Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa
File:                     2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa (raw, json)
Hash identifier:          QQvsx+wxSU7/q8aebgd6YjrPVhPCTqafQHdSg0z52+E=
Subject key identifier:   9A:91:47:89:F4:90:71:E4:AE:46:54:01:A3:9A:5E:D5:7B:63:DE:E0
Certificate issuer:       /CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
Certificate serial:       010D0C9F43285848FA8BEE5F6D2D730BBAB0C9C0
Authority key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     199610
IP address blocks:        104.193.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:ee:5f:6d:2d:73:0b:ba:b0:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=b569bdb6-9565-41dc-8232-4b18a39f6760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8b:8f:bd:35:0c:b5:e7:b8:f4:a0:78:90:bd:
                    bf:2b:8b:20:c2:3e:34:ab:bd:3b:4a:f6:2c:66:25:
                    dd:0d:fc:39:bf:7c:92:21:bf:4e:5e:4b:b3:13:ba:
                    83:33:aa:b4:d1:e9:fc:34:c6:6a:97:c2:3d:14:e0:
                    a7:ab:30:4f:fb:20:97:64:b6:fa:11:95:37:fd:6a:
                    50:aa:8c:63:bc:d3:5b:37:97:43:bc:ea:16:dc:1c:
                    a3:65:fb:e9:c8:c0:62:cd:07:b2:e3:3b:29:14:98:
                    3c:9c:41:ad:6b:4d:2e:4a:ff:07:7d:58:10:1f:a9:
                    b5:89:43:d2:b3:ba:5c:f3:19:77:f4:3a:d0:ae:a0:
                    40:e9:13:12:d8:15:85:34:eb:ec:b3:f5:cc:fd:ca:
                    9f:f2:de:0d:7b:c7:ba:97:4d:94:5c:02:4d:39:86:
                    a8:ba:58:3a:42:e6:04:03:35:2b:18:25:27:30:d5:
                    0a:cf:92:c6:47:57:7e:d2:23:b0:8f:94:99:0c:22:
                    f4:7c:65:f0:1d:93:af:84:f1:b8:42:25:15:3e:ba:
                    fe:31:b3:c1:5a:aa:b2:0c:a7:fa:0b:8b:8b:ce:24:
                    7e:24:75:19:04:a4:a1:34:8c:b9:6b:2d:67:87:3a:
                    33:8a:23:9a:bf:17:33:ea:5c:bd:12:5f:ce:99:40:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:47:89:F4:90:71:E4:AE:46:54:01:A3:9A:5E:D5:7B:63:DE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/2668bbdf-0d11-3dfe-aaac-ddd6bf274ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:e8:f1:ee:81:eb:1d:a9:c8:92:d0:6e:66:55:f7:00:fa:
         c9:bc:04:19:6e:db:62:64:50:aa:90:79:34:93:33:a1:44:b9:
         26:a5:df:8f:16:21:35:be:e5:42:cb:c3:89:fd:52:3a:60:a6:
         68:ac:03:22:d8:22:22:1d:37:c5:3a:22:69:83:98:16:e4:88:
         22:b1:97:fc:d2:49:eb:64:18:44:eb:0d:8b:fb:b6:ba:62:aa:
         3e:ea:0d:cb:2e:0e:b0:62:c8:ee:04:9e:4c:e2:d7:5b:63:b2:
         e9:51:e5:5e:26:9f:12:58:30:1f:ec:e2:be:94:13:8c:72:8d:
         6f:f4:af:c0:db:24:40:3d:e5:be:fa:b3:bf:0f:8d:72:14:b6:
         4c:96:2e:2c:01:22:f2:3e:cc:46:bf:32:b2:c7:08:de:b2:e6:
         90:a5:e5:ca:01:d1:05:64:b5:e5:08:7c:3c:7c:a1:5d:98:23:
         e7:d8:c6:05:7e:d7:d3:6d:c6:af:85:fb:86:59:ad:48:4a:b0:
         d6:01:0a:09:e5:90:96:99:33:33:cc:f9:b7:75:83:99:d2:15:
         c6:ea:51:74:21:02:0c:ae:c6:44:cd:b3:7a:71:59:5e:3b:2b:
         20:a0:4e:99:ff:d3:06:80:94:f8:3a:c3:e8:e5:0a:8a:6a:e2:
         b1:74:da:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj6i+5fbS1zC7qwycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwMDc4Y2UtMDgyZC00ZmY0LTk1NTgtZDFhMGYwZDFl
Y2RkMB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk
YjU2OWJkYjYtOTU2NS00MWRjLTgyMzItNGIxOGEzOWY2NzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhouPvTUMtee49KB4kL2/K4sgwj40q707SvYs
ZiXdDfw5v3ySIb9OXkuzE7qDM6q00en8NMZql8I9FOCnqzBP+yCXZLb6EZU3/WpQ
qoxjvNNbN5dDvOoW3ByjZfvpyMBizQey4zspFJg8nEGta00uSv8HfVgQH6m1iUPS
s7pc8xl39DrQrqBA6RMS2BWFNOvss/XM/cqf8t4Ne8e6l02UXAJNOYaoulg6QuYE
AzUrGCUnMNUKz5LGR1d+0iOwj5SZDCL0fGXwHZOvhPG4QiUVPrr+MbPBWqqyDKf6
C4uLziR+JHUZBKShNIy5ay1nhzoziiOavxcz6ly9El/OmUBgCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqRR4n0kHHkrkZUAaOaXtV7Y97gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAw
NzhjZS0wODJkLTRmZjQtOTU1OC1kMWEwZjBkMWVjZGQvMjY2OGJiZGYtMGQxMS0z
ZGZlLWFhYWMtZGRkNmJmMjc0YmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYwMDc4Y2UtMDgyZC00ZmY0LTk1
NTgtZDFhMGYwZDFlY2RkLzI2MDA3OGNlLTA4MmQtNGZmNC05NTU4LWQxYTBmMGQx
ZWNkZC5jcmwwHwYDVR0jBBgwFoAUjnxU7fH4qSjSSrSrh3nYQxhLqeUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAwNzhjZS0wODJkLTRmZjQtOTU1OC1kMWEw
ZjBkMWVjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhf6PHugesdqciS0G5mVfcA+sm8BBlu22JkUKqQeTSTM6FEuSal348W
ITW+5ULLw4n9UjpgpmisAyLYIiIdN8U6ImmDmBbkiCKxl/zSSetkGETrDYv7trpi
qj7qDcsuDrBiyO4Enkzi11tjsulR5V4mnxJYMB/s4r6UE4xyjW/0r8DbJEA95b76
s78PjXIUtkyWLiwBIvI+zEa/MrLHCN6y5pCl5coB0QVkteUIfDx8oV2YI+fYxgV+
19Ntxq+F+4ZZrUhKsNYBCgnlkJaZMzPM+bd1g5nSFcbqUXQhAgyuxkTNs3pxWV47
KyCgTpn/0waAlPg6w+jlCopq4rF02lg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:02 2025 by rpki-client