Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa
File:                     ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa (raw, json)
Hash identifier:          RVbRh0PeKHVY25iBDu9P8QjoNCOrJRf0iGul8NZedtE=
Subject key identifier:   47:9F:A1:55:B5:8E:64:E3:33:C6:FB:88:27:9B:84:A7:0E:D6:04:7A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482548C13737CFB5CC3A241E20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa
Signing time:             Mon 09 Dec 2024 04:38:23 +0000
ROA not before:           Mon 09 Dec 2024 04:38:23 +0000
ROA not after:            Sun 09 Mar 2025 04:38:23 +0000
asID:                     13335
IP address blocks:        104.19.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:48:c1:37:37:cf:b5:cc:3a:24:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 04:38:23 2024 GMT
            Not After : Mar  9 04:38:23 2025 GMT
        Subject: CN=ce15b7b0-0d02-417a-8ad0-cf316207767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6e:bf:12:1f:be:5d:cb:51:a0:03:cb:3b:d8:
                    e9:05:71:38:8a:08:0b:ed:76:4b:ee:8e:f6:34:4c:
                    ab:8c:15:9b:d3:63:02:be:28:a8:a4:e4:11:e9:96:
                    ae:3d:32:bd:21:b0:7b:6b:27:a7:6c:ef:79:b7:26:
                    2e:67:c6:4f:e7:81:36:e1:fb:38:03:af:50:0b:a3:
                    30:e1:36:5d:92:e1:c6:d9:7e:eb:ca:9b:66:e4:e4:
                    1f:b6:62:51:20:73:4d:aa:21:13:c6:3b:7e:82:4a:
                    78:01:87:2b:0b:ab:2b:70:17:7c:85:0b:10:b3:e2:
                    b0:ab:07:2e:a0:8e:f9:19:b0:20:58:e9:e0:86:16:
                    06:92:bb:03:a0:d6:bb:9b:41:2f:7d:57:95:01:c5:
                    7e:d5:74:41:ff:a8:a6:6b:26:57:4e:dd:7b:cb:6b:
                    92:f0:94:cd:a6:b8:94:c3:38:8e:ce:15:c5:68:73:
                    40:27:85:b0:f3:7a:97:be:0d:13:c3:fe:72:d8:ee:
                    68:c0:63:6e:ba:08:bc:70:de:60:a6:95:0b:ce:02:
                    38:0b:f8:22:fe:9f:f5:c2:a5:21:e1:55:6e:67:45:
                    a6:0a:9a:c2:39:ab:24:14:6a:0b:93:b1:b6:85:42:
                    5b:8b:8b:3c:1c:90:0e:4b:82:d0:61:b9:ff:64:e0:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:A1:55:B5:8E:64:E3:33:C6:FB:88:27:9B:84:A7:0E:D6:04:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff43bb22-4101-39fb-a0df-2e0d0b3aa2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.19.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:dd:f6:c2:20:89:35:5e:86:21:3e:7b:61:49:21:e9:99:90:
         2e:43:69:c2:ca:f7:b1:16:66:6d:1a:28:48:f2:8e:72:f5:f7:
         fa:19:ba:e2:92:e8:5c:8a:37:89:f5:98:71:33:1b:c8:12:30:
         63:07:d0:76:46:46:e4:d7:81:27:ff:0b:b7:17:67:41:1d:95:
         10:d8:6e:99:6a:49:3c:45:78:14:2a:f6:f7:d1:df:80:82:1e:
         95:c2:0f:b5:b6:01:14:e3:9d:17:d5:1c:70:61:2e:b7:5f:88:
         3c:78:af:24:b0:ca:6d:55:f7:5a:f4:b1:05:6e:1a:23:dd:50:
         cb:84:29:6b:e3:ac:39:fb:12:fa:a4:8c:d7:a0:43:93:d1:98:
         4b:42:f0:e6:d4:57:a6:81:5d:9a:eb:a6:22:29:ec:6a:0c:41:
         56:97:eb:b8:3c:6a:66:8d:b4:33:9b:d5:c1:12:20:dc:42:2e:
         ac:aa:eb:52:14:ff:50:da:2b:2e:8e:c3:6c:7f:79:15:6b:63:
         6c:60:1b:1c:62:a0:5d:de:ae:a8:01:33:6a:a5:d9:91:f4:b4:
         a0:58:9e:53:ec:ed:2f:ad:9a:77:98:6c:56:d2:18:ba:7d:da:
         f2:98:27:14:a3:51:a2:7f:23:25:1e:d3:e9:fa:d7:d9:1d:64:
         19:1d:7b:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEglSME3N8+1zDokHiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIwOTA0MzgyM1oXDTI1MDMwOTA0MzgyM1owLzEtMCsGA1UEAxMk
Y2UxNWI3YjAtMGQwMi00MTdhLThhZDAtY2YzMTYyMDc3NjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh26/Eh++XctRoAPLO9jpBXE4iggL7XZL7o72
NEyrjBWb02MCviiopOQR6ZauPTK9IbB7ayenbO95tyYuZ8ZP54E24fs4A69QC6Mw
4TZdkuHG2X7ryptm5OQftmJRIHNNqiETxjt+gkp4AYcrC6srcBd8hQsQs+Kwqwcu
oI75GbAgWOnghhYGkrsDoNa7m0EvfVeVAcV+1XRB/6imayZXTt17y2uS8JTNpriU
wziOzhXFaHNAJ4Ww83qXvg0Tw/5y2O5owGNuugi8cN5gppULzgI4C/gi/p/1wqUh
4VVuZ0WmCprCOaskFGoLk7G2hUJbi4s8HJAOS4LQYbn/ZODAIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEefoVW1jmTjM8b7iCebhKcO1gR6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmY0M2JiMjItNDEwMS0z
OWZiLWEwZGYtMmUwZDBiM2FhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBNgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfd9sIgiTVehiE+e2FJIemZkC5DacLK97EWZm0aKEjyjnL19/oZuuKS
6FyKN4n1mHEzG8gSMGMH0HZGRuTXgSf/C7cXZ0EdlRDYbplqSTxFeBQq9vfR34CC
HpXCD7W2ARTjnRfVHHBhLrdfiDx4rySwym1V91r0sQVuGiPdUMuEKWvjrDn7Evqk
jNegQ5PRmEtC8ObUV6aBXZrrpiIp7GoMQVaX67g8amaNtDOb1cESINxCLqyq61IU
/1DaKy6Ow2x/eRVrY2xgGxxioF3erqgBM2ql2ZH0tKBYnlPs7S+tmneYbFbSGLp9
2vKYJxSjUaJ/IyUe0+n619kdZBkdezk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:26 2025 by rpki-client