Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8fbffa4-9e1d-3452-9287-0758b84edb3f.roa
File:                     d8fbffa4-9e1d-3452-9287-0758b84edb3f.roa (raw, json)
Hash identifier:          K6GWEzA716Jjgy6UzM0+tLm6tczza8PCkL/dDBa5+1Q=
Subject key identifier:   C3:3C:5C:12:5C:54:6F:C9:64:9D:A2:8B:FD:B0:4E:71:72:A6:CE:5F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584855D5B30F2BA6124DC38A0DA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8fbffa4-9e1d-3452-9287-0758b84edb3f.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        104.82.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:b3:0f:2b:a6:12:4d:c3:8a:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=54c501a8-4ec5-43c2-a443-c2fdaae5472c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:67:78:91:c6:e8:9f:a7:44:48:50:be:c1:
                    7f:52:6f:64:96:6a:b6:dd:d5:b4:f5:b5:46:1a:c8:
                    b9:47:17:c6:71:4f:54:a4:11:69:6f:84:b8:c8:ae:
                    e5:d0:96:76:c5:1f:e2:bf:6e:1c:f1:fb:74:e2:de:
                    34:29:63:32:5d:1b:2e:8a:01:8f:99:4c:b5:dd:31:
                    ab:f4:f6:8a:3c:0b:85:7f:50:aa:92:1a:91:b9:3b:
                    d0:87:26:56:c3:cf:f4:d8:21:06:31:6e:c1:da:3d:
                    3b:62:15:2c:da:ef:a2:f2:97:96:4a:3c:af:92:55:
                    d7:bd:35:b4:03:ad:6c:c5:96:55:28:bd:d0:71:73:
                    f2:5c:1e:dd:77:9a:43:5c:fd:e5:d6:d0:16:ee:85:
                    e7:e5:a3:57:a9:b1:2e:a3:80:f8:ba:d3:fb:31:74:
                    a2:b0:e9:c2:45:09:73:4b:65:2c:58:8d:94:e8:87:
                    a2:59:7c:44:bd:d4:b0:0a:d5:14:6b:b6:5b:af:f7:
                    ff:77:37:24:38:d3:ad:07:e2:7d:26:26:c0:10:84:
                    1e:06:01:ee:d1:b2:97:53:ac:56:d3:78:a0:0f:1d:
                    97:04:ab:17:9f:f6:1d:40:11:79:39:60:1f:0e:69:
                    bc:78:bb:a7:29:92:cd:8f:16:46:d4:a9:4e:f0:30:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3C:5C:12:5C:54:6F:C9:64:9D:A2:8B:FD:B0:4E:71:72:A6:CE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8fbffa4-9e1d-3452-9287-0758b84edb3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.82.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:86:3f:bc:85:a4:3a:e0:64:a8:9d:eb:df:18:87:89:ca:d9:
         c7:75:87:26:19:22:49:95:c6:41:d3:41:39:ef:d5:28:3e:f1:
         f6:19:ed:a3:ab:87:64:0e:f0:82:17:3b:d5:5a:12:c3:9c:e9:
         1d:81:58:58:89:02:96:08:6d:0b:ca:b4:dd:67:ff:38:62:41:
         14:e7:ae:3f:84:f6:03:a1:cd:9b:56:53:df:81:a6:f8:14:53:
         d8:37:1f:db:26:0d:28:03:05:2c:1a:cd:9b:60:7e:99:be:a3:
         b9:12:63:14:11:85:6e:23:1a:9f:81:89:4c:98:a5:91:a5:52:
         81:58:1d:e2:f1:6d:d6:7f:8d:45:8c:a3:93:26:a2:c3:ea:68:
         79:74:51:14:76:9f:b9:01:36:db:a1:d8:d7:44:fe:57:8f:ae:
         58:05:e5:05:3e:29:20:96:3b:33:9a:67:e2:69:fc:34:86:33:
         e6:e4:27:cf:d5:c5:88:4a:98:b1:e9:c8:b7:26:66:92:5d:c9:
         52:86:53:f7:c5:eb:ca:8b:2f:a4:51:9b:aa:ad:5c:ed:9f:97:
         c9:37:ad:50:12:78:45:0c:8f:81:3a:f1:3a:6d:46:ca:cc:60:
         38:14:f3:80:1e:d8:ea:27:08:d1:7c:53:c0:5f:68:a9:21:37:
         a3:3f:71:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1bMPK6YSTcOKDaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NTRjNTAxYTgtNGVjNS00M2MyLWE0NDMtYzJmZGFhZTU0NzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0dneJHG6J+nREhQvsF/Um9klmq23dW09bVG
Gsi5RxfGcU9UpBFpb4S4yK7l0JZ2xR/iv24c8ft04t40KWMyXRsuigGPmUy13TGr
9PaKPAuFf1CqkhqRuTvQhyZWw8/02CEGMW7B2j07YhUs2u+i8peWSjyvklXXvTW0
A61sxZZVKL3QcXPyXB7dd5pDXP3l1tAW7oXn5aNXqbEuo4D4utP7MXSisOnCRQlz
S2UsWI2U6IeiWXxEvdSwCtUUa7Zbr/f/dzckONOtB+J9JibAEIQeBgHu0bKXU6xW
03igDx2XBKsXn/YdQBF5OWAfDmm8eLunKZLNjxZG1KlO8DAyewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMM8XBJcVG/JZJ2ii/2wTnFyps5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhmYmZmYTQtOWUxZC0z
NDUyLTkyODctMDc1OGI4NGVkYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaFJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmGP7yFpDrgZKid698Yh4nK2cd1hyYZIkmVxkHTQTnv1Sg+8fYZ7aOr
h2QO8IIXO9VaEsOc6R2BWFiJApYIbQvKtN1n/zhiQRTnrj+E9gOhzZtWU9+BpvgU
U9g3H9smDSgDBSwazZtgfpm+o7kSYxQRhW4jGp+BiUyYpZGlUoFYHeLxbdZ/jUWM
o5MmosPqaHl0URR2n7kBNtuh2NdE/lePrlgF5QU+KSCWOzOaZ+Jp/DSGM+bkJ8/V
xYhKmLHpyLcmZpJdyVKGU/fF68qLL6RRm6qtXO2fl8k3rVASeEUMj4E68TptRsrM
YDgU84Ae2OonCNF8U8BfaKkhN6M/cdU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:45 2025 by rpki-client