Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa
File:                     c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa (raw, json)
Hash identifier:          s7wJucofwaaOd8gE06mcF+HEXz9dxl/OzuAwHJGIcIA=
Subject key identifier:   4F:47:04:3E:52:C3:59:17:24:6F:84:57:80:39:BC:62:02:D0:64:5C
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584886B07DD04924C825A8995B80
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     46450
IP address blocks:        104.225.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7d:d0:49:24:c8:25:a8:99:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=43bd92fa-7c2a-4401-82f6-1d0014de8368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:55:c4:fc:39:f4:7c:60:1b:e7:b3:d6:37:5f:
                    8d:a9:6f:8c:be:67:c1:83:74:81:64:03:3d:c8:b2:
                    53:97:dd:de:76:e0:da:df:3f:5a:37:49:16:f3:7a:
                    70:66:57:0a:9d:73:3d:bc:74:4b:4c:99:3a:3b:28:
                    d7:b1:c5:3c:9a:13:f1:2c:78:a6:ea:f3:ca:06:50:
                    54:1a:7c:37:db:84:20:d5:74:1c:bf:b4:df:3f:22:
                    6a:17:d3:dd:b2:3e:18:de:42:4b:03:32:ff:41:f5:
                    d1:d7:16:c2:91:23:60:9e:68:df:db:c7:a5:3b:28:
                    f1:db:26:d7:61:1d:46:a8:c3:c4:45:fc:ec:27:1e:
                    9a:3e:26:4b:10:d6:2c:37:9b:c9:91:f0:b9:71:d6:
                    1b:7b:5a:c6:9a:e6:57:7b:00:2b:cb:2b:22:19:c3:
                    55:92:9a:2e:a2:5c:f7:79:f9:bc:4c:dd:a5:88:4a:
                    74:55:cd:36:24:4f:60:06:ef:85:1a:bb:00:4c:73:
                    68:99:d7:19:ea:f3:2f:0e:07:b8:01:80:86:a0:c3:
                    c9:32:77:1b:87:c1:41:c2:3d:98:9e:91:46:98:73:
                    13:ce:26:a8:b6:4a:91:cd:91:f0:4a:83:b7:97:0d:
                    ea:99:2a:24:2b:42:c6:f3:85:d5:63:0d:d1:26:ea:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:47:04:3E:52:C3:59:17:24:6F:84:57:80:39:BC:62:02:D0:64:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:97:ef:b0:6d:f6:16:11:80:7b:b6:46:09:ef:8e:6b:fa:
         d6:5d:09:c1:1a:b7:0a:2d:7f:86:69:fb:24:e6:8c:34:5d:5d:
         80:b4:05:eb:60:48:a7:16:8b:15:52:a9:89:43:dc:3d:0f:80:
         77:7a:8f:75:12:1a:f3:15:0c:f4:ac:e2:86:a3:36:85:90:39:
         29:a9:a0:fd:29:03:18:62:53:94:89:24:ee:ec:72:85:d9:fd:
         b8:2c:1a:13:13:ae:42:af:9c:f1:b1:6c:0d:1e:81:7d:3b:d2:
         4a:7b:49:f0:58:20:de:a5:64:44:cc:d4:a2:6b:d1:67:fe:33:
         1b:18:bd:d9:41:82:b9:32:fb:66:78:6d:15:14:87:17:a4:5f:
         08:84:12:5c:40:f4:4e:35:38:3b:34:ea:c6:92:dd:e8:14:ec:
         b9:71:23:ba:56:6c:31:fd:50:65:db:60:7d:36:e8:bc:ff:c1:
         18:00:e8:b2:c1:9d:51:07:f3:37:1c:08:7f:a0:f0:67:32:9e:
         8d:9c:f2:0d:50:6d:59:00:94:eb:76:78:5d:87:69:59:06:01:
         72:53:7d:87:30:0e:e2:9f:6f:0e:4c:79:61:7a:16:b5:44:e8:
         a5:b5:38:76:ff:81:51:73:86:48:ec:31:e7:99:93:f5:45:4a:
         96:7d:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:45 2025 by rpki-client