Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
File:                     22ae559c-7964-3592-a823-156a667290bf.roa (raw, json)
Hash identifier:          wTeW1gc7LXCZSxwy6i9JRbTFEvuT64ItmC9ggOYII/E=
Subject key identifier:   2F:B1:77:75:81:A4:22:E3:DA:78:8A:FE:29:9E:D1:76:E8:A5:85:12
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827A18BCA25386DCD1CB3DD60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa
Signing time:             Tue 10 Dec 2024 00:48:54 +0000
ROA not before:           Tue 10 Dec 2024 00:48:54 +0000
ROA not after:            Sun 09 Mar 2025 23:48:54 +0000
asID:                     13335
IP address blocks:        104.29.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:a1:8b:ca:25:38:6d:cd:1c:b3:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:48:54 2024 GMT
            Not After : Mar  9 23:48:54 2025 GMT
        Subject: CN=ae3720ee-3867-4a95-bb99-81c3c54ee9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:a8:2b:d9:06:32:73:6d:4d:ee:f8:22:4d:
                    fa:cc:4c:a7:85:66:17:e1:3a:9e:06:05:03:df:75:
                    b7:44:b2:c4:a2:b4:c3:d1:4e:a5:24:14:0b:74:05:
                    20:70:24:f6:d7:0f:ea:d7:21:37:aa:b6:12:e2:97:
                    9e:d9:eb:32:c9:84:b4:e0:ef:d9:cd:04:80:c9:ec:
                    8e:1c:d0:b3:c0:4c:42:83:93:37:90:d1:e7:a6:24:
                    a1:d8:68:3b:72:65:1f:0c:e8:0a:db:cf:f9:4b:fc:
                    43:a2:6b:fb:4e:65:a8:21:13:36:0a:1e:92:cd:a6:
                    fc:08:99:b7:ed:27:a0:b7:64:fd:83:52:ca:92:10:
                    d1:8c:4a:04:d8:f6:c8:57:51:49:b6:ef:72:4d:1d:
                    94:c3:45:1a:33:fc:ac:f6:18:8c:7c:75:2f:b2:51:
                    8e:c3:b3:dd:5f:9d:8e:7b:5b:0b:ec:8c:42:c1:36:
                    5d:70:d9:cf:15:fb:2f:f2:b2:be:1d:2d:db:1a:6e:
                    b2:83:81:3c:f7:3d:a4:f4:c6:6c:fe:8c:d3:f8:40:
                    a1:ec:d7:39:f2:1e:4a:e7:7f:12:41:d1:27:bb:6a:
                    88:fc:f2:a2:ee:d0:05:a5:02:9a:78:16:56:87:7c:
                    b6:4e:64:dd:22:8b:3d:73:38:6b:e5:60:3c:4c:c4:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:77:75:81:A4:22:E3:DA:78:8A:FE:29:9E:D1:76:E8:A5:85:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22ae559c-7964-3592-a823-156a667290bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:de:53:6f:63:b2:a5:4d:60:11:33:c7:d1:7c:fa:e7:54:
         09:7f:ac:ec:3e:28:84:51:6b:e4:9d:3a:aa:54:c6:48:88:27:
         a8:2e:c6:f0:02:df:56:31:b9:4d:80:63:40:67:2d:d7:10:2f:
         43:ef:14:bb:fe:9a:c8:b1:05:6c:3c:dd:f8:80:cf:09:fa:da:
         88:14:74:d1:3d:cf:73:20:2f:64:ee:7b:c8:fd:78:9e:1b:82:
         52:d7:14:4b:1d:9c:09:e8:ea:b3:21:60:1d:c2:50:37:c2:7b:
         fb:5b:b9:94:95:97:94:6d:82:82:2d:1e:ff:89:1c:70:cc:eb:
         44:a8:5f:ce:a4:6e:57:6f:8c:05:52:ec:33:9a:7e:e2:16:0a:
         15:61:82:e8:88:77:82:65:32:48:d8:a7:33:53:cf:64:c8:2a:
         2d:c8:92:f8:c8:7c:0d:e9:1c:4c:c7:8c:71:8f:7e:1e:02:04:
         a0:ad:5a:0f:19:08:9b:10:6f:ce:9c:7d:6b:76:7b:ef:bb:0b:
         a9:bf:32:74:14:1a:16:86:0d:36:96:e2:f5:7c:16:90:40:6c:
         cb:34:c5:f8:bd:38:cf:30:86:49:40:38:e0:1a:5d:f5:34:8c:
         ca:c0:27:3c:a9:8b:2c:38:b4:65:a8:dd:a9:d2:fd:27:38:bd:
         6e:c7:89:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnoYvKJThtzRyz3WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAwNDg1NFoXDTI1MDMwOTIzNDg1NFowLzEtMCsGA1UEAxMk
YWUzNzIwZWUtMzg2Ny00YTk1LWJiOTktODFjM2M1NGVlOWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCqoK9kGMnNtTe74Ik36zEynhWYX4TqeBgUD
33W3RLLEorTD0U6lJBQLdAUgcCT21w/q1yE3qrYS4pee2esyyYS04O/ZzQSAyeyO
HNCzwExCg5M3kNHnpiSh2Gg7cmUfDOgK28/5S/xDomv7TmWoIRM2Ch6Szab8CJm3
7Segt2T9g1LKkhDRjEoE2PbIV1FJtu9yTR2Uw0UaM/ys9hiMfHUvslGOw7PdX52O
e1sL7IxCwTZdcNnPFfsv8rK+HS3bGm6yg4E89z2k9MZs/ozT+ECh7Nc58h5K538S
QdEnu2qI/PKi7tAFpQKaeBZWh3y2TmTdIos9czhr5WA8TMQ+QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+xd3WBpCLj2niK/ime0XbopYUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjJhZTU1OWMtNzk2NC0z
NTkyLWE4MjMtMTU2YTY2NzI5MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEd3lNvY7KlTWARM8fRfPrnVAl/rOw+KIRRa+SdOqpUxkiIJ6guxvAC
31YxuU2AY0BnLdcQL0PvFLv+msixBWw83fiAzwn62ogUdNE9z3MgL2Tue8j9eJ4b
glLXFEsdnAno6rMhYB3CUDfCe/tbuZSVl5RtgoItHv+JHHDM60SoX86kbldvjAVS
7DOafuIWChVhguiId4JlMkjYpzNTz2TIKi3IkvjIfA3pHEzHjHGPfh4CBKCtWg8Z
CJsQb86cfWt2e++7C6m/MnQUGhaGDTaW4vV8FpBAbMs0xfi9OM8whklAOOAaXfU0
jMrAJzypiyw4tGWo3anS/Sc4vW7HiZs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:07:50 2025 by rpki-client