Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f94497-0730-341d-8b3f-46bab3e062ae.roa
File:                     46f94497-0730-341d-8b3f-46bab3e062ae.roa (raw, json)
Hash identifier:          c/ZJ/u31Z4iqeh6QtapZKDkwA+fJiV1/oYVnqcy+L/0=
Subject key identifier:   8E:4C:6A:C2:6C:44:5E:B6:02:42:B1:32:84:B3:EB:27:4F:1B:10:7A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858493F5D22B3984B21BC3D32D3A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f94497-0730-341d-8b3f-46bab3e062ae.roa
Signing time:             Thu 20 Mar 2025 05:37:24 +0000
ROA not before:           Thu 20 Mar 2025 05:37:24 +0000
ROA not after:            Wed 18 Jun 2025 05:37:24 +0000
asID:                     214059
IP address blocks:        104.37.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3f:5d:22:b3:98:4b:21:bc:3d:32:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 20 05:37:24 2025 GMT
            Not After : Jun 18 05:37:24 2025 GMT
        Subject: CN=7c790bcb-aed0-4290-9294-f03d1bb42e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:cd:38:7b:6c:b3:e0:a4:7b:c1:02:5a:f9:
                    ad:c1:f7:c5:d5:ff:76:a4:1f:ae:30:24:7c:95:64:
                    92:ae:55:4c:d0:92:24:e1:85:61:72:23:a2:04:aa:
                    7c:a6:01:4d:91:28:68:36:d4:dc:2b:b8:d6:99:72:
                    3c:5c:b1:a5:cc:48:64:a7:a6:a6:db:e5:d8:ce:b8:
                    a0:19:54:56:5c:fe:f1:45:ce:81:d5:45:5d:e2:c4:
                    77:89:8d:3a:2b:4b:ad:b2:e2:c2:9c:88:ae:ab:af:
                    e4:49:30:3a:2b:5f:99:ed:5a:a3:b0:97:8c:ae:d6:
                    14:1d:95:33:c6:6e:58:a5:1c:b9:69:cd:ec:20:72:
                    40:2a:7b:38:cf:6d:4a:c8:85:fb:27:6a:1d:ea:c9:
                    04:22:80:54:5b:50:d5:ed:c8:34:b6:0c:a1:6b:72:
                    dc:64:23:c7:f6:df:8e:ae:aa:6a:5e:fc:03:bd:3b:
                    52:a2:b6:5f:34:7d:0e:68:62:ab:0d:cd:1f:89:26:
                    c5:ac:a0:f4:b2:3a:40:d0:49:1d:4f:5e:e6:49:0b:
                    83:ce:86:4e:86:20:bb:d9:da:15:21:23:25:4f:5b:
                    33:05:1d:fb:3f:c2:59:be:f9:1d:81:48:55:37:bd:
                    e2:09:c0:20:de:3d:70:ac:87:c9:27:d6:f9:aa:eb:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:6A:C2:6C:44:5E:B6:02:42:B1:32:84:B3:EB:27:4F:1B:10:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f94497-0730-341d-8b3f-46bab3e062ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:8d:69:a9:5c:43:b5:5e:33:d7:d6:3b:eb:c9:12:1c:12:
         21:8e:c8:37:56:95:db:e1:91:3f:6a:a2:f2:ba:0b:07:3f:92:
         6f:9c:35:b8:cc:b5:1b:37:43:1a:2d:e9:93:37:25:7e:91:f0:
         05:b6:b2:c7:13:c7:1c:9b:b0:61:72:7e:2c:2b:69:e2:35:dd:
         25:0d:c6:1b:58:30:d0:53:f1:79:77:38:bb:e0:67:db:af:87:
         37:b0:fe:f5:fa:4e:32:d7:99:34:6b:30:75:c8:78:fd:12:27:
         4d:17:3f:ca:90:04:83:1a:13:08:23:a8:31:b1:8c:a4:30:6f:
         30:43:f9:2a:9f:7e:b2:67:0c:b6:fe:53:07:3a:a0:6d:24:75:
         5e:21:51:76:4e:8d:a1:4d:ad:6b:20:98:fc:0c:ff:4f:f3:9f:
         e4:57:44:f4:27:ba:91:f5:60:32:c7:ea:8a:f6:b9:ae:1a:77:
         c2:32:52:15:dd:d7:b2:99:99:ba:30:62:32:34:76:4a:8e:41:
         1e:de:e3:41:5b:90:90:92:67:a8:81:d2:fc:57:b7:3d:04:65:
         b0:44:a7:ac:01:cc:49:15:da:91:78:27:d4:76:78:84:2f:17:
         a1:2e:e7:54:f4:42:af:e2:86:12:bd:1b:48:aa:50:ed:d3:ef:
         b4:b9:a5:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk/XSKzmEshvD0y06AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMyMDA1MzcyNFoXDTI1MDYxODA1MzcyNFowLzEtMCsGA1UEAxMk
N2M3OTBiY2ItYWVkMC00MjkwLTkyOTQtZjAzZDFiYjQyZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hDNOHtss+Cke8ECWvmtwffF1f92pB+uMCR8
lWSSrlVM0JIk4YVhciOiBKp8pgFNkShoNtTcK7jWmXI8XLGlzEhkp6am2+XYzrig
GVRWXP7xRc6B1UVd4sR3iY06K0utsuLCnIiuq6/kSTA6K1+Z7VqjsJeMrtYUHZUz
xm5YpRy5ac3sIHJAKns4z21KyIX7J2od6skEIoBUW1DV7cg0tgyha3LcZCPH9t+O
rqpqXvwDvTtSorZfNH0OaGKrDc0fiSbFrKD0sjpA0EkdT17mSQuDzoZOhiC72doV
ISMlT1szBR37P8JZvvkdgUhVN73iCcAg3j1wrIfJJ9b5quuYywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5MasJsRF62AkKxMoSz6ydPGxB6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDZmOTQ0OTctMDczMC0z
NDFkLThiM2YtNDZiYWIzZTA2MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAudjWmpXEO1XjPX1jvryRIcEiGOyDdWldvhkT9qovK6Cwc/km+cNbjM
tRs3Qxot6ZM3JX6R8AW2sscTxxybsGFyfiwraeI13SUNxhtYMNBT8Xl3OLvgZ9uv
hzew/vX6TjLXmTRrMHXIeP0SJ00XP8qQBIMaEwgjqDGxjKQwbzBD+SqffrJnDLb+
Uwc6oG0kdV4hUXZOjaFNrWsgmPwM/0/zn+RXRPQnupH1YDLH6or2ua4ad8IyUhXd
17KZmbowYjI0dkqOQR7e40FbkJCSZ6iB0vxXtz0EZbBEp6wBzEkV2pF4J9R2eIQv
F6Eu51T0Qq/ihhK9G0iqUO3T77S5pYE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:50 2025 by rpki-client