Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b48a2709-9751-341b-ae7d-08b94fa030a2.roa
File:                     b48a2709-9751-341b-ae7d-08b94fa030a2.roa (raw, json)
Hash identifier:          fGuDJ+h0VW5eqj0pZlGvNw7MOxUNpGiA/hqR6kUHMLY=
Subject key identifier:   27:AF:27:1A:45:DF:D7:7F:C1:BD:82:5E:57:68:EB:CA:6E:70:A5:A4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848BFEB95176D0E69A904FC0800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b48a2709-9751-341b-ae7d-08b94fa030a2.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     3561
IP address blocks:        104.253.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:95:17:6d:0e:69:a9:04:fc:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=42761759-723a-4319-824b-60f81a7520e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:45:b2:04:bd:78:5e:8a:69:2f:12:03:20:
                    d9:28:58:4a:6d:73:ef:62:23:e1:07:c7:fa:aa:34:
                    72:ad:11:ce:f1:13:ce:57:00:cb:86:f6:c9:0f:94:
                    ac:e4:82:57:e4:12:e3:b2:2c:8c:a8:c9:6d:ac:f3:
                    c3:06:c2:5d:ea:1a:f5:63:16:09:3e:b2:49:0c:7c:
                    3c:23:d6:ae:11:51:9b:df:3d:6c:00:11:c0:52:5f:
                    25:49:cf:72:a0:06:3d:5c:08:2b:d1:fa:10:f4:6e:
                    f5:9f:d0:f0:01:af:96:8c:2b:53:2d:e7:97:45:6d:
                    5b:14:8c:a6:db:35:b5:f0:4e:00:f3:65:9a:ec:6d:
                    66:ea:30:b1:34:41:ea:e6:95:99:c3:85:d9:5f:8f:
                    47:84:b6:c0:3a:94:36:10:17:e3:17:b1:32:6c:d3:
                    52:3e:92:69:b7:e0:e0:73:57:b9:08:66:45:e5:d7:
                    32:c8:8e:9f:5f:09:14:62:0f:b7:0a:0c:68:36:4b:
                    b3:16:4b:b9:c5:47:83:3b:34:d3:1d:51:7e:25:ea:
                    90:e0:98:c9:a2:70:02:8e:1b:26:ac:76:59:88:b3:
                    7c:26:5d:9a:cd:ed:5b:13:aa:02:5f:50:3f:b3:17:
                    ae:2a:d0:9e:a6:24:3f:6b:85:0b:58:56:ca:91:0f:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AF:27:1A:45:DF:D7:7F:C1:BD:82:5E:57:68:EB:CA:6E:70:A5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b48a2709-9751-341b-ae7d-08b94fa030a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:41:70:f1:1e:74:14:68:cc:48:bd:53:12:15:03:70:74:
         94:66:9f:13:77:75:07:17:4b:ce:3f:91:84:65:2f:7b:20:f6:
         81:e6:17:53:b1:28:4b:96:94:5c:7f:05:c9:19:71:85:d8:6e:
         97:51:7d:83:5f:08:05:15:98:41:9d:50:f9:15:f1:11:33:5b:
         3d:d8:55:36:df:51:7e:ae:02:3f:d6:4b:89:c7:8a:9f:81:d7:
         07:ee:68:7d:a2:7c:d5:a9:95:73:ae:c4:1a:83:2d:e9:45:5d:
         38:02:dd:14:e6:90:10:b6:ee:e8:1e:c4:88:bd:14:7f:d5:ad:
         36:cc:03:e8:56:2d:45:a6:93:21:92:68:69:3b:53:6d:51:60:
         2b:2e:74:98:f1:db:4b:b0:60:18:ba:b2:22:b9:2a:20:18:f3:
         4c:9c:d2:ae:74:51:e0:9a:16:54:69:b6:82:e9:be:a2:98:ec:
         21:c1:ad:84:5d:5d:8d:38:2a:62:dd:1d:b9:7e:63:83:6d:ce:
         51:de:8a:9b:f5:89:2f:c0:bc:e0:d1:74:fe:f3:bd:77:32:74:
         dd:e3:66:40:ce:b1:16:d9:20:5e:a9:29:54:af:90:7e:75:a5:
         ad:a1:30:e4:cd:00:fb:25:6f:53:f1:79:6e:55:52:50:ed:38:
         4c:17:5c:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65UXbQ5pqQT8CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NDI3NjE3NTktNzIzYS00MzE5LTgyNGItNjBmODFhNzUyMGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0VFsgS9eF6KaS8SAyDZKFhKbXPvYiPhB8f6
qjRyrRHO8RPOVwDLhvbJD5Ss5IJX5BLjsiyMqMltrPPDBsJd6hr1YxYJPrJJDHw8
I9auEVGb3z1sABHAUl8lSc9yoAY9XAgr0foQ9G71n9DwAa+WjCtTLeeXRW1bFIym
2zW18E4A82Wa7G1m6jCxNEHq5pWZw4XZX49HhLbAOpQ2EBfjF7EybNNSPpJpt+Dg
c1e5CGZF5dcyyI6fXwkUYg+3CgxoNkuzFku5xUeDOzTTHVF+JeqQ4JjJonACjhsm
rHZZiLN8Jl2aze1bE6oCX1A/sxeuKtCepiQ/a4ULWFbKkQ+K4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCevJxpF39d/wb2CXldo68pucKWkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjQ4YTI3MDktOTc1MS0z
NDFiLWFlN2QtMDhiOTRmYTAzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACb2QXDxHnQUaMxIvVMSFQNwdJRmnxN3dQcXS84/kYRlL3sg9oHmF1Ox
KEuWlFx/BckZcYXYbpdRfYNfCAUVmEGdUPkV8REzWz3YVTbfUX6uAj/WS4nHip+B
1wfuaH2ifNWplXOuxBqDLelFXTgC3RTmkBC27ugexIi9FH/VrTbMA+hWLUWmkyGS
aGk7U21RYCsudJjx20uwYBi6siK5KiAY80yc0q50UeCaFlRptoLpvqKY7CHBrYRd
XY04KmLdHbl+Y4NtzlHeipv1iS/AvODRdP7zvXcydN3jZkDOsRbZIF6pKVSvkH51
pa2hMOTNAPslb1PxeW5VUlDtOEwXXH0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:08 2025 by rpki-client