Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa
File:                     61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa (raw, json)
Hash identifier:          AVrATIMNqIuQUH3Lze5APM96Nd3EW6tqbOAlAW2kTFQ=
Subject key identifier:   25:12:38:C8:85:59:EC:48:12:A3:DC:4B:F4:CC:A7:20:A8:4F:7B:C9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C78C17D1390EB27F3380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.24.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c7:8c:17:d1:39:0e:b2:7f:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=f4685240-83a7-490d-9635-a3effc8cf216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:b1:f2:7c:11:44:1b:48:fd:e0:64:dc:b5:
                    c9:7d:ee:a2:1c:85:05:95:d7:e4:fb:a6:dd:17:dd:
                    2d:02:d9:a4:68:e4:11:3b:a0:73:0d:9a:90:fa:1b:
                    91:65:fd:19:fd:1b:d7:6d:c4:63:09:16:39:f7:93:
                    95:35:2d:a6:04:29:11:2d:8e:5b:a0:a8:1f:b9:7a:
                    47:15:b2:d3:4e:fe:c3:ef:29:e5:59:27:0a:ca:82:
                    c7:58:7c:8e:f0:75:3c:9c:83:18:b8:1a:ca:47:2c:
                    4c:0d:ab:ad:bc:b5:41:31:fc:cc:9c:82:66:d0:e8:
                    55:1f:17:7a:0f:0f:fe:2c:60:af:a9:4b:1d:ac:bd:
                    16:53:a0:32:7c:0f:de:54:52:10:e4:87:dc:ac:79:
                    7d:b5:61:08:be:dd:0b:a2:d6:14:b1:33:43:08:c8:
                    5f:88:cf:76:75:0f:b4:a6:71:8f:d6:2a:8a:1a:5a:
                    cb:2e:ba:46:17:f9:6d:77:da:12:a0:e7:01:0b:bd:
                    ac:ce:68:b9:da:90:7a:a6:93:ba:9a:0a:56:9e:5b:
                    e1:92:72:7b:ab:ec:93:2f:52:e6:3a:db:d7:78:1e:
                    86:01:86:64:44:5f:50:d8:b1:11:f5:7c:23:2b:11:
                    af:d3:65:6c:01:1d:78:05:2f:3b:39:5d:35:a8:5c:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:38:C8:85:59:EC:48:12:A3:DC:4B:F4:CC:A7:20:A8:4F:7B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/61b2c5cf-21d4-3959-b545-16f7bd3d59b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:5b:e4:fe:f8:01:91:5a:3a:99:dd:49:ed:90:40:d4:06:
         31:f5:76:80:4b:74:6e:98:ef:65:d0:96:e2:46:ee:3b:a2:c7:
         98:03:f1:1e:9a:8a:ee:3b:cb:a2:31:5f:e3:b7:11:2a:54:93:
         65:a1:0e:a0:10:6e:75:03:a5:7f:54:bf:86:e0:6e:c6:45:90:
         fc:67:f3:8b:35:f3:00:fd:e8:fa:0e:d3:ef:2b:f0:54:f6:22:
         fc:f0:48:1b:c2:0d:01:95:b5:ac:af:ac:88:76:a3:42:1c:5e:
         d8:06:ad:ce:81:e4:d3:e3:b6:62:04:8f:e4:7e:9a:3d:77:7c:
         3f:17:e1:89:31:f8:38:ca:a7:cc:a2:4e:9c:82:1b:53:f8:61:
         2a:45:6d:af:d9:74:9a:a0:50:8b:ec:be:10:d2:a8:e4:a7:22:
         ee:b7:be:b8:49:35:7b:8e:67:fb:27:f4:c3:16:75:09:5f:85:
         a5:76:4d:a8:9c:1b:f0:9a:b6:de:66:b8:11:1a:64:32:4c:a5:
         8f:84:24:2d:86:f1:b5:ce:81:dc:ac:10:28:c3:d6:17:cc:15:
         6c:1f:de:95:f8:3d:63:be:b2:83:8b:e5:9f:a0:a4:f5:3b:ec:
         43:e9:7f:ef:31:b8:c1:e8:b9:41:c7:9f:68:72:61:2c:88:ea:
         8d:9c:6d:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtseMF9E5DrJ/M4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
ZjQ2ODUyNDAtODNhNy00OTBkLTk2MzUtYTNlZmZjOGNmMjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvmx8nwRRBtI/eBk3LXJfe6iHIUFldfk+6bd
F90tAtmkaOQRO6BzDZqQ+huRZf0Z/RvXbcRjCRY595OVNS2mBCkRLY5boKgfuXpH
FbLTTv7D7ynlWScKyoLHWHyO8HU8nIMYuBrKRyxMDautvLVBMfzMnIJm0OhVHxd6
Dw/+LGCvqUsdrL0WU6AyfA/eVFIQ5IfcrHl9tWEIvt0LotYUsTNDCMhfiM92dQ+0
pnGP1iqKGlrLLrpGF/ltd9oSoOcBC72szmi52pB6ppO6mgpWnlvhknJ7q+yTL1Lm
OtvXeB6GAYZkRF9Q2LER9XwjKxGv02VsAR14BS87OV01qFzIJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUSOMiFWexIEqPcS/TMpyCoT3vJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjFiMmM1Y2YtMjFkNC0z
OTU5LWI1NDUtMTZmN2JkM2Q1OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKo2W+T++AGRWjqZ3UntkEDUBjH1doBLdG6Y72XQluJG7juix5gD8R6a
iu47y6IxX+O3ESpUk2WhDqAQbnUDpX9Uv4bgbsZFkPxn84s18wD96PoO0+8r8FT2
IvzwSBvCDQGVtayvrIh2o0IcXtgGrc6B5NPjtmIEj+R+mj13fD8X4Ykx+DjKp8yi
TpyCG1P4YSpFba/ZdJqgUIvsvhDSqOSnIu63vrhJNXuOZ/sn9MMWdQlfhaV2Taic
G/Catt5muBEaZDJMpY+EJC2G8bXOgdysECjD1hfMFWwf3pX4PWO+soOL5Z+gpPU7
7EPpf+8xuMHouUHHn2hyYSyI6o2cbb4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:12 2025 by rpki-client