Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/bc7d9653-05e4-31f5-8080-164d89fc9121.roa
File:                     bc7d9653-05e4-31f5-8080-164d89fc9121.roa (raw, json)
Hash identifier:          t2ACmtPU1LShKQar5OV3SYP+mkJrA1W13BwxzwSeHQc=
Subject key identifier:   71:D3:67:54:0C:A6:6A:2D:63:08:BB:93:A9:38:20:62:55:75:A0:1E
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F4328584905B6A881797EA556B656EC80
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/bc7d9653-05e4-31f5-8080-164d89fc9121.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     393780
IP address blocks:        104.245.17.0/24 maxlen: 24
                          104.245.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:a8:81:79:7e:a5:56:b6:56:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=6ee8ca8f-44d3-4107-a294-ec13690be48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:6d:92:49:a8:7b:07:c7:1d:39:d2:b5:b5:
                    ec:4b:c3:f5:af:90:38:d1:32:47:84:26:0c:f7:57:
                    32:58:ac:aa:72:1e:75:75:a2:d9:d7:e6:7f:94:ed:
                    32:64:0b:e3:4e:e1:e1:e9:2b:58:41:75:c0:df:20:
                    07:1f:da:7b:3d:75:06:8a:f7:46:8e:bb:38:c6:e3:
                    4d:42:13:a3:9a:e8:ec:df:15:03:e6:10:2b:e0:df:
                    d5:3c:8e:88:81:10:2d:18:82:1b:8f:42:13:27:21:
                    8c:0a:5f:a0:b6:6a:0f:72:c3:82:df:c3:91:ff:a3:
                    b8:70:d9:d9:75:50:ca:7f:ae:8f:15:e1:46:09:79:
                    4f:1d:64:d9:0d:81:d0:c7:0d:d9:f2:39:62:89:29:
                    af:4f:ab:66:1e:a8:6a:25:9e:45:61:f7:35:d4:e9:
                    bc:b9:7b:e7:12:4b:9a:5c:a0:53:83:2e:9c:36:02:
                    58:53:61:42:97:f9:1f:b2:e9:1b:27:4b:37:ff:f3:
                    f6:6f:29:22:74:cb:1b:ea:0c:5b:f9:db:0b:f3:06:
                    9d:9a:c6:18:a4:20:2a:b7:ed:b2:4b:13:98:55:f7:
                    ac:25:c8:ca:37:3d:f9:74:36:f5:95:b0:90:f2:14:
                    ce:85:fb:a7:6d:92:f3:a1:8b:de:e4:be:52:4c:2f:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:67:54:0C:A6:6A:2D:63:08:BB:93:A9:38:20:62:55:75:A0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/bc7d9653-05e4-31f5-8080-164d89fc9121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.17.0-104.245.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:60:36:c0:e2:71:03:e0:f8:61:85:ad:ae:85:3e:d4:f3:
         05:73:1a:e3:99:6b:72:3a:f8:bf:67:ef:13:bf:54:51:b9:c4:
         d2:66:66:2a:7e:f9:31:24:c1:cf:0c:d4:c2:b3:f5:c2:3c:39:
         0c:33:ee:7f:86:b2:c9:7b:5c:99:7a:2f:ad:18:ce:c7:f1:77:
         26:db:1c:9b:a7:52:b5:c6:12:00:5d:23:33:18:94:28:16:5f:
         36:f6:a0:e7:83:c5:aa:aa:cc:35:ce:83:f3:fe:16:75:7a:62:
         d7:c2:f6:35:d7:0f:0f:ae:7f:fa:0d:5d:25:08:0f:a4:3a:10:
         c8:79:5b:9d:77:1f:a3:90:62:95:ef:e7:57:c3:bd:50:94:63:
         52:d1:70:ea:b9:61:e4:0b:fd:f3:fa:96:c6:4b:6b:2f:f5:8b:
         43:6f:09:52:a7:67:01:d6:76:e5:23:98:2b:00:64:6f:4c:c0:
         e6:94:ac:95:d6:cc:3c:dd:bd:fe:78:ae:94:15:3b:cf:4a:63:
         68:6c:73:94:f9:da:aa:f4:3f:eb:6a:59:c7:4b:93:15:37:f9:
         05:6d:3a:1a:5c:75:dd:c0:bf:30:f3:be:98:48:64:39:52:2e:
         6b:98:7b:4d:82:53:0e:1d:45:0a:6d:8e:85:d1:28:a0:69:b7:
         a9:fa:a7:4b
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkFtqiBeX6lVrZW7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMxYjc1MGMtYjQ4Zi00YTU3LWJmMjYtMThlMGJjNmE0
NTZlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
NmVlOGNhOGYtNDRkMy00MTA3LWEyOTQtZWMxMzY5MGJlNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkNtkkmoewfHHTnStbXsS8P1r5A40TJHhCYM
91cyWKyqch51daLZ1+Z/lO0yZAvjTuHh6StYQXXA3yAHH9p7PXUGivdGjrs4xuNN
QhOjmujs3xUD5hAr4N/VPI6IgRAtGIIbj0ITJyGMCl+gtmoPcsOC38OR/6O4cNnZ
dVDKf66PFeFGCXlPHWTZDYHQxw3Z8jliiSmvT6tmHqhqJZ5FYfc11Om8uXvnEkua
XKBTgy6cNgJYU2FCl/kfsukbJ0s3//P2bykidMsb6gxb+dsL8wadmsYYpCAqt+2y
SxOYVfesJcjKNz35dDb1lbCQ8hTOhfunbZLzoYve5L5STC+E0QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHHTZ1QMpmotYwi7k6k4IGJVdaAeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83MzFi
NzUwYy1iNDhmLTRhNTctYmYyNi0xOGUwYmM2YTQ1NmUvYmM3ZDk2NTMtMDVlNC0z
MWY1LTgwODAtMTY0ZDg5ZmM5MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzMxYjc1MGMtYjQ4Zi00YTU3LWJm
MjYtMThlMGJjNmE0NTZlLzczMWI3NTBjLWI0OGYtNGE1Ny1iZjI2LTE4ZTBiYzZh
NDU2ZS5jcmwwHwYDVR0jBBgwFoAUE+QeciQkWtWazwcMzkInvIBsy1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83MzFiNzUwYy1iNDhmLTRhNTctYmYyNi0xOGUw
YmM2YTQ1NmUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo9RED
BAJo9RAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAYZtgNsDicQPg+GGFra6FPtTzBXMa45lrcjr4v2fvE79U
UbnE0mZmKn75MSTBzwzUwrP1wjw5DDPuf4ayyXtcmXovrRjOx/F3Jtscm6dStcYS
AF0jMxiUKBZfNvag54PFqqrMNc6D8/4WdXpi18L2NdcPD65/+g1dJQgPpDoQyHlb
nXcfo5Bile/nV8O9UJRjUtFw6rlh5Av98/qWxktrL/WLQ28JUqdnAdZ25SOYKwBk
b0zA5pSsldbMPN29/niulBU7z0pjaGxzlPnaqvQ/62pZx0uTFTf5BW06Glx13cC/
MPO+mEhkOVIua5h7TYJTDh1FCm2OhdEooGm3qfqnSw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:54:56 2025 by rpki-client