Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa
File:                     9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa (raw, json)
Hash identifier:          3fQNMes2R219UmdwOg8y00Vu+JW1Zy0BCwSfm9NIPAY=
Subject key identifier:   47:EC:BB:0E:C6:08:1B:4E:31:FF:17:ED:FD:4F:82:19:65:F6:B9:5B
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F432858483F803620E2710C1444A28800
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     8014
IP address blocks:        104.166.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:36:20:e2:71:0c:14:44:a2:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=1cc0271b-9b17-456c-ad04-77ab4d439478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:d2:5f:66:da:78:7c:34:e1:f5:63:ee:cf:
                    5b:19:18:9a:99:ee:89:5a:1a:0e:0d:33:21:a8:e4:
                    3e:27:19:38:d2:ed:e2:f3:3b:7b:9a:f5:e5:c2:55:
                    e9:47:ff:a7:0a:12:52:7f:ac:41:b9:00:3f:5d:e3:
                    8b:12:18:85:49:62:e0:a6:c7:90:ec:fa:6e:24:fe:
                    de:26:26:b9:eb:b6:7a:34:e8:52:4d:e8:89:55:61:
                    ce:08:18:da:96:62:dd:a3:54:6b:7f:84:15:75:4f:
                    1a:82:48:96:31:d3:97:85:33:fc:71:2f:58:86:79:
                    35:11:d0:95:86:13:8d:ac:7a:2d:20:f9:38:fc:60:
                    45:84:35:c4:fc:a3:83:96:c9:5c:84:fd:f8:eb:ac:
                    cd:b9:76:d8:b6:cf:6c:b1:af:fb:4b:f7:be:1d:47:
                    24:fc:8c:b4:8c:a0:50:3b:c5:f3:48:91:ce:c1:0a:
                    90:08:6b:97:3a:7e:c6:43:9e:16:df:ef:eb:dd:47:
                    b8:8a:52:75:24:fe:e1:3d:2d:e5:99:2d:35:f9:d6:
                    a5:3a:81:49:68:c4:86:8e:56:2a:9f:4d:b9:3d:84:
                    de:5f:c8:4a:e7:b6:94:d4:a5:ed:42:94:83:73:df:
                    05:7c:dc:27:66:62:b2:61:0f:4d:e3:7e:04:94:5a:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:BB:0E:C6:08:1B:4E:31:FF:17:ED:FD:4F:82:19:65:F6:B9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:30:7c:34:8d:94:6e:ac:1b:b6:7c:96:02:93:dd:78:f8:
         d6:21:c0:45:9e:c1:49:b9:3f:e0:73:b8:d6:a4:43:9d:66:9c:
         b8:4d:3c:cc:50:3d:a7:31:e1:13:91:5d:0f:ac:37:b4:a2:f8:
         b0:82:fb:2d:40:24:57:64:bf:e1:da:82:9b:4a:f6:c2:63:88:
         2e:8f:a1:98:91:e7:c2:8c:d3:1d:b3:4b:ad:8b:40:4c:ed:1b:
         39:64:37:8d:86:dd:cd:08:51:2a:61:77:d8:e0:64:26:db:2d:
         01:51:2c:69:b4:9f:c9:70:5b:0c:58:00:96:69:57:ec:b3:28:
         5e:62:db:94:f0:2b:cb:67:d9:88:d9:22:be:ca:80:76:2a:f6:
         f1:9e:41:b0:27:e8:28:f2:7a:05:67:f3:aa:be:b9:35:bb:fa:
         2e:05:9c:8d:7a:52:92:df:05:b9:7b:0c:f0:bf:1c:7d:68:bb:
         f2:60:eb:d9:38:0b:04:46:be:16:89:37:ee:e9:f2:c2:8f:59:
         8c:c2:63:f2:ab:09:a3:b9:3b:02:45:2e:55:aa:76:31:bc:93:
         0b:59:af:08:a1:a0:56:e1:fd:cf:fe:6c:4e:95:72:29:45:ad:
         b5:3d:88:ae:1b:f2:c6:5d:32:92:3c:49:0d:51:60:e7:ba:e3:
         10:95:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:09:22 2025 by rpki-client