Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa
File:                     98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa (raw, json)
Hash identifier:          o0F27aEozYrfRwQmFh8KlfKzfmXFpwL6jb1mBsG/QZw=
Subject key identifier:   1C:54:B6:0D:CF:2E:2D:1F:C0:63:EF:A5:73:2E:23:31:03:78:68:26
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F64A54B9ABF26D7952F200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:4a:54:b9:ab:f2:6d:79:52:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=ae8a72f6-c03d-4a8b-a036-01b8ba5fe9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:c7:1d:a7:d6:a0:aa:01:fe:bd:d8:9c:dd:
                    2c:2f:f3:c3:99:c9:06:aa:0e:d4:92:0c:1c:c1:22:
                    4c:5d:b5:07:55:71:23:78:a1:64:52:94:af:37:4c:
                    6b:5d:51:73:0c:46:ff:76:44:95:2b:4f:56:d6:b9:
                    37:d1:10:d9:a8:74:b4:73:bd:ba:36:cf:cc:f8:79:
                    39:cc:de:24:c2:9b:7f:ab:3f:8b:76:67:3c:51:1b:
                    65:69:02:b0:65:c2:b4:fd:c2:a4:4a:98:fd:af:78:
                    e4:7e:6a:7c:d1:88:da:52:19:7b:1a:cc:a5:25:66:
                    e1:6b:24:71:d5:cf:38:b6:f5:2d:08:db:a3:85:87:
                    90:31:1c:5a:12:67:73:43:95:8b:91:7a:7e:18:69:
                    92:44:fc:e6:9e:2b:f9:a4:4b:5b:f6:15:8f:b5:86:
                    57:e9:9d:a0:a4:5c:8f:06:9f:59:2b:2f:d8:03:90:
                    d9:21:fd:eb:a3:57:9c:37:bd:9a:08:10:d1:30:ce:
                    e0:5d:5b:f8:2c:ab:53:be:a0:63:fa:ad:8a:de:d8:
                    59:ff:6e:3d:42:df:40:ce:bc:36:85:cd:db:52:f4:
                    ce:13:df:7f:81:07:75:4f:05:39:f6:05:1a:89:f1:
                    1e:34:8d:4d:a1:75:86:8d:7d:11:00:a2:5e:a9:db:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:54:B6:0D:CF:2E:2D:1F:C0:63:EF:A5:73:2E:23:31:03:78:68:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:89:0d:5c:76:29:3d:6b:4b:b6:a0:8b:65:78:d7:2f:4b:3b:
         79:38:84:85:ed:11:18:2d:4f:c5:11:70:24:7a:42:36:61:e0:
         a1:b0:93:1a:ed:8c:94:ea:a2:70:b2:a8:3b:a7:08:6d:a4:0c:
         6c:2d:06:12:82:43:28:09:00:1b:64:69:ad:72:19:e7:38:7c:
         75:da:73:f5:9d:0e:d5:e8:e4:bc:e2:50:0b:ce:2f:61:0d:1e:
         b3:57:7e:e5:5e:b0:8f:36:da:23:8a:ff:fa:6e:03:53:27:12:
         76:6b:f3:47:2b:71:58:38:c2:b2:07:dd:b3:b0:16:a3:ae:3e:
         69:06:a1:06:1b:26:74:d9:41:e8:fe:ae:5f:21:29:67:e1:93:
         49:b9:1e:e4:ff:a4:6d:cb:6f:2e:86:3e:9b:60:d1:31:c8:75:
         24:4a:66:2c:44:56:8b:f4:16:7a:1c:da:be:6e:90:1c:8b:11:
         2a:fe:ef:e3:61:40:74:53:83:f4:30:83:1d:02:d9:74:ba:44:
         bf:0c:56:af:e9:a5:4d:01:ea:e8:83:d2:cc:39:d1:fb:f7:46:
         fa:c8:36:1b:8b:9c:1b:31:aa:79:bd:88:0c:06:fd:54:ec:8d:
         4b:00:0e:54:b0:59:c0:dd:44:70:49:65:e9:9c:1b:79:7d:40:
         3e:98:aa:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kpUuavybXlS8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
YWU4YTcyZjYtYzAzZC00YThiLWEwMzYtMDFiOGJhNWZlOWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmLHHafWoKoB/r3YnN0sL/PDmckGqg7Ukgwc
wSJMXbUHVXEjeKFkUpSvN0xrXVFzDEb/dkSVK09W1rk30RDZqHS0c726Ns/M+Hk5
zN4kwpt/qz+Ldmc8URtlaQKwZcK0/cKkSpj9r3jkfmp80YjaUhl7GsylJWbhayRx
1c84tvUtCNujhYeQMRxaEmdzQ5WLkXp+GGmSRPzmniv5pEtb9hWPtYZX6Z2gpFyP
Bp9ZKy/YA5DZIf3ro1ecN72aCBDRMM7gXVv4LKtTvqBj+q2K3thZ/249Qt9Azrw2
hc3bUvTOE99/gQd1TwU59gUaifEeNI1NoXWGjX0RAKJeqdvdtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxUtg3PLi0fwGPvpXMuIzEDeGgmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOThjNmY4YjAtZDI5Zi0z
ZjhmLTkxYzAtY2E0YmY5MzU5Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeJDVx2KT1rS7agi2V41y9LO3k4hIXtERgtT8URcCR6QjZh4KGwkxrt
jJTqonCyqDunCG2kDGwtBhKCQygJABtkaa1yGec4fHXac/WdDtXo5LziUAvOL2EN
HrNXfuVesI822iOK//puA1MnEnZr80crcVg4wrIH3bOwFqOuPmkGoQYbJnTZQej+
rl8hKWfhk0m5HuT/pG3Lby6GPptg0THIdSRKZixEVov0Fnoc2r5ukByLESr+7+Nh
QHRTg/Qwgx0C2XS6RL8MVq/ppU0B6uiD0sw50fv3RvrINhuLnBsxqnm9iAwG/VTs
jUsADlSwWcDdRHBJZemcG3l9QD6Yqq0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:26 2025 by rpki-client