Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17ca9387-0487-3d2f-b365-6d684110e146.roa
File:                     17ca9387-0487-3d2f-b365-6d684110e146.roa (raw, json)
Hash identifier:          ggxw7zvGsuJ5o69CAPVhQfwiii5rqjbRAfAFlT5NjJ8=
Subject key identifier:   9A:E7:23:F0:DC:C9:D0:82:97:23:AB:FD:F7:91:C5:C7:05:9D:A4:A7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858484DCDD2494F379C98C7805380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17ca9387-0487-3d2f-b365-6d684110e146.roa
Signing time:             Mon 23 Dec 2024 16:58:50 +0000
ROA not before:           Mon 23 Dec 2024 16:58:50 +0000
ROA not after:            Sun 23 Mar 2025 15:58:50 +0000
asID:                     396356
IP address blocks:        104.252.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:cd:d2:49:4f:37:9c:98:c7:80:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 23 16:58:50 2024 GMT
            Not After : Mar 23 15:58:50 2025 GMT
        Subject: CN=ae671395-f916-4423-ad2a-e6d6748cb404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:25:24:cd:23:7e:00:5b:a5:65:a8:dc:f6:5d:
                    91:9a:3e:4e:be:77:c9:85:4c:b2:67:3a:03:fd:19:
                    ff:72:62:14:3b:d1:61:c8:95:3c:4a:85:35:00:7a:
                    9e:c1:43:64:99:e6:56:3f:e3:52:3b:dc:7c:8e:cb:
                    86:df:7f:f7:1e:76:7a:67:9a:5a:b1:16:4e:93:64:
                    21:84:1c:ac:99:37:c8:63:8c:ce:03:55:e7:c2:7c:
                    23:f5:5d:9b:50:a2:99:e4:91:19:dd:07:b3:f2:fb:
                    56:3c:5c:36:4e:ea:70:dd:55:ed:6e:e2:b5:cb:cf:
                    6b:6a:72:fa:59:90:0a:b0:45:a9:5c:20:d0:b4:47:
                    13:6d:67:04:bb:ba:fb:a7:5a:73:66:18:95:9a:a5:
                    e1:18:1d:0c:55:97:2c:e9:d4:b2:d1:e6:46:c6:cc:
                    f1:4b:90:53:f4:f6:01:e9:ef:2d:7c:ee:26:ae:30:
                    3f:5f:ee:c8:8b:fb:0b:44:e2:a9:53:38:69:b4:af:
                    02:37:86:ef:21:fa:52:23:a5:e4:e3:ad:fb:c9:56:
                    29:68:14:08:41:b2:97:4b:4c:22:06:71:da:ba:4f:
                    30:05:99:34:bd:95:10:06:c7:ab:4d:b7:22:cd:c5:
                    79:12:21:75:48:07:62:00:99:08:ad:45:1b:12:e3:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E7:23:F0:DC:C9:D0:82:97:23:AB:FD:F7:91:C5:C7:05:9D:A4:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17ca9387-0487-3d2f-b365-6d684110e146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:58:bf:30:22:d1:7d:0f:04:82:f1:da:62:9c:a3:b0:93:ca:
         e0:f4:a2:ff:02:7b:5c:92:50:d2:71:ce:3b:7e:a7:2f:50:35:
         c1:fa:bc:8b:ef:7d:4d:c5:7a:7d:28:a1:6f:a9:59:60:38:e0:
         3e:b1:2e:ad:53:3e:20:e2:d1:2b:ee:70:2c:55:cb:7e:0a:db:
         c2:fb:17:78:7e:14:4f:56:51:7e:3f:aa:ef:e3:a5:e8:21:1c:
         f3:7a:5d:58:8c:68:5b:3e:a6:16:ac:68:3c:c0:fa:02:81:fa:
         61:49:1e:21:39:4a:e2:a2:63:8f:79:21:c9:33:fe:a3:9f:05:
         72:79:9b:b8:29:f0:1d:4a:a8:86:b8:51:fe:db:0c:1d:88:35:
         5b:ec:b3:d9:ad:57:8d:42:5c:e8:c9:8e:5e:77:7a:0a:b7:08:
         d9:6a:c0:85:fa:bf:4b:01:83:53:db:0e:60:76:d8:b8:9b:ac:
         61:89:d5:fc:67:7a:47:a8:94:3f:24:d3:df:aa:87:64:1c:15:
         94:80:3c:e8:94:f1:59:18:1b:f1:77:74:d0:ed:25:b3:fc:e4:
         5e:44:f3:6e:9f:5f:b9:c8:d6:94:f2:79:a3:40:68:4b:aa:db:
         e8:4e:3b:35:fa:42:b6:42:a0:a6:2f:50:5d:5f:20:d5:a8:b5:
         2e:51:b0:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNzdJJTzecmMeAU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTIyMzE2NTg1MFoXDTI1MDMyMzE1NTg1MFowLzEtMCsGA1UEAxMk
YWU2NzEzOTUtZjkxNi00NDIzLWFkMmEtZTZkNjc0OGNiNDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/iUkzSN+AFulZajc9l2Rmj5OvnfJhUyyZzoD
/Rn/cmIUO9FhyJU8SoU1AHqewUNkmeZWP+NSO9x8jsuG33/3HnZ6Z5pasRZOk2Qh
hBysmTfIY4zOA1Xnwnwj9V2bUKKZ5JEZ3Qez8vtWPFw2Tupw3VXtbuK1y89ranL6
WZAKsEWpXCDQtEcTbWcEu7r7p1pzZhiVmqXhGB0MVZcs6dSy0eZGxszxS5BT9PYB
6e8tfO4mrjA/X+7Ii/sLROKpUzhptK8CN4bvIfpSI6Xk4637yVYpaBQIQbKXS0wi
BnHauk8wBZk0vZUQBserTbcizcV5EiF1SAdiAJkIrUUbEuPOowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrnI/DcydCClyOr/feRxccFnaSnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTdjYTkzODctMDQ4Ny0z
ZDJmLWIzNjUtNmQ2ODQxMTBlMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElYvzAi0X0PBILx2mKco7CTyuD0ov8Ce1ySUNJxzjt+py9QNcH6vIvv
fU3Fen0ooW+pWWA44D6xLq1TPiDi0SvucCxVy34K28L7F3h+FE9WUX4/qu/jpegh
HPN6XViMaFs+phasaDzA+gKB+mFJHiE5SuKiY495Ickz/qOfBXJ5m7gp8B1KqIa4
Uf7bDB2INVvss9mtV41CXOjJjl53egq3CNlqwIX6v0sBg1PbDmB22LibrGGJ1fxn
ekeolD8k09+qh2QcFZSAPOiU8VkYG/F3dNDtJbP85F5E826fX7nI1pTyeaNAaEuq
2+hOOzX6QrZCoKYvUF1fINWotS5RsK8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:42 2025 by rpki-client