Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa
File:                     3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa (raw, json)
Hash identifier:          9//2Qw98uXFUP2EteLoLxG9W/AlOqeqWuoSgbXtJlns=
Subject key identifier:   37:EA:AA:63:85:B6:40:F0:1C:81:0E:AB:0F:1A:A6:F9:17:FB:51:CD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBB119C82A700372D9D000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     395973
IP address blocks:        104.134.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b1:19:c8:2a:70:03:72:d9:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=34eb62f5-89cd-4f58-918d-68e6c4395387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:ac:a2:9e:93:88:1f:5f:91:2b:d6:7d:9d:
                    57:a1:fa:a4:32:96:ca:d0:a4:9e:d1:01:51:e6:1a:
                    d9:4e:29:85:d5:c5:31:25:fb:bc:91:6c:ce:92:d4:
                    29:6c:79:49:b4:47:ed:1d:66:e7:61:bc:20:0f:8a:
                    66:e2:0e:da:5f:db:9a:44:41:e6:47:63:0e:8f:ee:
                    a1:70:52:db:0c:47:f5:97:9f:e1:c6:3f:90:7c:d6:
                    1e:db:b9:d9:33:25:eb:26:f3:7d:36:07:67:2c:0c:
                    c5:d9:d1:43:68:46:fa:cc:1f:ad:4f:dd:11:b8:5f:
                    27:fd:02:39:8c:78:44:09:5e:dd:c8:8f:42:5f:22:
                    c5:c6:da:ff:65:93:a8:8d:a3:fd:f0:87:c9:14:b3:
                    1f:23:b7:73:92:78:e1:5f:53:43:1b:16:b1:b6:51:
                    78:3b:dc:3b:ce:58:d6:71:7e:ca:49:8b:e5:9a:4f:
                    c3:a2:39:ad:bb:92:80:d6:12:60:1e:fd:a4:2a:0d:
                    0f:99:d5:8e:13:a7:04:23:45:05:15:f2:87:54:10:
                    8b:76:4d:88:5a:dd:9e:12:11:a1:c8:dd:17:86:95:
                    3d:1a:1a:3a:42:df:6c:29:25:76:55:b7:50:37:bd:
                    f5:f8:fe:40:df:de:9c:17:1c:3b:ba:c3:0d:67:eb:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EA:AA:63:85:B6:40:F0:1C:81:0E:AB:0F:1A:A6:F9:17:FB:51:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:8c:39:aa:36:5b:4b:4e:ca:7f:4a:50:0b:b9:f0:a2:bd:
         68:57:6b:2b:9e:13:21:23:f7:b7:28:32:5a:2d:84:91:12:21:
         09:ae:fe:f7:db:10:7b:b7:33:c6:49:02:79:bd:b8:29:6e:79:
         ad:6d:49:3b:19:d8:0b:e5:20:17:50:9b:6c:17:e5:27:26:79:
         50:e9:f7:60:c9:e8:90:31:ce:63:dc:d8:0c:fd:00:c9:84:84:
         26:e4:41:22:b2:34:e8:69:08:e2:51:d8:0b:b0:4a:0f:8c:0a:
         06:26:82:0e:67:72:4b:f2:db:e6:d4:d3:37:d8:9d:ad:5a:65:
         67:02:de:53:38:c3:c2:81:34:1d:f5:a4:b6:b4:8b:68:c3:ae:
         c7:fd:5a:eb:12:86:61:42:56:c9:de:2b:98:4d:e4:bb:e9:21:
         63:17:62:c8:46:4b:d3:e0:ec:06:e9:6b:49:dc:a9:78:20:a1:
         f7:8f:15:d8:da:f4:69:78:f8:00:fc:dd:02:fe:a3:7a:e7:0e:
         4f:81:a2:c0:0a:60:94:f6:52:b9:16:91:90:f5:2b:60:b1:8e:
         26:f1:d6:ca:e7:07:3f:62:b7:ed:54:e7:2d:15:2d:8e:64:51:
         50:ca:42:f1:ae:d6:fc:cd:8c:b1:83:00:d7:26:62:d3:3a:e0:
         ed:96:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----