Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa
File:                     88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa (raw, json)
Hash identifier:          kqem85ov4g44czaFuOsFFkvVaq1lbcj42wAmLLO3fIk=
Subject key identifier:   56:A7:F3:51:9B:E3:12:75:03:C6:27:F3:CE:49:29:71:19:80:8E:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858486A323DF6329C2C29897B6CC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa
Signing time:             Thu 02 Jan 2025 21:03:48 +0000
ROA not before:           Thu 02 Jan 2025 21:03:48 +0000
ROA not after:            Wed 02 Apr 2025 20:03:48 +0000
asID:                     62160
IP address blocks:        104.253.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:32:3d:f6:32:9c:2c:29:89:7b:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  2 21:03:48 2025 GMT
            Not After : Apr  2 20:03:48 2025 GMT
        Subject: CN=2ac3dc5f-e037-40e1-89ae-0cfe0c363e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:a5:66:be:ba:c8:bf:af:9e:3c:91:36:17:
                    9e:de:48:2a:6a:1c:16:50:fd:da:37:7a:18:b3:6b:
                    18:a6:7f:d1:88:00:18:3b:0d:98:eb:aa:f2:7a:00:
                    ab:22:66:b8:19:5e:2c:5d:98:78:6a:06:71:54:38:
                    9c:1b:41:a2:d0:19:c0:c9:ee:5c:a7:75:e3:8b:12:
                    98:5e:72:dc:17:7b:0a:2b:bd:54:c4:49:be:6b:e3:
                    89:05:f7:79:4a:88:67:11:5d:80:e3:53:d4:58:88:
                    64:5e:e0:85:6d:74:ac:65:b9:1c:e4:55:4d:99:23:
                    03:85:5f:36:4b:37:7d:c8:a9:b1:ff:d4:7c:13:22:
                    58:53:74:8b:42:80:7b:d8:29:93:1e:0f:69:8e:21:
                    9b:b6:30:22:83:b4:2e:ba:29:f3:23:b9:e0:82:9a:
                    84:a2:80:46:60:42:11:94:d2:08:7a:54:32:e4:54:
                    be:08:30:95:98:93:04:9b:bc:13:83:05:4e:62:89:
                    06:4a:84:39:28:5e:3e:89:7f:aa:9c:f9:8a:b1:17:
                    5b:24:73:04:92:5a:9c:2a:59:74:9e:b6:4e:25:e2:
                    4b:f9:8a:36:0d:ff:4a:c5:e6:6c:4b:97:82:90:72:
                    0f:21:fb:a3:95:05:77:03:71:9f:55:f4:1d:f3:98:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:F3:51:9B:E3:12:75:03:C6:27:F3:CE:49:29:71:19:80:8E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88c46e19-ecb7-3713-9a57-7de5ed4346c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:92:3c:f8:f3:e9:b4:f6:45:8e:db:7b:df:70:62:50:97:
         40:3b:e1:c1:f1:be:55:9c:51:ca:3a:06:d3:78:72:46:c3:5b:
         51:c7:44:63:39:61:be:c7:f4:dc:5c:05:35:35:20:55:1d:82:
         3b:e2:92:dd:d5:ea:2f:40:53:28:58:2e:5d:b6:cf:17:11:a9:
         c4:70:a1:67:cd:75:fc:54:bc:b4:54:6f:31:e3:a0:58:93:c1:
         4e:ff:03:f3:4b:be:f0:59:09:54:5c:93:88:c0:cc:47:9b:41:
         3c:f9:a7:ba:68:fc:c6:26:63:32:7a:a6:06:86:c6:b8:5a:4f:
         0b:f7:af:72:78:51:52:2f:b6:78:bc:ed:d5:e9:de:3d:ee:59:
         a0:4a:0f:60:bb:17:09:a3:d7:a1:9b:35:76:2c:61:05:b6:6d:
         a5:ac:cd:3e:2c:57:55:3b:7c:c1:98:25:d3:f0:8b:88:9c:d0:
         8d:d9:b8:cd:b5:8d:b6:95:9b:5a:1e:6f:7e:54:b8:ee:32:43:
         b5:2e:16:f3:60:d9:84:af:9a:05:be:bb:bf:5c:93:eb:52:05:
         25:b3:f3:6a:34:8b:55:19:76:af:42:69:9c:53:b5:ca:1c:14:
         57:1f:b1:dd:1c:7c:91:1a:0b:8f:94:d4:7c:8e:13:4f:f6:37:
         fd:73:94:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqMj32MpwsKYl7bMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDEwMjIxMDM0OFoXDTI1MDQwMjIwMDM0OFowLzEtMCsGA1UEAxMk
MmFjM2RjNWYtZTAzNy00MGUxLTg5YWUtMGNmZTBjMzYzZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZClZr66yL+vnjyRNhee3kgqahwWUP3aN3oY
s2sYpn/RiAAYOw2Y66ryegCrIma4GV4sXZh4agZxVDicG0Gi0BnAye5cp3XjixKY
XnLcF3sKK71UxEm+a+OJBfd5SohnEV2A41PUWIhkXuCFbXSsZbkc5FVNmSMDhV82
Szd9yKmx/9R8EyJYU3SLQoB72CmTHg9pjiGbtjAig7QuuinzI7nggpqEooBGYEIR
lNIIelQy5FS+CDCVmJMEm7wTgwVOYokGSoQ5KF4+iX+qnPmKsRdbJHMEklqcKll0
nrZOJeJL+Yo2Df9KxeZsS5eCkHIPIfujlQV3A3GfVfQd85gqAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFan81Gb4xJ1A8Yn885JKXEZgI5BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODhjNDZlMTktZWNiNy0z
NzEzLTlhNTctN2RlNWVkNDM0NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPzkjz48+m09kWO23vfcGJQl0A74cHxvlWcUco6BtN4ckbDW1HHRGM5
Yb7H9NxcBTU1IFUdgjvikt3V6i9AUyhYLl22zxcRqcRwoWfNdfxUvLRUbzHjoFiT
wU7/A/NLvvBZCVRck4jAzEebQTz5p7po/MYmYzJ6pgaGxrhaTwv3r3J4UVIvtni8
7dXp3j3uWaBKD2C7Fwmj16GbNXYsYQW2baWszT4sV1U7fMGYJdPwi4ic0I3ZuM21
jbaVm1oeb35UuO4yQ7UuFvNg2YSvmgW+u79ck+tSBSWz82o0i1UZdq9CaZxTtcoc
FFcfsd0cfJEaC4+U1HyOE0/2N/1zlBo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:52:20 2025 by rpki-client