Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb819ac5-31c4-3447-a5d6-be07b7716226.roa
File:                     eb819ac5-31c4-3447-a5d6-be07b7716226.roa (raw, json)
Hash identifier:          FsMkQ/U5ENT2AB702UHLuKvDs56ipkAkdSzQ+GYAbwQ=
Subject key identifier:   FA:DD:13:F3:2D:40:54:04:6C:B0:EA:9A:4B:FD:65:51:70:BD:F3:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6CAB692FF5A0EABDC4B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb819ac5-31c4-3447-a5d6-be07b7716226.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.29.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ca:b6:92:ff:5a:0e:ab:dc:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=29064aa5-c57d-44d4-b95e-3cae5346ada8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:a3:8a:ed:14:c3:5c:25:f2:19:f7:fb:a7:
                    27:c4:ae:ce:cc:8d:a6:ba:91:c1:6f:76:8d:25:49:
                    42:e9:b4:53:85:02:b3:33:8e:8f:24:a8:7e:a4:06:
                    14:7c:a3:a4:e2:3a:4f:1f:cc:27:3f:ca:01:e3:b9:
                    b0:cc:17:b8:b0:22:b4:76:2b:0e:19:57:20:92:d2:
                    7f:78:23:c8:cf:94:61:20:a8:fd:3f:47:0f:22:55:
                    0c:30:f7:6d:0a:a0:d0:a0:3e:db:23:20:f3:5a:dc:
                    d0:5a:90:90:e7:d9:8a:65:10:16:36:68:5e:56:e5:
                    24:37:72:27:8c:8c:e7:fd:97:44:d3:f1:6e:99:f9:
                    b6:b7:ea:07:83:a2:50:c6:a7:3a:b8:ac:af:f4:de:
                    f4:15:c5:35:be:16:fe:af:b7:23:6a:08:28:9f:26:
                    3f:e4:8f:07:26:c1:0a:b0:b7:0e:77:5e:6e:96:bd:
                    57:a8:07:c9:c4:93:38:eb:77:c2:e6:2c:c3:2c:e8:
                    5e:af:04:b6:ce:2d:e2:d1:0f:1a:d1:aa:f3:19:dc:
                    01:3e:34:58:25:af:ca:23:78:08:3b:13:74:7a:15:
                    d2:96:66:fb:dd:41:2f:b4:85:43:21:0e:ff:1b:84:
                    8d:31:0b:e7:83:c0:9f:16:23:db:18:f5:04:e3:1f:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:13:F3:2D:40:54:04:6C:B0:EA:9A:4B:FD:65:51:70:BD:F3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb819ac5-31c4-3447-a5d6-be07b7716226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:70:1a:53:cd:3e:9e:3d:c0:93:ee:b1:fe:45:5f:a4:f4:76:
         a2:2b:f3:43:57:a8:76:ad:76:87:ef:e1:aa:21:91:8b:78:cf:
         b8:a3:79:f3:d1:04:cd:13:55:ea:96:b1:aa:e7:ac:42:75:45:
         ef:52:67:f7:bf:5b:0c:16:31:b6:f2:42:1c:70:02:26:7e:0a:
         b0:22:9e:16:4a:b2:d8:db:c0:83:95:f5:29:be:23:35:20:e4:
         7d:14:0f:c7:52:ea:5f:ff:0b:d5:55:90:8e:62:02:e1:c5:4c:
         69:f9:2a:61:e2:54:f7:6f:4f:3f:69:f8:39:01:06:68:b6:2e:
         53:86:35:40:4c:0c:36:55:95:98:8b:2e:a3:1d:b8:01:a8:58:
         67:be:7d:dd:98:83:c3:12:ec:10:37:3c:9d:a2:93:20:cd:ce:
         af:0b:9e:46:79:c8:8f:74:4c:e0:0a:a7:d3:63:53:23:2c:0b:
         59:c4:c7:2a:ac:7b:d3:26:b9:b6:86:ac:68:d5:99:9e:9b:44:
         83:05:5c:b1:86:fc:48:f9:3c:11:2d:e4:7e:50:60:0a:5b:da:
         88:53:c3:8d:4c:5e:38:34:82:5f:00:3e:18:39:65:1e:78:dc:
         7a:12:2d:0f:d1:53:11:a0:3f:b7:b8:35:60:cf:cb:54:9a:09:
         50:60:79:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsq2kv9aDqvcS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
MjkwNjRhYTUtYzU3ZC00NGQ0LWI5NWUtM2NhZTUzNDZhZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmjiu0Uw1wl8hn3+6cnxK7OzI2mupHBb3aN
JUlC6bRThQKzM46PJKh+pAYUfKOk4jpPH8wnP8oB47mwzBe4sCK0disOGVcgktJ/
eCPIz5RhIKj9P0cPIlUMMPdtCqDQoD7bIyDzWtzQWpCQ59mKZRAWNmheVuUkN3In
jIzn/ZdE0/Fumfm2t+oHg6JQxqc6uKyv9N70FcU1vhb+r7cjaggonyY/5I8HJsEK
sLcOd15ulr1XqAfJxJM463fC5izDLOherwS2zi3i0Q8a0arzGdwBPjRYJa/KI3gI
OxN0ehXSlmb73UEvtIVDIQ7/G4SNMQvng8CfFiPbGPUE4x+s0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrdE/MtQFQEbLDqmkv9ZVFwvfOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI4MTlhYzUtMzFjNC0z
NDQ3LWE1ZDYtYmUwN2I3NzE2MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB0SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlwGlPNPp49wJPusf5FX6T0dqIr80NXqHatdofv4aohkYt4z7ijefPR
BM0TVeqWsarnrEJ1Re9SZ/e/WwwWMbbyQhxwAiZ+CrAinhZKstjbwIOV9Sm+IzUg
5H0UD8dS6l//C9VVkI5iAuHFTGn5KmHiVPdvTz9p+DkBBmi2LlOGNUBMDDZVlZiL
LqMduAGoWGe+fd2Yg8MS7BA3PJ2ikyDNzq8LnkZ5yI90TOAKp9NjUyMsC1nExyqs
e9MmubaGrGjVmZ6bRIMFXLGG/Ej5PBEt5H5QYApb2ohTw41MXjg0gl8APhg5ZR54
3HoSLQ/RUxGgP7e4NWDPy1SaCVBgeZc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:53:34 2025 by rpki-client