Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ccb6724e-358d-34c5-864c-540ef07608a9.roa
File:                     ccb6724e-358d-34c5-864c-540ef07608a9.roa (raw, json)
Hash identifier:          vkaECi/fvvts0E5vL/LLeRVDDYqFZFHql5qN6AYdUv8=
Subject key identifier:   EF:40:98:0E:41:D5:A6:16:BA:EB:E2:9E:DA:17:01:45:94:B9:4B:1C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F657904C3A6534ACC07B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ccb6724e-358d-34c5-864c-540ef07608a9.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:57:90:4c:3a:65:34:ac:c0:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=7eb5cea1-c2df-47e3-80fd-588604032869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c8:9f:f5:84:f8:92:4d:53:2b:ec:90:19:23:
                    18:ad:15:a2:92:fd:78:90:da:c6:b9:b3:7c:86:78:
                    13:62:f1:df:70:0e:28:23:30:e3:0d:4a:a0:eb:fd:
                    77:29:fd:42:38:cf:bf:4c:eb:6b:7d:cb:ee:58:2d:
                    8d:c2:10:2d:4f:22:02:fe:ca:cf:01:10:a8:52:86:
                    a2:e9:87:75:7e:46:19:53:0d:6f:9d:66:d3:26:6c:
                    f8:18:50:a4:24:de:47:8f:5a:9c:f3:34:a0:19:99:
                    44:d8:9a:4e:84:33:f4:46:8e:72:14:34:87:18:1c:
                    23:93:a9:3f:1d:a4:41:89:66:a9:16:39:c2:a5:f3:
                    f4:25:40:31:f6:2e:3f:f0:f6:a6:37:9d:0c:79:d8:
                    90:e7:83:0a:4b:99:b6:b5:80:27:99:53:53:65:2f:
                    94:6c:be:f2:00:1d:47:75:64:5d:9c:47:d7:94:0b:
                    05:12:0e:a9:ce:5f:77:be:19:7e:88:0d:b6:f4:da:
                    dd:af:11:15:a7:85:83:8a:b2:ce:dd:59:b1:5a:25:
                    40:f6:6b:92:f3:0a:97:79:6c:4a:06:14:e9:b1:24:
                    f8:11:01:71:2d:bd:35:f0:3a:1a:89:2b:2e:6c:98:
                    dc:57:bf:19:29:6e:8f:5b:54:25:70:66:2b:98:0a:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:98:0E:41:D5:A6:16:BA:EB:E2:9E:DA:17:01:45:94:B9:4B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ccb6724e-358d-34c5-864c-540ef07608a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:64:f1:90:d0:72:d4:d3:07:38:a7:e8:ad:86:46:16:bb:f7:
         05:9a:04:4e:e1:18:e9:56:76:b9:9f:05:26:ea:0e:df:94:76:
         07:fc:d4:7c:c4:62:db:23:11:7e:05:f2:54:cd:50:9f:c0:05:
         c4:a4:07:22:7e:b8:e1:17:fc:f3:29:d7:81:af:85:99:8e:3e:
         fb:95:0a:69:25:c1:04:8b:a8:5d:f8:a2:ba:fa:18:69:a2:12:
         c3:3c:c1:4a:88:91:a7:05:15:13:a4:3d:fa:75:6e:66:b5:27:
         95:1e:a7:6f:55:5e:e4:07:75:13:29:da:e5:29:bf:e1:ee:1a:
         98:b5:19:57:dd:bb:76:02:d6:08:a3:7f:46:7a:3b:26:85:30:
         0c:7a:63:e3:b1:68:50:a0:a4:69:a0:d1:45:46:ea:43:89:25:
         9e:19:0d:ed:5b:7c:25:26:1d:ab:b5:f4:e4:49:f7:82:a5:75:
         b5:a4:36:c5:27:1c:50:53:0d:f7:18:23:15:49:00:b7:5d:f6:
         81:02:79:03:34:00:19:47:58:66:8b:c6:72:b4:09:b6:d6:a9:
         85:6e:31:19:34:bf:fa:49:60:79:3e:3c:f5:41:bb:41:7a:84:
         3e:4c:7c:55:6a:66:69:c2:2b:4f:af:e3:ba:99:64:74:b0:0b:
         aa:dd:d2:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9leQTDplNKzAewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
N2ViNWNlYTEtYzJkZi00N2UzLTgwZmQtNTg4NjA0MDMyODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicif9YT4kk1TK+yQGSMYrRWikv14kNrGubN8
hngTYvHfcA4oIzDjDUqg6/13Kf1COM+/TOtrfcvuWC2NwhAtTyIC/srPARCoUoai
6Yd1fkYZUw1vnWbTJmz4GFCkJN5Hj1qc8zSgGZlE2JpOhDP0Ro5yFDSHGBwjk6k/
HaRBiWapFjnCpfP0JUAx9i4/8PamN50MediQ54MKS5m2tYAnmVNTZS+UbL7yAB1H
dWRdnEfXlAsFEg6pzl93vhl+iA229NrdrxEVp4WDirLO3VmxWiVA9muS8wqXeWxK
BhTpsST4EQFxLb018DoaiSsubJjcV78ZKW6PW1QlcGYrmAqx0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9AmA5B1aYWuuvintoXAUWUuUscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2NiNjcyNGUtMzU4ZC0z
NGM1LTg2NGMtNTQwZWYwNzYwOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVk8ZDQctTTBzin6K2GRha79wWaBE7hGOlWdrmfBSbqDt+Udgf81HzE
YtsjEX4F8lTNUJ/ABcSkByJ+uOEX/PMp14GvhZmOPvuVCmklwQSLqF34orr6GGmi
EsM8wUqIkacFFROkPfp1bma1J5Uep29VXuQHdRMp2uUpv+HuGpi1GVfdu3YC1gij
f0Z6OyaFMAx6Y+OxaFCgpGmg0UVG6kOJJZ4ZDe1bfCUmHau19ORJ94KldbWkNsUn
HFBTDfcYIxVJALdd9oECeQM0ABlHWGaLxnK0CbbWqYVuMRk0v/pJYHk+PPVBu0F6
hD5MfFVqZmnCK0+v47qZZHSwC6rd0rs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:59 2025 by rpki-client