Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a12b0766-5443-34e2-9cc2-81ea63f6419d.roa
File:                     a12b0766-5443-34e2-9cc2-81ea63f6419d.roa (raw, json)
Hash identifier:          WIIrRS8WlhgBh/66bwrrcCyYL+iE4YAZkRjCN4oddBA=
Subject key identifier:   85:BA:08:59:9F:C6:55:4C:63:C5:9D:5C:40:B2:F8:D1:E6:5C:5A:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584855D5AC2171CECBE564AB1780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a12b0766-5443-34e2-9cc2-81ea63f6419d.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        104.93.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:ac:21:71:ce:cb:e5:64:ab:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=9c4d7043-36d0-413a-8f3e-49e064538b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:d6:86:5b:0c:16:cd:28:cb:e2:e3:72:86:
                    9e:3f:50:b1:17:b2:98:41:03:46:01:07:25:20:c7:
                    94:d0:13:09:28:91:b9:d2:c5:60:42:a0:57:61:fd:
                    b2:8b:76:4b:ae:2b:42:b1:c4:69:9c:c9:f6:57:5c:
                    0a:27:1d:ef:85:f4:c4:4f:fa:4e:ce:39:80:ea:01:
                    25:4d:db:f6:65:10:7e:5f:9f:84:2e:fd:0b:39:8f:
                    3f:97:d1:6b:b6:82:0a:79:c6:dd:f6:83:85:2c:ae:
                    9e:c3:73:7d:4c:cc:54:d5:72:48:f4:35:d9:2e:83:
                    5c:5e:a3:cb:7a:25:7d:bc:9a:b2:f2:6d:83:b8:03:
                    06:32:b1:e4:d8:8e:ae:e5:7b:8b:8d:8a:a1:18:65:
                    ed:90:b6:86:26:3c:b2:e5:87:29:51:1b:14:1b:d4:
                    9d:e6:2a:67:ae:ad:68:fc:07:c8:31:ff:64:6b:69:
                    f6:8f:1c:2a:0f:c3:81:59:bf:87:16:b9:04:82:5c:
                    a8:df:e7:15:ba:3f:a7:5e:b7:97:03:b5:c0:0c:8e:
                    56:3e:1e:49:1e:a1:20:a9:e2:06:77:b9:f3:62:20:
                    45:68:8e:49:6d:6a:30:7c:1c:77:8b:fb:cb:e3:3f:
                    56:36:23:be:08:6a:06:7e:17:d0:e7:21:9f:98:12:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BA:08:59:9F:C6:55:4C:63:C5:9D:5C:40:B2:F8:D1:E6:5C:5A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a12b0766-5443-34e2-9cc2-81ea63f6419d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.93.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cc:f2:42:e8:63:25:c1:a9:19:46:3b:00:3b:7c:aa:1e:21:
         a0:13:b7:fa:66:86:f5:c4:53:8f:7f:21:8e:4c:39:6f:78:70:
         2f:c4:9e:fe:cb:73:b4:22:00:e6:db:8d:8b:d5:8f:2b:2b:fc:
         57:86:26:64:79:1e:2b:ec:6b:9f:fb:45:b7:f4:42:7e:a8:d6:
         be:ab:e4:d7:92:3f:af:5a:67:4b:4a:ff:97:be:ff:cb:2e:3d:
         55:d4:77:7b:10:78:62:75:7d:ed:e1:3c:c1:85:94:d8:ac:d9:
         62:c0:26:e8:74:48:4e:62:e9:62:84:d2:75:44:29:60:90:bf:
         19:74:e7:08:6c:33:62:8f:9a:fc:13:06:f3:f3:dd:90:47:0e:
         62:fb:03:41:58:53:4e:e0:03:3c:3d:1d:87:ad:f7:46:dd:79:
         bc:a5:89:4b:40:f5:da:74:2d:4d:3e:f1:4d:ae:80:d1:96:a1:
         60:b5:a9:0c:b8:c8:ee:e8:d2:3c:93:95:ce:d9:50:d8:4d:97:
         ce:c8:c0:77:13:b8:92:70:be:51:a6:9d:2d:ae:4e:38:74:5f:
         c7:02:19:df:f3:97:0a:23:e9:88:63:fa:77:7e:30:a6:f9:67:
         70:af:96:91:22:70:4d:35:a7:28:d5:4e:44:df:ab:a8:a1:5a:
         a6:72:ce:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1awhcc7L5WSrF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
OWM0ZDcwNDMtMzZkMC00MTNhLThmM2UtNDllMDY0NTM4YjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwHWhlsMFs0oy+LjcoaeP1CxF7KYQQNGAQcl
IMeU0BMJKJG50sVgQqBXYf2yi3ZLritCscRpnMn2V1wKJx3vhfTET/pOzjmA6gEl
Tdv2ZRB+X5+ELv0LOY8/l9FrtoIKecbd9oOFLK6ew3N9TMxU1XJI9DXZLoNcXqPL
eiV9vJqy8m2DuAMGMrHk2I6u5XuLjYqhGGXtkLaGJjyy5YcpURsUG9Sd5ipnrq1o
/AfIMf9ka2n2jxwqD8OBWb+HFrkEglyo3+cVuj+nXreXA7XADI5WPh5JHqEgqeIG
d7nzYiBFaI5JbWowfBx3i/vL4z9WNiO+CGoGfhfQ5yGfmBKDRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIW6CFmfxlVMY8WdXECy+NHmXFrwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTEyYjA3NjYtNTQ0My0z
NGUyLTljYzItODFlYTYzZjY0MTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaF0UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/M8kLoYyXBqRlGOwA7fKoeIaATt/pmhvXEU49/IY5MOW94cC/Env7L
c7QiAObbjYvVjysr/FeGJmR5Hivsa5/7Rbf0Qn6o1r6r5NeSP69aZ0tK/5e+/8su
PVXUd3sQeGJ1fe3hPMGFlNis2WLAJuh0SE5i6WKE0nVEKWCQvxl05whsM2KPmvwT
BvPz3ZBHDmL7A0FYU07gAzw9HYet90bdebyliUtA9dp0LU0+8U2ugNGWoWC1qQy4
yO7o0jyTlc7ZUNhNl87IwHcTuJJwvlGmnS2uTjh0X8cCGd/zlwoj6Yhj+nd+MKb5
Z3CvlpEicE01pyjVTkTfq6ihWqZyzmQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:40 2025 by rpki-client