Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43050c31-6ae1-3a75-ba89-c993bebb063e.roa
File:                     43050c31-6ae1-3a75-ba89-c993bebb063e.roa (raw, json)
Hash identifier:          4Ptg3asqnMSA8obMzoxT9d1V5gYlvN2Ka0cNZdXRs60=
Subject key identifier:   DE:D3:22:FF:FA:EE:90:35:05:E9:C6:5C:C9:CF:F0:16:62:91:D7:81
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858495529480111CBCA167A96FA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43050c31-6ae1-3a75-ba89-c993bebb063e.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     262287
IP address blocks:        104.252.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:48:01:11:cb:ca:16:7a:96:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=64b16d13-3183-41e3-aaa6-4cc24505f91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:9a:53:fc:29:b8:e6:4f:0b:43:de:9c:d3:
                    7c:c1:4f:30:9a:17:3a:70:dc:14:65:91:30:a1:ac:
                    9d:7f:1d:23:08:1f:41:18:9a:05:04:ca:f0:d3:78:
                    d6:c2:e7:f4:59:08:91:7b:e1:1f:30:e4:e1:7d:3b:
                    d3:1e:1e:98:a2:a9:b2:7c:e4:e1:a6:5f:46:98:c7:
                    48:bf:4a:89:8d:1b:cf:d9:0f:d7:44:bb:f1:99:08:
                    97:22:0e:ec:95:0a:90:bf:a5:51:47:fb:07:11:76:
                    e4:0c:34:86:3a:4f:41:8e:15:f7:ca:d2:be:85:6a:
                    dc:83:11:11:04:71:5a:bc:93:9f:35:4c:a5:65:f2:
                    70:2d:93:4e:4f:e6:2b:45:3e:68:ec:76:99:90:39:
                    02:08:33:da:83:f0:84:01:0f:f6:e1:44:8e:0d:02:
                    e9:6a:ab:82:52:47:c2:e8:83:7f:b2:3e:0e:ca:9c:
                    70:2a:95:94:44:71:37:33:26:d5:84:a5:45:89:ab:
                    18:f1:03:18:23:fb:21:72:fd:60:d2:f0:07:5c:82:
                    e8:e4:6c:17:a5:0e:4a:51:10:6c:fe:2e:d6:b0:0c:
                    ab:8e:01:02:3e:47:f4:b6:8e:64:84:08:82:f6:e7:
                    1e:67:68:3c:f7:7b:57:4b:47:e4:6a:b4:82:8c:69:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D3:22:FF:FA:EE:90:35:05:E9:C6:5C:C9:CF:F0:16:62:91:D7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43050c31-6ae1-3a75-ba89-c993bebb063e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:74:4e:e3:fe:0b:64:f8:90:f6:ba:81:6b:61:d7:ea:97:
         d9:40:bd:6d:b6:97:97:a3:8e:de:59:58:54:31:fc:f2:ac:a2:
         ec:81:46:43:a6:55:8c:a5:72:e2:af:12:2a:d1:f4:81:1a:28:
         04:11:64:4e:23:ce:8c:ca:ff:76:11:b9:c4:f7:ce:e3:31:7f:
         95:72:ae:8f:7b:39:4b:4c:05:67:76:a2:35:d2:57:ff:04:33:
         fd:d9:22:65:78:cc:b5:89:f0:5a:b6:2c:44:77:95:a7:12:7b:
         d3:7a:43:9d:8d:98:c3:eb:0c:50:c5:fc:09:77:df:af:2c:a8:
         17:1a:12:19:e5:4b:56:e6:ed:53:16:ae:d7:57:38:19:25:31:
         12:5f:85:c3:a9:a1:6a:b1:37:4c:51:2a:bf:aa:4b:57:9a:e2:
         22:62:f3:8e:b7:e7:44:5a:50:3a:69:cc:be:03:f4:31:15:49:
         f4:83:f8:d8:77:45:66:34:66:d1:a0:78:16:96:c3:5f:55:70:
         13:23:51:16:64:52:8b:45:f4:25:7c:df:d6:06:ce:18:01:05:
         ca:17:cf:7a:28:05:8c:5b:78:ea:27:c2:0e:aa:fa:ec:09:cf:
         ea:9e:37:83:1c:89:08:28:70:12:d6:89:53:3e:29:5a:df:63:
         5f:b2:ee:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKUgBEcvKFnqW+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
NjRiMTZkMTMtMzE4My00MWUzLWFhYTYtNGNjMjQ1MDVmOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigKaU/wpuOZPC0PenNN8wU8wmhc6cNwUZZEw
oaydfx0jCB9BGJoFBMrw03jWwuf0WQiRe+EfMOThfTvTHh6YoqmyfOThpl9GmMdI
v0qJjRvP2Q/XRLvxmQiXIg7slQqQv6VRR/sHEXbkDDSGOk9BjhX3ytK+hWrcgxER
BHFavJOfNUylZfJwLZNOT+YrRT5o7HaZkDkCCDPag/CEAQ/24USODQLpaquCUkfC
6IN/sj4OypxwKpWURHE3MybVhKVFiasY8QMYI/shcv1g0vAHXILo5GwXpQ5KURBs
/i7WsAyrjgECPkf0to5khAiC9uceZ2g893tXS0fkarSCjGkIBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7TIv/67pA1BenGXMnP8BZikdeBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDMwNTBjMzEtNmFlMS0z
YTc1LWJhODktYzk5M2JlYmIwNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzHdE7j/gtk+JD2uoFrYdfql9lAvW22l5ejjt5ZWFQx/PKsouyBRkOm
VYylcuKvEirR9IEaKAQRZE4jzozK/3YRucT3zuMxf5Vyro97OUtMBWd2ojXSV/8E
M/3ZImV4zLWJ8Fq2LER3lacSe9N6Q52NmMPrDFDF/Al3368sqBcaEhnlS1bm7VMW
rtdXOBklMRJfhcOpoWqxN0xRKr+qS1ea4iJi846350RaUDppzL4D9DEVSfSD+Nh3
RWY0ZtGgeBaWw19VcBMjURZkUotF9CV839YGzhgBBcoXz3ooBYxbeOonwg6q+uwJ
z+qeN4MciQgocBLWiVM+KVrfY1+y7k0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:01:31 2025 by rpki-client