Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa
File:                     7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa (raw, json)
Hash identifier:          VEjUOcpv9d8ShLOq0AGs1gGi+jvZ7YUJhuZbQsroa4M=
Subject key identifier:   4B:92:5C:39:7D:C9:5E:DA:72:66:20:4B:8D:8F:91:9A:65:FA:B4:AB
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584900215F0C4DEFB13456D8A700
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     26512
IP address blocks:        104.244.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5f:0c:4d:ef:b1:34:56:d8:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=58b6b5a1-37b8-4cf5-b3da-01bec1038c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d8:47:7f:a3:19:0a:0c:15:5b:2f:e2:8b:05:
                    8e:7e:eb:01:e1:51:67:fc:dc:0e:14:ce:f5:3d:7e:
                    5b:bf:63:46:21:2b:a8:3a:4f:04:d5:3d:a6:b5:d0:
                    f9:f2:a4:53:5d:b8:8e:03:d3:db:f3:1d:37:fc:2f:
                    79:8c:04:a0:e6:c7:5c:7c:3d:a2:b9:6a:a2:2a:dd:
                    8f:50:a9:21:c3:c7:94:21:82:7d:e5:84:dd:d9:f5:
                    30:32:6f:80:95:53:58:f6:1a:d7:a5:0d:20:48:e8:
                    e0:a4:27:37:25:ad:ff:4f:b0:d3:74:75:b7:b1:8e:
                    3b:12:a3:66:9b:77:e8:a3:a8:b2:e4:1d:d4:db:61:
                    cf:a8:af:94:80:ad:45:be:ad:63:19:ed:bf:17:ea:
                    1e:26:d8:26:d6:10:4d:fd:03:50:20:66:6d:bc:aa:
                    49:a0:8b:08:85:38:82:a5:6c:0e:c8:0c:8f:14:4a:
                    c5:ee:41:60:a6:e5:fb:45:30:99:e8:47:6b:aa:05:
                    d9:ed:03:e0:22:14:e4:2f:c1:91:88:85:ff:a6:bc:
                    a0:b9:27:02:06:57:1b:d6:8b:c8:da:8b:c2:0b:76:
                    c8:41:79:32:b5:b1:ba:92:64:a9:0a:9f:6d:51:99:
                    5e:d8:98:72:c3:58:4b:33:b9:4c:8a:58:02:e4:57:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:92:5C:39:7D:C9:5E:DA:72:66:20:4B:8D:8F:91:9A:65:FA:B4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/7505e4e7-9852-3c71-a7e1-ae52fe0c3ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:da:16:de:df:9f:be:0f:d2:ab:e9:3b:e6:b2:52:f5:95:
         ff:77:e4:f8:ca:47:5c:94:3f:0e:a6:d6:f5:5c:f5:b1:07:fa:
         7c:91:db:91:93:63:25:b4:c6:81:56:a0:88:dc:d5:aa:9a:39:
         6c:ee:89:32:e5:c0:ba:89:01:84:56:41:33:48:93:0d:e8:74:
         b3:7e:d3:8b:70:0b:34:89:e4:b3:fe:4f:3e:76:52:9a:9e:85:
         b4:19:de:80:be:55:f6:38:27:3f:0a:2d:f4:3c:69:fa:37:70:
         a9:30:09:a5:6a:22:34:d3:4d:36:48:91:78:3c:b3:e4:1e:c9:
         86:aa:73:91:3b:d0:52:3b:4c:4d:4f:33:49:af:9a:50:0d:2f:
         d4:c0:bc:c4:fb:46:d3:88:76:84:6b:be:ac:85:75:6c:b1:05:
         6c:3f:97:4f:e5:6b:73:8f:50:d5:f1:22:3a:32:80:a0:32:28:
         0b:40:35:1b:96:0a:01:af:f5:e1:58:8b:c4:d2:58:13:6c:6c:
         93:eb:22:63:9f:7c:0f:3b:a1:24:51:d0:ec:16:a8:aa:51:20:
         41:f2:88:60:fe:b7:a6:e1:d4:89:c0:f2:45:60:34:c3:d5:3f:
         d5:5a:b2:99:97:15:df:82:58:9e:c0:8c:a8:5a:4c:51:06:f4:
         57:57:6a:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV8MTe+xNFbYpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3
YTZkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NThiNmI1YTEtMzdiOC00Y2Y1LWIzZGEtMDFiZWMxMDM4YzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdhHf6MZCgwVWy/iiwWOfusB4VFn/NwOFM71
PX5bv2NGISuoOk8E1T2mtdD58qRTXbiOA9Pb8x03/C95jASg5sdcfD2iuWqiKt2P
UKkhw8eUIYJ95YTd2fUwMm+AlVNY9hrXpQ0gSOjgpCc3Ja3/T7DTdHW3sY47EqNm
m3foo6iy5B3U22HPqK+UgK1Fvq1jGe2/F+oeJtgm1hBN/QNQIGZtvKpJoIsIhTiC
pWwOyAyPFErF7kFgpuX7RTCZ6EdrqgXZ7QPgIhTkL8GRiIX/pryguScCBlcb1ovI
2ovCC3bIQXkytbG6kmSpCp9tUZle2Jhyw1hLM7lMilgC5Fc2bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuSXDl9yV7acmYgS42PkZpl+rSrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy
YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNzUwNWU0ZTctOTg1Mi0z
YzcxLWE3ZTEtYWU1MmZlMGMzYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3
MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh
N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy
MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPQSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFma2hbe35++D9Kr6TvmslL1lf935PjKR1yUPw6m1vVc9bEH+nyR25GT
YyW0xoFWoIjc1aqaOWzuiTLlwLqJAYRWQTNIkw3odLN+04twCzSJ5LP+Tz52Upqe
hbQZ3oC+VfY4Jz8KLfQ8afo3cKkwCaVqIjTTTTZIkXg8s+QeyYaqc5E70FI7TE1P
M0mvmlANL9TAvMT7RtOIdoRrvqyFdWyxBWw/l0/la3OPUNXxIjoygKAyKAtANRuW
CgGv9eFYi8TSWBNsbJPrImOffA87oSRR0OwWqKpRIEHyiGD+t6bh1InA8kVgNMPV
P9VaspmXFd+CWJ7AjKhaTFEG9FdXal4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:22 2025 by rpki-client