Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aeedf873-b350-3db1-ae75-a82fdf8d2dc5.roa
File:                     aeedf873-b350-3db1-ae75-a82fdf8d2dc5.roa (raw, json)
Hash identifier:          wbxGMub6PK5Xy3Ru3p/Xci/Fmu1jbBQWSacQ0IIb+Q4=
Subject key identifier:   3A:74:C2:4C:62:B5:40:B3:30:AC:91:48:8F:E2:C6:CE:78:73:B3:25
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EC96ABFF751AEF900B13C900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aeedf873-b350-3db1-ae75-a82fdf8d2dc5.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     54600
IP address blocks:        104.165.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:ab:ff:75:1a:ef:90:0b:13:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=bd22e852-e5d3-4537-8b1f-10261e1b2786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:52:ef:2c:35:7f:14:9f:bf:0e:59:d4:6c:
                    ba:3a:2b:e8:28:ed:e8:40:2a:6d:1c:17:8c:be:f4:
                    2d:85:a0:c5:4c:13:84:8d:28:40:68:15:73:5f:d4:
                    e9:69:33:77:09:f1:35:6f:7b:b9:33:0a:f9:ab:7f:
                    ae:aa:3b:77:b5:95:cc:70:fa:7e:a9:24:01:66:2a:
                    96:f9:85:9a:5c:5d:43:19:e5:20:64:39:97:d3:f0:
                    44:ef:be:39:fd:e5:f8:26:ce:49:91:15:4f:bc:72:
                    88:fb:36:a5:b9:57:e3:e3:e6:6e:45:c9:81:ce:b8:
                    97:ea:44:2e:a6:65:51:cb:59:91:47:fb:05:2c:02:
                    35:75:25:f3:1f:5d:f4:48:27:0e:3c:7c:5d:2d:6a:
                    47:1d:f1:76:73:bf:ef:49:9a:f0:ad:02:8d:9b:55:
                    4e:6f:a2:08:cf:64:83:53:94:d7:4c:42:80:5b:89:
                    1f:9c:c5:8f:2f:6b:ee:64:91:f3:55:16:89:ff:4c:
                    79:07:33:e4:98:0c:35:e3:eb:3f:15:9b:d1:9c:86:
                    b9:7e:dc:02:07:c2:11:53:a2:37:28:96:32:dc:60:
                    57:29:b9:cd:d9:09:66:5c:d0:b4:80:19:37:cf:ab:
                    a6:5b:c6:eb:f1:57:b4:53:fa:ed:26:97:a6:79:cc:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:C2:4C:62:B5:40:B3:30:AC:91:48:8F:E2:C6:CE:78:73:B3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aeedf873-b350-3db1-ae75-a82fdf8d2dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8b:2e:02:07:0e:4f:66:b5:76:fc:b8:bc:2f:d4:78:55:98:
         4f:c4:74:b8:42:cc:91:23:f7:12:07:3d:ae:66:2f:44:36:00:
         d0:8e:c2:65:6a:a5:d8:47:d8:1e:cb:45:4d:68:8e:b6:b4:24:
         d5:d2:03:9a:8d:df:e6:81:ad:ca:cf:91:05:f3:07:69:35:6f:
         5e:9d:0f:29:e2:8a:e7:4e:63:96:f9:cb:c0:a6:4a:b6:13:cc:
         f0:94:64:25:1e:8d:b8:7c:53:52:e5:a8:47:e2:8e:c9:a3:ac:
         98:fb:e5:55:55:d4:04:11:94:58:31:d1:38:2e:d8:67:66:e2:
         96:e5:2f:6e:06:56:7e:ca:27:89:da:16:f8:c9:86:69:fe:50:
         f0:02:53:35:cc:f4:e6:5e:25:21:34:f8:67:a8:d7:03:f7:96:
         35:40:30:79:8f:33:bf:a5:d9:47:4b:69:60:8d:86:3a:77:e4:
         1b:43:a7:3f:4e:58:87:36:77:dc:9b:40:d8:e7:84:b4:f1:51:
         64:5b:14:a3:e8:41:56:d5:08:69:4f:a8:ba:59:25:b1:d0:9f:
         d8:e1:86:f6:29:27:81:e9:64:75:ef:40:be:ee:03:cf:07:ce:
         f6:9e:3d:9f:fd:48:cc:b5:8c:37:d5:ba:31:b4:d6:0c:5b:5a:
         b0:46:ac:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqv/dRrvkAsTyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YmQyMmU4NTItZTVkMy00NTM3LThiMWYtMTAyNjFlMWIyNzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZS7yw1fxSfvw5Z1Gy6OivoKO3oQCptHBeM
vvQthaDFTBOEjShAaBVzX9TpaTN3CfE1b3u5Mwr5q3+uqjt3tZXMcPp+qSQBZiqW
+YWaXF1DGeUgZDmX0/BE7745/eX4Js5JkRVPvHKI+zaluVfj4+ZuRcmBzriX6kQu
pmVRy1mRR/sFLAI1dSXzH130SCcOPHxdLWpHHfF2c7/vSZrwrQKNm1VOb6IIz2SD
U5TXTEKAW4kfnMWPL2vuZJHzVRaJ/0x5BzPkmAw14+s/FZvRnIa5ftwCB8IRU6I3
KJYy3GBXKbnN2QlmXNC0gBk3z6umW8br8Ve0U/rtJpemecylNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDp0wkxitUCzMKyRSI/ixs54c7MlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWVlZGY4NzMtYjM1MC0z
ZGIxLWFlNzUtYTgyZmRmOGQyZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKUSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSLLgIHDk9mtXb8uLwv1HhVmE/EdLhCzJEj9xIHPa5mL0Q2ANCOwmVq
pdhH2B7LRU1ojra0JNXSA5qN3+aBrcrPkQXzB2k1b16dDyniiudOY5b5y8CmSrYT
zPCUZCUejbh8U1LlqEfijsmjrJj75VVV1AQRlFgx0Tgu2Gdm4pblL24GVn7KJ4na
FvjJhmn+UPACUzXM9OZeJSE0+Geo1wP3ljVAMHmPM7+l2UdLaWCNhjp35BtDpz9O
WIc2d9ybQNjnhLTxUWRbFKPoQVbVCGlPqLpZJbHQn9jhhvYpJ4HpZHXvQL7uA88H
zvaePZ/9SMy1jDfVujG01gxbWrBGrHg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:17 2025 by rpki-client