Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa
File:                     175be9fb-183f-35ce-9616-0b9802cbde2c.roa (raw, json)
Hash identifier:          hxubvDA45PvokQ5IoxR0XBT0yokHYK2MSivuGIui6IY=
Subject key identifier:   B0:9E:90:1D:5A:01:FA:D0:4D:90:1F:F1:6B:74:01:F4:22:AF:FB:DB
Certificate issuer:       /CN=170886d5-062a-4c5d-a01f-02088ff038ce
Certificate serial:       010D0C9F43285848A13618B6730E3D6882CC9780
Authority key identifier: 83:31:23:A3:70:72:ED:85:53:E3:94:29:45:80:11:D6:76:97:26:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     271
IP address blocks:        104.128.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:18:b6:73:0e:3d:68:82:cc:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170886d5-062a-4c5d-a01f-02088ff038ce
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=4381cd0d-9211-4c29-8df9-e7716b75cd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:0c:86:d5:65:eb:a4:19:06:a2:b3:15:f5:
                    9d:49:9d:6e:64:a3:4a:65:a4:f2:75:ac:ef:98:b9:
                    d4:b9:2e:13:49:66:ac:e1:1e:bb:f0:9f:ae:1f:64:
                    65:ec:6f:ce:c7:15:72:d3:7b:f2:25:1a:2f:a1:5d:
                    45:b0:c8:9c:43:6e:41:0c:af:52:9a:5c:61:2e:2d:
                    a6:54:ee:6a:31:fd:0d:d3:1b:e9:76:65:a8:d0:5f:
                    bb:eb:1e:cc:ea:8c:92:0f:7f:b3:92:50:79:82:84:
                    84:34:e5:0f:68:4a:7f:f7:bb:04:4f:8a:2b:28:53:
                    64:4d:7a:7e:aa:0d:fe:38:49:ce:db:f9:05:39:b6:
                    fa:db:8a:50:d2:b5:40:51:f9:80:07:2a:8d:a3:8b:
                    bb:62:b5:13:7d:13:57:c0:fa:50:b0:a3:b9:7a:8d:
                    fc:e4:f8:27:0f:7a:52:ff:7e:d1:d6:cb:8f:74:df:
                    cd:ac:9c:80:23:1f:18:9a:52:1d:03:7d:3d:cd:cb:
                    95:19:b2:08:2b:25:00:d7:81:39:e2:d7:56:c3:55:
                    b5:a1:0f:72:c1:30:84:f2:88:f3:e1:21:bc:bf:cb:
                    73:e7:8c:95:f8:fb:48:fa:b8:89:9f:21:c3:d8:0c:
                    a8:f8:b7:3f:22:91:aa:59:95:e9:ea:67:e5:d5:53:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9E:90:1D:5A:01:FA:D0:4D:90:1F:F1:6B:74:01:F4:22:AF:FB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.crl

            X509v3 Authority Key Identifier:
                keyid:83:31:23:A3:70:72:ED:85:53:E3:94:29:45:80:11:D6:76:97:26:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:c5:a3:c4:d1:67:e8:ad:35:4a:de:7e:a5:ca:a0:73:10:
         38:a4:82:4a:9b:75:dc:49:37:34:80:ad:3c:58:6d:4e:5b:a2:
         19:43:8d:fe:b0:e0:2d:79:3e:53:1c:e2:0d:dd:dc:02:90:f5:
         12:aa:30:b3:39:49:1f:1d:83:65:e9:f6:e3:e6:10:14:6c:5b:
         1e:93:19:b6:45:db:f1:cd:f5:47:8b:24:c2:17:85:3e:1d:86:
         d2:79:63:4e:70:bd:77:f3:83:2d:50:bf:13:c8:45:98:b0:a9:
         1e:b3:a1:f4:2c:4a:88:26:00:05:9a:c5:31:02:f4:3e:34:b2:
         f2:86:7b:1a:85:c9:42:0f:79:99:50:2a:f8:aa:03:fd:2e:e8:
         90:27:92:c5:8a:53:2c:5e:db:9a:e6:fc:5f:ef:ee:48:28:c9:
         ea:55:50:30:b1:ec:d8:81:3f:28:3b:2d:92:89:e4:b8:49:9a:
         b8:f9:b3:4e:70:9c:dd:23:22:bf:5d:13:fb:a6:e3:55:f0:6f:
         74:c3:6c:68:1e:07:10:14:0c:66:2f:c9:83:b6:71:53:a7:87:
         50:09:21:dd:9b:45:30:b4:da:00:eb:78:5f:ef:d8:26:7d:9a:
         58:59:32:30:9d:d7:46:97:49:7f:d2:5d:97:fa:dd:10:c7:19:
         04:29:41:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhi2cw49aILMl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTcwODg2ZDUtMDYyYS00YzVkLWEwMWYtMDIwODhmZjAz
OGNlMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NDM4MWNkMGQtOTIxMS00YzI5LThkZjktZTc3MTZiNzVjZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH0MhtVl66QZBqKzFfWdSZ1uZKNKZaTydazv
mLnUuS4TSWas4R678J+uH2Rl7G/OxxVy03vyJRovoV1FsMicQ25BDK9SmlxhLi2m
VO5qMf0N0xvpdmWo0F+76x7M6oySD3+zklB5goSENOUPaEp/97sET4orKFNkTXp+
qg3+OEnO2/kFObb624pQ0rVAUfmAByqNo4u7YrUTfRNXwPpQsKO5eo385PgnD3pS
/37R1suPdN/NrJyAIx8YmlIdA309zcuVGbIIKyUA14E54tdWw1W1oQ9ywTCE8ojz
4SG8v8tz54yV+PtI+riJnyHD2Ayo+Lc/IpGqWZXp6mfl1VMC0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCekB1aAfrQTZAf8Wt0AfQir/vbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNzA4
ODZkNS0wNjJhLTRjNWQtYTAxZi0wMjA4OGZmMDM4Y2UvMTc1YmU5ZmItMTgzZi0z
NWNlLTk2MTYtMGI5ODAyY2JkZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTcwODg2ZDUtMDYyYS00YzVkLWEw
MWYtMDIwODhmZjAzOGNlLzE3MDg4NmQ1LTA2MmEtNGM1ZC1hMDFmLTAyMDg4ZmYw
MzhjZS5jcmwwHwYDVR0jBBgwFoAUgzEjo3By7YVT45QpRYAR1naXJnUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNzA4ODZkNS0wNjJhLTRjNWQtYTAxZi0wMjA4
OGZmMDM4Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxNxaPE0WforTVK3n6lyqBzEDikgkqbddxJNzSArTxYbU5bohlDjf6w
4C15PlMc4g3d3AKQ9RKqMLM5SR8dg2Xp9uPmEBRsWx6TGbZF2/HN9UeLJMIXhT4d
htJ5Y05wvXfzgy1QvxPIRZiwqR6zofQsSogmAAWaxTEC9D40svKGexqFyUIPeZlQ
KviqA/0u6JAnksWKUyxe25rm/F/v7kgoyepVUDCx7NiBPyg7LZKJ5LhJmrj5s05w
nN0jIr9dE/um41Xwb3TDbGgeBxAUDGYvyYO2cVOnh1AJId2bRTC02gDreF/v2CZ9
mlhZMjCd10aXSX/SXZf63RDHGQQpQQg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:15 2025 by rpki-client