:1f:51:
                    35:47:d9:f1:81:40:a5:90:82:2f:c1:ae:bb:93:72:
                    6e:ae:68:86:da:f9:57:70:cd:1d:f2:16:84:31:9a:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DA:43:25:4D:7C:B3:E8:F9:5C:28:B8:DC:E4:B6:29:2A:89:B7:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5694977-3407-399b-81d6-fd0dfb16d131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.123.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:51:a9:94:81:62:00:a5:89:4c:c8:34:b5:64:c1:6d:1d:e8:
         90:71:00:20:04:17:35:ff:85:d3:41:69:4e:40:c9:2a:66:39:
         ba:a3:dc:50:b7:80:7a:67:38:62:28:49:28:91:23:e9:09:51:
         39:9a:4f:af:ea:25:d6:31:b0:2a:6a:5d:f4:87:84:20:df:96:
         05:f5:75:4e:bb:21:e4:10:92:8d:21:8d:77:53:7b:52:a6:11:
         45:95:5b:af:63:e2:e8:77:c5:8a:36:5e:c0:9e:05:99:80:18:
         11:5d:ec:3f:64:0b:39:4e:55:f4:bf:43:47:22:51:07:c7:7c:
         9e:a6:23:fb:73:8a:76:8d:ad:c5:b1:bd:83:b5:d7:b2:c7:86:
         28:52:21:68:69:de:12:f5:32:a4:fd:9f:06:84:63:c5:8f:6a:
         85:c3:b2:6a:ff:ac:b6:08:c1:c2:13:ca:ff:2e:35:ef:95:72:
         8e:1c:8c:eb:4e:6c:bf:ee:62:a6:0c:5d:03:99:80:5d:f9:79:
         30:0e:c6:d7:2c:0f:38:9b:09:4d:36:b8:67:c8:42:b9:db:5b:
         5f:f3:cd:7b:2f:ef:8f:fb:71:19:e2:e9:28:bf:bf:e4:53:c5:
         af:a1:c3:0c:99:36:e6:06:e1:0b:0d:89:74:de:06:48:b9:ff:
         f2:52:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:03 2025 by rpki-client