Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd7ab0f4-c865-3a0a-bdbf-67492f8bc699.roa
File:                     cd7ab0f4-c865-3a0a-bdbf-67492f8bc699.roa (raw, json)
Hash identifier:          JBP8a/zg6gwxuzqMljsPkJOh8ZCFw/1p7/Ym1nMYx9c=
Subject key identifier:   5B:DF:BB:54:48:B5:9E:14:EE:CB:45:6D:E7:C8:AF:DD:9A:9B:D6:5F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848705AF29CBAC6BA17A30D7FA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd7ab0f4-c865-3a0a-bdbf-67492f8bc699.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     44477
IP address blocks:        104.253.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:f2:9c:ba:c6:ba:17:a3:0d:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=bae321df-1315-4d62-a95d-a61dd25431cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:83:d4:ff:cb:46:16:69:cc:e8:73:82:b8:
                    3d:cd:6b:f8:e1:62:8e:de:8d:24:26:69:a1:cb:21:
                    e8:00:fd:c5:bc:cb:a9:dd:d2:f3:a9:0a:eb:c3:95:
                    a1:e8:08:71:fe:76:b3:b7:22:8b:b6:33:d0:56:5a:
                    d6:ee:d5:56:ac:c3:72:56:26:95:9b:6e:5b:03:cd:
                    0d:d0:64:b7:c1:9f:8c:e9:f6:e8:5c:24:af:e1:9c:
                    c3:a5:be:16:26:17:9e:5c:76:73:3c:0b:0a:d0:e3:
                    11:64:e5:e1:8f:0b:91:6d:a2:e3:fe:b0:55:29:43:
                    e5:9d:40:1c:8b:f1:4b:9a:5b:f8:de:05:e4:9d:8a:
                    4a:d2:83:fb:a9:6f:47:d9:56:03:f7:22:2d:de:0e:
                    2d:39:52:52:19:93:1d:96:1c:0a:eb:84:41:90:12:
                    67:c5:bd:48:11:1a:c4:50:19:4e:75:5e:de:25:89:
                    ec:13:5d:bc:43:69:1b:ee:dd:ac:c7:22:13:79:d5:
                    08:e8:ba:4b:06:78:80:8c:f6:03:27:3d:35:76:3c:
                    81:17:b6:8c:7b:4a:f9:cb:99:be:bf:31:95:f8:eb:
                    16:24:bc:d7:52:7c:7e:c7:3f:3b:dc:27:e1:84:ed:
                    95:fe:7c:f5:cf:5c:9b:7b:30:eb:ac:dc:8a:4a:48:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DF:BB:54:48:B5:9E:14:EE:CB:45:6D:E7:C8:AF:DD:9A:9B:D6:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd7ab0f4-c865-3a0a-bdbf-67492f8bc699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:a0:28:2d:32:0d:28:2c:9f:b7:3c:74:24:9d:88:19:4f:
         a7:5b:10:05:29:c1:be:fb:b0:a9:cd:50:d6:a0:8e:40:16:07:
         99:25:42:d4:fe:d2:09:7b:ae:d5:ed:6b:74:00:94:95:18:91:
         9c:b0:ae:06:a4:f4:e0:8d:82:38:ce:89:aa:a6:71:92:72:a6:
         c0:bb:8e:88:d0:2f:bc:fd:b1:cc:30:12:09:1e:68:9f:d4:fb:
         0f:b5:6e:54:d7:88:18:86:98:2e:85:4e:90:a2:c7:11:c9:4a:
         01:96:be:b1:fd:da:3d:8c:af:11:b3:ae:77:1f:c3:ed:c0:b0:
         f6:95:0e:62:b0:d2:09:d1:f9:85:07:20:20:a2:21:3b:b2:d5:
         34:bc:cc:5b:9a:ee:b1:c5:3b:5f:ed:9b:f8:1a:88:6a:b6:2c:
         69:1c:6c:c0:ba:3d:76:ec:da:a2:d7:06:78:fb:b0:e3:b3:af:
         e7:5d:76:6e:1b:ab:07:4b:8b:66:9f:dc:67:56:99:bd:c0:ad:
         17:0a:92:18:d0:26:e0:2b:63:84:d2:1a:83:1a:29:47:fb:0a:
         a9:50:11:ab:e9:d6:f3:63:ed:36:3a:11:36:39:24:f4:2d:99:
         80:22:5d:44:b3:58:0e:a7:48:fb:5f:d2:ab:88:23:9b:59:74:
         8d:c6:fd:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvKcusa6F6MNf6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk
YmFlMzIxZGYtMTMxNS00ZDYyLWE5NWQtYTYxZGQyNTQzMWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFSD1P/LRhZpzOhzgrg9zWv44WKO3o0kJmmh
yyHoAP3FvMup3dLzqQrrw5Wh6Ahx/naztyKLtjPQVlrW7tVWrMNyViaVm25bA80N
0GS3wZ+M6fboXCSv4ZzDpb4WJheeXHZzPAsK0OMRZOXhjwuRbaLj/rBVKUPlnUAc
i/FLmlv43gXknYpK0oP7qW9H2VYD9yIt3g4tOVJSGZMdlhwK64RBkBJnxb1IERrE
UBlOdV7eJYnsE128Q2kb7t2sxyITedUI6LpLBniAjPYDJz01djyBF7aMe0r5y5m+
vzGV+OsWJLzXUnx+xz873CfhhO2V/nz1z1ybezDrrNyKSkga2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFvfu1RItZ4U7stFbefIr92am9ZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2Q3YWIwZjQtYzg2NS0z
YTBhLWJkYmYtNjc0OTJmOGJjNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsFoCgtMg0oLJ+3PHQknYgZT6dbEAUpwb77sKnNUNagjkAWB5klQtT+
0gl7rtXta3QAlJUYkZywrgak9OCNgjjOiaqmcZJypsC7jojQL7z9scwwEgkeaJ/U
+w+1blTXiBiGmC6FTpCixxHJSgGWvrH92j2MrxGzrncfw+3AsPaVDmKw0gnR+YUH
ICCiITuy1TS8zFua7rHFO1/tm/gaiGq2LGkcbMC6PXbs2qLXBnj7sOOzr+dddm4b
qwdLi2af3GdWmb3ArRcKkhjQJuArY4TSGoMaKUf7CqlQEavp1vNj7TY6ETY5JPQt
mYAiXUSzWA6nSPtf0quII5tZdI3G/fc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:32 2025 by rpki-client