Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa
File:                     162e852c-8413-3d8d-bf88-356053600612.roa (raw, json)
Hash identifier:          gpLPVrJIe3jTj4R4ju3SOiV7Bz2MMonUV3bRSGOsszE=
Subject key identifier:   85:72:39:A3:97:F5:43:8E:37:17:27:7F:61:3C:BF:5B:E8:F9:79:1F
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584838854FBF33C267A93CC85C40
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        104.192.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4f:bf:33:c2:67:a9:3c:c8:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=77f5185f-deff-488f-90d9-a3787e6e2f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:53:0f:59:f5:c5:cf:66:f4:e5:98:e8:64:
                    1a:e3:03:10:4b:7a:73:65:ee:0b:f6:9c:11:da:05:
                    ca:2d:d3:a7:c7:b6:54:d0:36:7c:27:24:5d:45:69:
                    f7:c1:f4:49:66:d2:b3:cf:8d:57:1f:ba:ce:a5:6d:
                    07:61:06:ab:a3:78:32:50:9c:58:58:e4:0c:17:96:
                    cb:a0:f8:5e:b9:ee:41:82:86:72:a1:93:a0:23:9e:
                    a8:f3:3c:8f:48:e4:91:64:26:f2:5a:8c:3a:b0:ab:
                    72:46:69:59:77:ba:00:aa:c7:da:72:6d:5f:6b:ad:
                    9c:03:f4:d1:ae:cb:f5:dd:e7:21:4b:3e:83:64:5f:
                    61:09:2e:3a:0b:50:2d:2c:18:45:ea:62:c2:b9:33:
                    fb:28:04:f0:37:04:4b:93:d4:57:e4:a1:1d:d3:af:
                    d3:fd:f3:7b:58:43:4c:46:4b:37:ec:12:57:0b:07:
                    cb:64:ec:3a:77:79:7f:98:53:47:28:d1:a6:f2:2b:
                    33:73:a7:bb:e3:de:43:2b:53:ca:4a:37:ff:25:c6:
                    93:91:d7:ec:c6:38:59:4a:4c:ea:ce:b2:e8:40:d5:
                    b4:a8:d8:07:02:5d:a2:ba:d3:dc:ec:4c:b3:85:cb:
                    c0:c8:7e:07:01:29:80:77:ec:aa:32:2b:f5:5d:40:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:39:A3:97:F5:43:8E:37:17:27:7F:61:3C:BF:5B:E8:F9:79:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1f:cf:42:7c:94:f4:30:57:e3:f5:83:62:93:72:14:04:79:
         b3:73:a0:4c:d6:cb:6d:60:44:f8:74:ac:99:8d:34:e2:40:73:
         6e:f6:90:07:0d:a6:52:a9:a0:d7:15:77:e7:d9:63:5d:f1:b9:
         09:bb:f8:d0:0f:80:59:e4:c2:42:49:48:14:f3:1e:f2:a3:71:
         81:9d:cb:c8:c6:9a:94:ac:c1:8f:bb:d0:4f:68:2e:47:8e:1c:
         ac:07:1e:ef:ed:fc:eb:e2:40:b8:24:f7:3c:ae:a6:2c:98:0e:
         1d:da:55:d0:4d:9d:24:4d:b5:6a:e6:73:cf:a6:d4:29:00:ad:
         1a:1a:52:1d:70:a4:c3:ca:f7:74:75:67:bf:7f:6e:5c:1f:e7:
         1a:ee:52:be:ad:52:0b:50:20:e8:eb:47:5a:ae:e9:c4:0e:4b:
         6b:d7:93:be:9b:0c:30:06:a8:c1:9a:4d:96:36:cb:c6:08:3f:
         72:c0:eb:4d:67:f1:4e:31:b5:d2:20:34:6f:cf:cd:cd:9d:11:
         f5:e3:d6:af:4b:72:e8:13:e8:9b:fa:a5:88:96:4a:24:4b:e5:
         a0:b8:e8:4d:09:5c:ce:20:6f:4b:55:db:06:b2:a3:ae:4e:c4:
         d4:88:54:ec:a6:9c:20:14:90:8e:17:b9:c0:ba:90:09:ae:29:
         27:6c:b0:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hU+/M8JnqTzIXEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTljMGFlMzEtMjA1Mi00ZDEwLTg5MDQtNWQwOGIwOWFh
Njg4MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NzdmNTE4NWYtZGVmZi00ODhmLTkwZDktYTM3ODdlNmUyZjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXZTD1n1xc9m9OWY6GQa4wMQS3pzZe4L9pwR
2gXKLdOnx7ZU0DZ8JyRdRWn3wfRJZtKzz41XH7rOpW0HYQaro3gyUJxYWOQMF5bL
oPheue5BgoZyoZOgI56o8zyPSOSRZCbyWow6sKtyRmlZd7oAqsfacm1fa62cA/TR
rsv13echSz6DZF9hCS46C1AtLBhF6mLCuTP7KATwNwRLk9RX5KEd06/T/fN7WENM
Rks37BJXCwfLZOw6d3l/mFNHKNGm8iszc6e7495DK1PKSjf/JcaTkdfsxjhZSkzq
zrLoQNW0qNgHAl2iutPc7EyzhcvAyH4HASmAd+yqMiv1XUC4dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVyOaOX9UOONxcnf2E8v1vo+XkfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMw
YWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4YjA5YWE2ODgvMTYyZTg1MmMtODQxMy0z
ZDhkLWJmODgtMzU2MDUzNjAwNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTljMGFlMzEtMjA1Mi00ZDEwLTg5
MDQtNWQwOGIwOWFhNjg4L2U5YzBhZTMxLTIwNTItNGQxMC04OTA0LTVkMDhiMDlh
YTY4OC5jcmwwHwYDVR0jBBgwFoAUEE/5PFM5NWknNBy24fS5isdQF2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMwYWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4
YjA5YWE2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4fz0J8lPQwV+P1g2KTchQEebNzoEzWy21gRPh0rJmNNOJAc272kAcN
plKpoNcVd+fZY13xuQm7+NAPgFnkwkJJSBTzHvKjcYGdy8jGmpSswY+70E9oLkeO
HKwHHu/t/OviQLgk9zyupiyYDh3aVdBNnSRNtWrmc8+m1CkArRoaUh1wpMPK93R1
Z79/blwf5xruUr6tUgtQIOjrR1qu6cQOS2vXk76bDDAGqMGaTZY2y8YIP3LA601n
8U4xtdIgNG/Pzc2dEfXj1q9LcugT6Jv6pYiWSiRL5aC46E0JXM4gb0tV2wayo65O
xNSIVOymnCAUkI4XucC6kAmuKSdssEY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:55 2025 by rpki-client