Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26d2b965-1ef0-3db8-9eb7-cad7796d80a1.roa
File:                     26d2b965-1ef0-3db8-9eb7-cad7796d80a1.roa (raw, json)
Hash identifier:          +GuZSx5uPhRsgBf9qQZv4vNSq9RN4Ro8u9HmmRyJuTc=
Subject key identifier:   36:39:9C:91:35:08:03:BC:F5:A5:2A:3F:31:CD:67:B7:06:4E:76:0D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094F54118798475E74C42CC
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26d2b965-1ef0-3db8-9eb7-cad7796d80a1.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f5:41:18:79:84:75:e7:4c:42:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=9594fb83-94f0-4097-82a2-48ec79f74172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:b4:f3:86:87:b4:2f:96:68:2a:58:41:9b:
                    5e:ce:52:e3:91:30:74:ed:16:7e:83:e4:d4:ff:76:
                    b7:1d:c5:e5:68:20:d5:0b:45:2c:53:01:45:14:98:
                    a4:15:b2:bb:4c:5c:83:e2:b5:43:8c:f4:14:c2:b0:
                    9a:25:b1:f7:a0:78:07:42:01:df:fd:93:9c:a2:7d:
                    e1:74:c9:bf:0a:4b:75:2e:1a:f8:d4:9a:e4:8a:7c:
                    bb:d4:ee:ee:82:17:59:2c:d5:e8:ca:90:bc:49:2c:
                    d2:f1:32:8a:12:36:b4:ee:ac:4a:13:fc:c9:83:b7:
                    6a:7e:45:d7:9d:d8:d7:30:db:a0:e2:85:7e:a4:4e:
                    bc:31:31:84:26:0f:5e:75:7e:bc:24:46:af:7f:67:
                    43:d2:20:a5:10:92:be:57:c0:f0:ba:3c:3a:03:7c:
                    27:5a:08:75:95:b0:a2:e6:b2:4e:14:fc:c4:04:21:
                    5c:6c:e9:b9:f1:0f:91:53:cd:ef:34:41:17:91:d0:
                    40:41:7f:2f:3e:6e:fe:73:2b:ab:7e:74:22:2a:17:
                    da:b9:87:60:f0:1b:32:71:62:b8:d9:63:69:f9:ba:
                    34:1c:96:7f:ce:3d:06:0e:f6:ab:1a:5c:aa:56:7e:
                    06:67:ec:c4:1b:da:23:ee:0d:4c:a6:c1:50:74:7e:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:9C:91:35:08:03:BC:F5:A5:2A:3F:31:CD:67:B7:06:4E:76:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26d2b965-1ef0-3db8-9eb7-cad7796d80a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:17:98:93:61:cf:52:5e:41:e7:3e:a5:d1:a6:2d:4a:fc:81:
         c2:a3:3c:74:7d:2b:fc:9c:e0:5b:98:ca:00:ed:9b:83:ee:eb:
         9f:bb:73:fc:5f:82:2d:04:92:f9:06:ad:93:4b:b7:e4:2c:bd:
         ab:d3:12:dc:6a:82:c9:61:94:73:46:0e:e8:a1:74:66:c8:32:
         99:cd:7c:e4:d4:b8:da:d7:75:47:90:7c:fd:de:9d:48:6b:c4:
         cf:c4:a5:ed:01:dd:88:64:ac:b2:83:5a:f4:6f:9a:cf:a5:8a:
         11:88:de:01:ec:48:6e:1e:40:54:50:fe:bc:e0:39:d3:9c:bb:
         bf:76:77:33:a4:f3:66:87:b9:30:43:9d:a1:89:1a:0a:03:5c:
         df:16:15:86:b1:c8:bd:8d:1c:45:50:2f:c7:e6:04:db:dd:67:
         02:51:3e:1c:fc:0a:23:0a:02:2b:54:a5:73:d0:19:6a:c0:3b:
         bd:5d:e2:f1:59:14:9a:5e:2b:74:58:81:4a:a6:fe:68:8b:50:
         a9:b3:bb:c8:89:06:bb:23:2f:96:3a:12:2c:4e:80:5c:c1:05:
         f3:7d:4d:23:24:98:bc:83:df:cf:72:b7:b9:af:54:e1:3e:bd:
         cf:08:51:4c:90:b4:42:16:d5:a6:44:06:01:77:1e:25:77:af:
         4f:4a:cb:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPVBGHmEdedMQswwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
OTU5NGZiODMtOTRmMC00MDk3LTgyYTItNDhlYzc5Zjc0MTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJG084aHtC+WaCpYQZtezlLjkTB07RZ+g+TU
/3a3HcXlaCDVC0UsUwFFFJikFbK7TFyD4rVDjPQUwrCaJbH3oHgHQgHf/ZOcon3h
dMm/Ckt1Lhr41Jrkiny71O7ughdZLNXoypC8SSzS8TKKEja07qxKE/zJg7dqfkXX
ndjXMNug4oV+pE68MTGEJg9edX68JEavf2dD0iClEJK+V8Dwujw6A3wnWgh1lbCi
5rJOFPzEBCFcbOm58Q+RU83vNEEXkdBAQX8vPm7+cyurfnQiKhfauYdg8BsycWK4
2WNp+bo0HJZ/zj0GDvarGlyqVn4GZ+zEG9oj7g1MpsFQdH6IVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDY5nJE1CAO89aUqPzHNZ7cGTnYNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjZkMmI5NjUtMWVmMC0z
ZGI4LTllYjctY2FkNzc5NmQ4MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaIbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMQXmJNhz1JeQec+pdGmLUr8gcKjPHR9K/yc4FuYygDtm4Pu65+7c/xf
gi0EkvkGrZNLt+QsvavTEtxqgslhlHNGDuihdGbIMpnNfOTUuNrXdUeQfP3enUhr
xM/Epe0B3YhkrLKDWvRvms+lihGI3gHsSG4eQFRQ/rzgOdOcu792dzOk82aHuTBD
naGJGgoDXN8WFYaxyL2NHEVQL8fmBNvdZwJRPhz8CiMKAitUpXPQGWrAO71d4vFZ
FJpeK3RYgUqm/miLUKmzu8iJBrsjL5Y6EixOgFzBBfN9TSMkmLyD389yt7mvVOE+
vc8IUUyQtEIW1aZEBgF3HiV3r09Ky2k=
-----END CERTIFICATE-----