Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec241e07-9597-3192-b03f-5ffe811f4d6c.roa
File:                     ec241e07-9597-3192-b03f-5ffe811f4d6c.roa (raw, json)
Hash identifier:          HF9dWv4unQ0kGGhgDtb3A65umHbBx0+fXSBoP26B2rE=
Subject key identifier:   C0:2D:AD:6A:6E:F5:22:BF:5A:0A:F0:F0:8C:21:8C:42:4B:5A:41:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848530B0B731869AB3720A99100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec241e07-9597-3192-b03f-5ffe811f4d6c.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     3292
IP address blocks:        104.77.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0b:0b:73:18:69:ab:37:20:a9:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=48268683-8154-4e45-bc26-272a3849e3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:51:39:8e:2c:56:6e:af:58:83:34:ea:ae:92:
                    29:73:52:64:30:30:b5:39:4d:3a:26:05:30:a6:46:
                    d4:31:c4:90:8d:46:f8:81:b3:3d:31:62:b3:cd:17:
                    46:58:66:3a:1a:b0:52:e7:33:d4:a4:80:02:14:06:
                    e1:d3:b1:7f:6f:e9:be:50:20:d9:48:f7:bb:45:4e:
                    60:3c:5d:d6:86:5d:11:48:55:4f:d3:e1:fc:45:74:
                    e9:2d:a8:4e:f9:1e:28:a1:f2:8b:45:f4:4f:11:95:
                    bd:f0:43:7a:9e:95:91:3f:34:a7:23:d0:2f:b1:a4:
                    79:25:f6:00:f8:d2:11:d1:f8:ed:70:74:3c:07:ee:
                    f9:94:17:51:51:64:ce:60:f9:24:61:20:23:66:55:
                    26:a0:60:9e:b2:84:19:df:a9:9b:6a:ad:82:50:0e:
                    fe:3e:bc:15:0c:e2:1f:db:07:3d:1f:9b:29:13:67:
                    e6:18:91:7e:85:e1:fa:c3:de:6c:c0:00:12:b5:9f:
                    22:42:5e:dc:6a:42:50:d5:41:d7:30:e8:43:d8:15:
                    21:b1:74:6d:3c:00:33:ae:6e:5e:c6:a6:8d:be:c5:
                    13:2b:64:fc:78:bc:59:0b:36:ae:0f:23:89:3d:e2:
                    70:7a:5f:71:ad:e8:85:b4:a4:4b:0e:7e:9d:a6:18:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:AD:6A:6E:F5:22:BF:5A:0A:F0:F0:8C:21:8C:42:4B:5A:41:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec241e07-9597-3192-b03f-5ffe811f4d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:5c:42:3b:0b:5b:c5:9c:a0:a6:4d:66:d7:6d:a3:93:75:
         c9:2d:71:bc:44:32:f3:d1:7c:3c:93:1f:0d:1c:91:ae:ef:36:
         e0:96:69:52:09:da:86:93:71:b3:96:26:83:80:62:63:68:69:
         68:83:f2:47:5f:cf:e1:3e:82:b7:4b:da:77:49:a9:e6:2e:9f:
         56:4a:31:52:48:5a:f7:3c:90:9d:f3:15:ea:27:b2:c2:1b:57:
         e7:b5:bc:c3:82:25:a7:84:72:eb:10:00:13:c2:c8:62:b5:eb:
         92:2d:44:97:dc:e2:a2:e0:26:82:1c:38:f9:37:71:98:25:4d:
         bf:73:44:19:55:c9:27:1d:31:60:99:a8:e7:62:41:7e:2d:6a:
         55:38:03:70:b8:44:94:af:b0:79:51:31:52:6d:17:1a:a7:2b:
         22:b4:38:fd:d5:68:dc:e1:01:1b:81:f7:3d:75:3a:83:15:de:
         87:e4:33:7a:ee:1d:36:03:2e:3a:c4:21:d4:05:1a:e8:10:29:
         fc:9a:d8:44:c1:75:01:e2:96:74:c2:7b:06:c1:e0:1f:3f:72:
         91:cb:f0:0e:9e:c8:23:6d:19:0c:9f:30:4e:73:0f:7a:ef:73:
         fe:81:7e:44:26:04:18:0c:09:a6:84:38:53:3a:03:83:ca:4e:
         46:56:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:00 2025 by rpki-client