Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ede31197-be29-3744-881e-27084180bedc.roa
File:                     ede31197-be29-3744-881e-27084180bedc.roa (raw, json)
Hash identifier:          Va2fVJ1Q+z44S0XvEflV0mv4sV6bZVdjbl9gUzONl/M=
Subject key identifier:   B3:AC:EC:75:F6:E1:5F:0A:15:3F:00:26:72:1A:91:5B:0E:F0:0D:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488A4E949DAC1F8E5C61B3E3C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ede31197-be29-3744-881e-27084180bedc.roa
Signing time:             Tue 14 Jan 2025 09:06:46 +0000
ROA not before:           Tue 14 Jan 2025 09:06:46 +0000
ROA not after:            Mon 14 Apr 2025 08:06:46 +0000
asID:                     8881
IP address blocks:        104.253.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:4e:94:9d:ac:1f:8e:5c:61:b3:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 14 09:06:46 2025 GMT
            Not After : Apr 14 08:06:46 2025 GMT
        Subject: CN=46240cce-8cdb-4cdc-b7a8-116acef68714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:1a:51:d1:2f:47:3d:60:ea:fb:d4:af:46:
                    c1:45:82:2c:04:51:dc:54:65:f7:6d:ec:15:24:8f:
                    13:5b:13:7d:a0:c7:2e:9b:78:99:53:03:48:80:26:
                    c0:e7:a0:6b:d5:11:47:05:b5:eb:4f:fb:60:0a:90:
                    16:5b:b8:11:ac:73:3c:b0:ae:97:bc:b3:cc:c4:08:
                    d9:3f:4e:45:02:fe:ab:7f:6a:47:5e:22:a2:56:a0:
                    c0:6a:e1:4e:e1:87:fa:8e:f2:c0:ad:0e:3d:ff:fb:
                    3e:69:2f:1c:76:2c:34:75:cc:31:cf:15:8e:5d:be:
                    ac:69:4f:87:14:30:26:98:08:e4:c1:8f:99:60:20:
                    c1:18:92:2c:80:25:6f:0f:18:82:eb:52:67:72:7a:
                    42:fc:f2:df:a8:3b:a9:32:da:2b:c0:a2:8e:19:ee:
                    dc:d1:07:3f:1e:84:34:c5:58:de:a9:ac:93:d2:76:
                    85:40:d4:02:da:aa:0b:29:d6:bd:b6:55:0c:ca:48:
                    5d:e7:22:26:e9:09:29:f7:60:19:85:df:45:de:19:
                    e7:15:85:05:72:a5:01:d2:a3:27:5c:f1:fe:d7:ba:
                    0a:b0:1f:36:34:d1:39:f8:7a:42:74:e7:eb:42:81:
                    95:0e:2a:e1:d9:14:d5:e8:6c:d6:de:ac:b0:d4:43:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AC:EC:75:F6:E1:5F:0A:15:3F:00:26:72:1A:91:5B:0E:F0:0D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ede31197-be29-3744-881e-27084180bedc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:0a:f9:73:a5:45:f8:80:33:02:2d:d7:8a:d4:29:04:ce:
         31:e7:76:85:dc:38:d7:d6:50:95:98:a9:6e:ce:0b:74:db:b0:
         02:fb:15:ff:e8:2e:14:e3:91:5c:f2:71:f2:a0:ae:1a:fa:27:
         05:68:7a:bd:73:53:3e:37:61:17:c4:81:e2:a0:3b:27:87:a0:
         c4:7a:2a:89:0a:be:7a:5b:bd:db:e0:69:d1:7a:af:c7:b5:01:
         9a:a9:1d:f1:81:92:a2:65:8a:1f:a3:d7:ae:5b:a8:0b:58:b7:
         ba:9c:44:7b:e9:57:91:91:f1:5d:9a:2e:5c:19:89:67:a0:5f:
         21:3c:dd:22:a6:24:9e:e0:0a:8f:7e:3d:bf:d4:1f:bc:14:49:
         f9:d7:7f:eb:11:2e:76:54:40:d1:f9:a7:51:cc:1b:96:52:ec:
         87:74:fa:95:65:8e:c5:2a:19:2e:75:d7:ab:e0:e7:b0:f9:92:
         66:26:96:c0:47:57:9a:a8:f7:e3:71:4c:56:76:19:04:fe:61:
         63:f7:5a:0e:b4:2e:31:58:d0:3b:2d:7b:c9:98:2b:74:cf:41:
         ca:54:71:7b:95:9e:bf:07:fa:ad:81:77:f7:f9:52:c5:a2:f6:
         60:96:79:92:21:9c:7c:9b:e2:dd:38:a3:83:28:ca:73:8a:48:
         44:e0:aa:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiKTpSdrB+OXGGz48AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDExNDA5MDY0NloXDTI1MDQxNDA4MDY0NlowLzEtMCsGA1UEAxMk
NDYyNDBjY2UtOGNkYi00Y2RjLWI3YTgtMTE2YWNlZjY4NzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg8aUdEvRz1g6vvUr0bBRYIsBFHcVGX3bewV
JI8TWxN9oMcum3iZUwNIgCbA56Br1RFHBbXrT/tgCpAWW7gRrHM8sK6XvLPMxAjZ
P05FAv6rf2pHXiKiVqDAauFO4Yf6jvLArQ49//s+aS8cdiw0dcwxzxWOXb6saU+H
FDAmmAjkwY+ZYCDBGJIsgCVvDxiC61JncnpC/PLfqDupMtorwKKOGe7c0Qc/HoQ0
xVjeqayT0naFQNQC2qoLKda9tlUMykhd5yIm6Qkp92AZhd9F3hnnFYUFcqUB0qMn
XPH+17oKsB82NNE5+HpCdOfrQoGVDirh2RTV6GzW3qyw1ENVEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOs7HX24V8KFT8AJnIakVsO8A01MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWRlMzExOTctYmUyOS0z
NzQ0LTg4MWUtMjcwODQxODBiZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETnCvlzpUX4gDMCLdeK1CkEzjHndoXcONfWUJWYqW7OC3TbsAL7Ff/o
LhTjkVzycfKgrhr6JwVoer1zUz43YRfEgeKgOyeHoMR6KokKvnpbvdvgadF6r8e1
AZqpHfGBkqJlih+j165bqAtYt7qcRHvpV5GR8V2aLlwZiWegXyE83SKmJJ7gCo9+
Pb/UH7wUSfnXf+sRLnZUQNH5p1HMG5ZS7Id0+pVljsUqGS5116vg57D5kmYmlsBH
V5qo9+NxTFZ2GQT+YWP3Wg60LjFY0Dste8mYK3TPQcpUcXuVnr8H+q2Bd/f5UsWi
9mCWeZIhnHyb4t04o4MoynOKSETgquc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:02 2025 by rpki-client