Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3c14a2ab-091d-38de-8d6f-00406b989839.roa
File:                     3c14a2ab-091d-38de-8d6f-00406b989839.roa (raw, json)
Hash identifier:          NvdpltFOBtOk7eHA/K7dbqZN1dbritxYCxLwFPmkTtU=
Subject key identifier:   95:B0:14:1D:34:C3:E1:25:23:F3:94:A9:9B:0A:C1:52:87:4B:50:A5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F4B55A26A406D1407600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3c14a2ab-091d-38de-8d6f-00406b989839.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f4:b5:5a:26:a4:06:d1:40:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=e44b89db-92ff-483c-8685-5373fe72a22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:db:3d:29:6d:38:39:4d:8d:2e:63:4c:15:
                    6f:20:ce:09:58:e6:18:d0:06:a5:14:e1:de:a5:0b:
                    ef:b5:ea:39:14:e4:29:58:5a:7e:3f:eb:0f:3b:de:
                    d2:c4:c1:8a:a7:4c:06:7d:78:c3:4a:9b:28:60:07:
                    fe:29:7f:c9:24:d4:66:92:7b:56:6f:f5:a5:ac:3f:
                    82:7b:01:93:cd:c3:36:50:b9:73:63:64:c5:d7:36:
                    b7:c3:30:ec:51:a3:53:b0:49:3a:f9:a9:f2:be:3c:
                    75:01:8e:23:13:b0:e9:dc:f0:48:b1:f4:b0:37:e6:
                    ec:89:b0:46:93:1d:90:d1:89:85:e0:56:aa:f4:a2:
                    fe:20:37:4f:9c:9b:2d:03:d9:55:aa:9f:cb:36:36:
                    0c:ac:a5:6b:d5:d5:e4:6d:6e:32:d3:4d:20:4a:ae:
                    bb:5b:d4:25:30:77:be:12:9b:87:d9:f1:b0:61:65:
                    aa:00:30:f1:66:d4:9e:ea:9c:70:de:83:27:85:87:
                    20:c3:6d:fa:62:b5:a9:4d:b8:87:d6:70:7a:01:79:
                    0b:42:dc:d6:f3:36:c0:57:90:ba:47:f3:8f:72:7f:
                    96:cc:be:a3:f1:63:75:85:71:41:dc:52:9f:37:25:
                    7d:fe:61:38:e9:56:47:c8:3e:a6:2b:84:94:25:71:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:14:1D:34:C3:E1:25:23:F3:94:A9:9B:0A:C1:52:87:4B:50:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3c14a2ab-091d-38de-8d6f-00406b989839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:23:31:49:3f:01:43:d0:72:87:30:37:99:eb:9a:9b:20:
         66:91:8e:22:91:c2:e9:7b:e0:cb:18:9f:8c:7b:43:75:96:a0:
         21:a9:fd:a7:24:36:cd:83:91:48:28:3a:35:7c:9d:d5:28:a7:
         3d:8a:72:0b:71:a5:68:2e:61:9d:9e:1a:72:56:66:8a:95:57:
         06:05:39:90:97:8c:b1:f3:0c:51:a1:01:ff:34:0c:e1:fb:28:
         d1:6c:70:e8:b9:fc:4b:e9:37:88:4c:34:83:64:f3:9b:92:0f:
         c0:4e:81:f2:79:9a:55:63:90:bc:e8:cb:17:57:bc:3d:a2:31:
         37:d5:03:c2:d3:34:ac:f3:ad:0d:8e:18:5c:b1:a8:ce:ef:27:
         cd:d6:f3:3a:fa:6d:0a:00:c8:c5:a3:0d:56:16:6d:4e:2d:76:
         e3:c7:57:af:dc:a2:5b:7b:0e:e3:7f:6f:2b:f9:40:60:00:41:
         bb:ef:67:06:b5:ba:fb:0f:7a:86:5f:6c:59:d6:ca:b9:fa:b2:
         82:0e:bb:71:a0:e3:0f:f8:76:34:ec:92:67:d8:9b:26:35:ce:
         45:4e:f9:81:b9:1a:11:fb:54:85:b0:71:b3:2d:a5:9c:20:ac:
         27:84:17:10:1a:0e:96:23:b1:39:97:de:84:45:c3:b8:1e:be:
         16:19:85:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPS1WiakBtFAdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
ZTQ0Yjg5ZGItOTJmZi00ODNjLTg2ODUtNTM3M2ZlNzJhMjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10TbPSltODlNjS5jTBVvIM4JWOYY0AalFOHe
pQvvteo5FOQpWFp+P+sPO97SxMGKp0wGfXjDSpsoYAf+KX/JJNRmkntWb/WlrD+C
ewGTzcM2ULlzY2TF1za3wzDsUaNTsEk6+anyvjx1AY4jE7Dp3PBIsfSwN+bsibBG
kx2Q0YmF4Faq9KL+IDdPnJstA9lVqp/LNjYMrKVr1dXkbW4y000gSq67W9QlMHe+
EpuH2fGwYWWqADDxZtSe6pxw3oMnhYcgw236YrWpTbiH1nB6AXkLQtzW8zbAV5C6
R/OPcn+WzL6j8WN1hXFB3FKfNyV9/mE46VZHyD6mK4SUJXHQXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWwFB00w+ElI/OUqZsKwVKHS1ClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2MxNGEyYWItMDkxZC0z
OGRlLThkNmYtMDA0MDZiOTg5ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAComIzFJPwFD0HKHMDeZ65qbIGaRjiKRwul74MsYn4x7Q3WWoCGp/ack
Ns2DkUgoOjV8ndUopz2KcgtxpWguYZ2eGnJWZoqVVwYFOZCXjLHzDFGhAf80DOH7
KNFscOi5/EvpN4hMNINk85uSD8BOgfJ5mlVjkLzoyxdXvD2iMTfVA8LTNKzzrQ2O
GFyxqM7vJ83W8zr6bQoAyMWjDVYWbU4tduPHV6/colt7DuN/byv5QGAAQbvvZwa1
uvsPeoZfbFnWyrn6soIOu3Gg4w/4djTskmfYmyY1zkVO+YG5GhH7VIWwcbMtpZwg
rCeEFxAaDpYjsTmX3oRFw7gevhYZhYw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:35 2025 by rpki-client