Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c185bfa-ce86-3e46-9032-47ada59150b8.roa
File:                     8c185bfa-ce86-3e46-9032-47ada59150b8.roa (raw, json)
Hash identifier:          rUepFwJf5HkLxZBBioHvhzHIC7UEAtwZDlYyCMmLI0o=
Subject key identifier:   7F:5B:7E:3E:1D:48:59:0B:1A:1C:50:1B:77:7C:48:CE:7D:B3:0F:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848BFEB968553CE849784610500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c185bfa-ce86-3e46-9032-47ada59150b8.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     5650
IP address blocks:        104.165.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:96:85:53:ce:84:97:84:61:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=6de7c8fb-6101-4bb4-b659-cfa3db1a2cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9d:54:78:cd:8d:05:50:9a:0d:5d:f5:b2:31:
                    2e:9a:fa:84:5e:77:3f:fe:05:16:b6:9d:ac:1a:9a:
                    f9:47:03:ec:d7:6d:00:9a:63:74:a5:01:2e:ad:39:
                    d8:c1:99:82:77:8e:25:71:8a:70:2d:29:db:51:fc:
                    37:00:6c:ac:94:87:b0:24:63:99:7a:5b:05:01:22:
                    a8:f5:6c:48:8e:5e:08:f2:12:b2:07:ba:84:a0:04:
                    b5:df:fe:9b:65:dd:59:d5:cd:df:99:29:d7:f5:51:
                    75:f5:29:0b:65:bf:2a:40:c1:4c:43:5c:ec:ef:58:
                    ec:02:8e:da:ef:8b:c9:8f:c7:b1:3f:d4:b1:d8:de:
                    07:0c:aa:2b:b1:f9:1c:5b:38:cd:fa:8c:44:aa:e9:
                    b9:c7:5a:e5:75:09:4d:1f:c6:0c:30:87:f7:7f:b9:
                    ba:46:99:9a:f4:be:c1:f5:d6:a5:0b:a3:7f:e2:5a:
                    76:f3:e6:72:b3:95:c2:bd:4f:89:c9:cf:8a:82:6d:
                    2f:0e:d5:f1:08:a0:2b:62:44:d7:57:83:46:e0:5c:
                    c2:f9:9c:48:18:b6:87:39:e6:1d:be:ce:0a:3c:14:
                    d0:76:ac:75:70:e8:61:92:34:4f:a3:fc:c5:cd:a7:
                    40:a2:6a:a3:0d:6d:89:10:e4:a9:01:14:06:65:7a:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:7E:3E:1D:48:59:0B:1A:1C:50:1B:77:7C:48:CE:7D:B3:0F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c185bfa-ce86-3e46-9032-47ada59150b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:07:f2:7d:0f:03:cd:10:61:ce:84:69:7c:4d:6a:84:ed:88:
         26:0b:65:bb:b0:c5:3f:70:ad:2e:2e:3f:6f:6f:9d:86:82:f5:
         48:46:fe:e4:a8:e7:14:00:be:1a:6e:07:5b:21:65:c5:a5:54:
         3a:86:f7:f4:f5:c8:bd:58:2a:21:21:24:85:24:c1:33:fc:cc:
         de:32:e0:fd:7f:e7:07:57:43:7b:bd:af:92:b6:9c:2e:81:4a:
         66:94:9e:37:e5:d2:78:86:56:23:80:6b:d5:2b:e0:72:52:2b:
         27:b9:4d:06:84:10:fa:03:38:06:10:82:40:a7:2d:53:f6:b2:
         90:52:93:97:6c:16:7b:29:c9:cc:44:6a:2d:cf:7c:2f:c5:4a:
         da:54:65:30:e1:ca:f1:10:12:e0:5b:c0:c7:12:1b:06:56:99:
         b8:c0:49:8b:9f:f5:87:4f:30:c8:28:44:fc:57:ac:9c:30:d6:
         fd:ec:8b:28:6b:7d:19:17:41:4b:c4:4a:31:c0:30:23:d6:46:
         47:31:33:77:a1:08:0f:37:4e:5b:76:a5:72:61:13:26:c5:05:
         97:80:54:17:ba:b3:02:9e:22:2f:fd:da:bb:e5:d8:bb:f2:83:
         a2:22:1d:f7:27:4a:43:44:ea:b9:c3:bf:f1:42:88:9f:be:b0:
         c4:9e:23:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65aFU86El4RhBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NmRlN2M4ZmItNjEwMS00YmI0LWI2NTktY2ZhM2RiMWEyY2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ1UeM2NBVCaDV31sjEumvqEXnc//gUWtp2s
Gpr5RwPs120AmmN0pQEurTnYwZmCd44lcYpwLSnbUfw3AGyslIewJGOZelsFASKo
9WxIjl4I8hKyB7qEoAS13/6bZd1Z1c3fmSnX9VF19SkLZb8qQMFMQ1zs71jsAo7a
74vJj8exP9Sx2N4HDKorsfkcWzjN+oxEqum5x1rldQlNH8YMMIf3f7m6Rpma9L7B
9dalC6N/4lp28+Zys5XCvU+Jyc+Kgm0vDtXxCKArYkTXV4NG4FzC+ZxIGLaHOeYd
vs4KPBTQdqx1cOhhkjRPo/zFzadAomqjDW2JEOSpARQGZXoxmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9bfj4dSFkLGhxQG3d8SM59sw+GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGMxODViZmEtY2U4Ni0z
ZTQ2LTkwMzItNDdhZGE1OTE1MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKVDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMH8n0PA80QYc6EaXxNaoTtiCYLZbuwxT9wrS4uP29vnYaC9UhG/uSo
5xQAvhpuB1shZcWlVDqG9/T1yL1YKiEhJIUkwTP8zN4y4P1/5wdXQ3u9r5K2nC6B
SmaUnjfl0niGViOAa9Ur4HJSKye5TQaEEPoDOAYQgkCnLVP2spBSk5dsFnspycxE
ai3PfC/FStpUZTDhyvEQEuBbwMcSGwZWmbjASYuf9YdPMMgoRPxXrJww1v3siyhr
fRkXQUvESjHAMCPWRkcxM3ehCA83Tlt2pXJhEybFBZeAVBe6swKeIi/92rvl2Lvy
g6IiHfcnSkNE6rnDv/FCiJ++sMSeIxE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:10:34 2025 by rpki-client