Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3cba13d0-d98d-3d44-a73b-7b121f0b76f3.roa
File:                     3cba13d0-d98d-3d44-a73b-7b121f0b76f3.roa (raw, json)
Hash identifier:          RUbsBibjmxqXswtZk6IfGJf/p/sqbxkFSCfUX6SnYBw=
Subject key identifier:   D2:13:96:15:85:11:C1:38:54:28:E3:93:E0:35:A3:D3:36:98:F6:4D
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848F4F69E1C825959D0C8665DC0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3cba13d0-d98d-3d44-a73b-7b121f0b76f3.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     8560
IP address blocks:        104.219.40.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9e:1c:82:59:59:d0:c8:66:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=7873583e-6ed8-4a72-86ea-9254763c31ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:c2:f2:ac:75:10:4f:5c:17:09:07:fe:66:
                    c9:9a:ff:66:37:b4:57:a1:a0:67:13:f9:28:80:5e:
                    a5:d6:17:be:e1:51:7e:d7:e5:43:87:48:93:00:86:
                    03:a2:d7:6d:cb:4b:b6:bc:da:3d:05:1a:22:56:7f:
                    de:37:67:80:11:f0:d5:c2:0a:ab:12:41:3a:ae:ef:
                    fd:04:5e:94:a5:f8:1d:8f:0a:0f:48:45:ff:43:8a:
                    12:eb:3a:0d:26:6d:32:87:b7:04:e3:55:e8:f2:df:
                    5e:a2:15:7e:e6:46:ee:ee:75:69:86:e0:9f:f2:b6:
                    be:61:05:6e:e7:8e:60:6c:9e:17:13:5e:44:e2:d1:
                    d2:f3:be:d2:0c:74:75:c6:d9:fc:0b:73:78:d2:34:
                    03:1b:0d:3e:86:91:90:eb:8b:86:4d:f1:40:e1:a8:
                    e7:97:7b:f2:b0:6f:f6:5a:ee:59:23:f8:37:1a:30:
                    09:e0:e8:0d:5e:bc:5a:3f:77:8f:46:ba:8d:ee:c0:
                    69:c6:f2:62:cb:f6:60:e2:2c:2c:3a:bf:22:3f:1d:
                    6c:dd:b3:49:05:a6:5f:ff:9f:a6:60:e5:19:40:34:
                    ca:67:76:2f:51:6b:40:f2:48:89:4b:f5:26:c2:ca:
                    32:da:df:e0:ef:2c:37:15:56:d9:9d:2e:27:d4:51:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:96:15:85:11:C1:38:54:28:E3:93:E0:35:A3:D3:36:98:F6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3cba13d0-d98d-3d44-a73b-7b121f0b76f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:81:57:26:7a:5f:c1:d7:e1:22:21:e9:3b:a3:e7:1c:c8:81:
         f5:61:a7:00:fd:0c:04:fe:87:81:38:5f:52:4d:0f:d6:82:7e:
         98:e3:b8:4a:aa:fd:84:64:42:3e:47:9b:1a:ba:94:a0:24:c7:
         58:cc:67:ef:d2:28:96:63:96:a8:79:2e:64:4a:3d:23:ec:48:
         2b:58:fd:09:f8:0d:95:67:b5:d4:db:b7:b8:33:62:48:33:b2:
         9e:6a:c0:56:59:55:19:8d:77:a8:55:0d:04:f7:3c:f4:18:74:
         6c:ff:a8:33:7f:cb:41:76:51:1a:f0:2e:5d:dd:e0:60:d8:6f:
         fb:09:8b:dc:fa:1f:7d:b8:13:d2:33:63:0d:1f:0d:04:9d:e2:
         22:63:06:8a:2d:e9:e5:78:e6:60:1c:b2:df:48:c9:cd:f6:45:
         99:42:41:53:d0:d3:16:d4:13:5e:f3:da:b0:ee:12:06:db:1c:
         b3:6f:e2:8b:29:e5:73:22:cb:a4:0b:b3:0f:ea:d7:bd:2f:87:
         10:24:5f:23:f2:04:dd:cb:00:b0:84:1a:ab:77:0a:a4:1a:a1:
         31:44:a9:d6:32:8c:3d:58:a2:af:47:e7:a8:66:a8:89:ae:68:
         6d:78:81:48:18:c9:94:ab:e8:76:86:ab:91:ea:de:0e:6f:bb:
         4e:cf:d6:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09p4cgllZ0MhmXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
Nzg3MzU4M2UtNmVkOC00YTcyLTg2ZWEtOTI1NDc2M2MzMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoHC8qx1EE9cFwkH/mbJmv9mN7RXoaBnE/ko
gF6l1he+4VF+1+VDh0iTAIYDotdty0u2vNo9BRoiVn/eN2eAEfDVwgqrEkE6ru/9
BF6UpfgdjwoPSEX/Q4oS6zoNJm0yh7cE41Xo8t9eohV+5kbu7nVphuCf8ra+YQVu
545gbJ4XE15E4tHS877SDHR1xtn8C3N40jQDGw0+hpGQ64uGTfFA4ajnl3vysG/2
Wu5ZI/g3GjAJ4OgNXrxaP3ePRrqN7sBpxvJiy/Zg4iwsOr8iPx1s3bNJBaZf/5+m
YOUZQDTKZ3YvUWtA8kiJS/Umwsoy2t/g7yw3FVbZnS4n1FEU1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNITlhWFEcE4VCjjk+A1o9M2mPZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvM2NiYTEzZDAtZDk4ZC0z
ZDQ0LWE3M2ItN2IxMjFmMGI3NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCBVyZ6X8HX4SIh6Tuj5xzIgfVhpwD9DAT+h4E4X1JND9aCfpjjuEqq
/YRkQj5Hmxq6lKAkx1jMZ+/SKJZjlqh5LmRKPSPsSCtY/Qn4DZVntdTbt7gzYkgz
sp5qwFZZVRmNd6hVDQT3PPQYdGz/qDN/y0F2URrwLl3d4GDYb/sJi9z6H324E9Iz
Yw0fDQSd4iJjBoot6eV45mAcst9Iyc32RZlCQVPQ0xbUE17z2rDuEgbbHLNv4osp
5XMiy6QLsw/q170vhxAkXyPyBN3LALCEGqt3CqQaoTFEqdYyjD1Yoq9H56hmqImu
aG14gUgYyZSr6HaGq5Hq3g5vu07P1ig=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:08 2025 by rpki-client