Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/59dc03e5-ce18-3759-89a6-357fcdff5974.roa
File:                     59dc03e5-ce18-3759-89a6-357fcdff5974.roa (raw, json)
Hash identifier:          U6djPnOFxuiY/2YIeNhCa7zqz4/f0WXHnqQKxaMr/YU=
Subject key identifier:   64:D2:73:04:C1:6E:3B:41:12:6D:80:C4:42:CE:1D:CE:4F:69:EE:77
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285847F9B4E3D6C5A455C79B0305A0
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/59dc03e5-ce18-3759-89a6-357fcdff5974.roa
Signing time:             Sat 23 Nov 2024 14:00:39 +0000
ROA not before:           Sat 23 Nov 2024 14:00:39 +0000
ROA not after:            Fri 21 Feb 2025 14:00:39 +0000
asID:                     54113
IP address blocks:        159.242.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f9:b4:e3:d6:c5:a4:55:c7:9b:03:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Nov 23 14:00:39 2024 GMT
            Not After : Feb 21 14:00:39 2025 GMT
        Subject: CN=008737d6-2e5c-4331-8517-d9bacd1f4967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b3:d0:7b:87:48:97:d4:4f:95:7c:08:1c:91:
                    08:0f:f9:5e:80:70:de:ae:30:64:3a:70:61:4c:eb:
                    bd:c2:0f:2f:91:2f:ca:dc:99:2e:3d:68:d9:7b:8d:
                    41:bd:8f:95:87:16:d9:52:7e:fd:dd:8e:1b:6f:22:
                    c1:50:be:6c:5e:27:34:29:91:1d:11:2f:ea:da:fe:
                    15:17:9d:6e:2d:0d:ab:af:40:35:c3:a8:aa:b8:66:
                    5d:21:ba:64:77:6a:f5:c8:0e:50:61:7d:2d:a3:cc:
                    74:d9:08:17:f0:86:10:2e:1f:c7:93:b6:08:ec:28:
                    b7:e4:84:ac:8a:4f:81:00:61:e6:4a:65:3b:d1:90:
                    a0:3f:96:be:ee:87:18:e9:02:86:f0:f9:63:dd:c4:
                    94:0d:b8:2e:7a:26:1a:6b:73:35:97:d3:a8:fc:9b:
                    8a:9b:47:59:d0:ba:4d:26:85:74:49:53:30:96:b5:
                    f5:ac:67:45:25:12:ee:14:61:ab:47:c8:f3:26:c2:
                    46:10:ec:30:c7:29:7d:e3:0b:07:36:e8:3e:42:f2:
                    82:af:0e:53:59:4a:de:c6:61:36:76:ef:6a:99:6b:
                    b9:71:b1:3c:a2:05:69:97:d7:fb:b8:6e:9f:7b:aa:
                    5c:89:fa:a0:2c:7f:88:4a:b7:b4:7f:14:bf:d8:43:
                    5e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:73:04:C1:6E:3B:41:12:6D:80:C4:42:CE:1D:CE:4F:69:EE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/59dc03e5-ce18-3759-89a6-357fcdff5974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.242.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:6f:0a:e2:68:ea:f0:2a:bf:9a:ac:01:6e:74:97:cd:d7:
         60:d7:0f:2f:7b:1e:73:a7:e8:2b:08:dc:4a:25:ef:00:a4:15:
         c9:6c:6e:3a:11:b0:00:ef:95:c3:31:b6:47:9b:50:a2:70:8f:
         11:2f:6e:bc:cc:5c:23:2c:6f:ef:f4:1b:3b:7b:6c:f2:08:86:
         d4:71:92:7b:cb:a4:5b:4d:19:1d:31:39:61:65:72:e7:3b:72:
         b4:34:63:0a:de:e5:cc:f6:f5:06:b1:d5:cf:6c:e8:3f:fe:bd:
         fd:56:99:56:f9:32:b8:8c:ab:37:e3:09:b8:88:75:ae:f9:a5:
         38:99:d2:3c:26:c8:02:42:cc:ec:b7:0f:46:20:ab:d2:a3:2f:
         cb:9c:9b:bc:22:69:64:ef:d5:75:43:19:80:78:b6:84:bf:e0:
         44:8d:dc:0a:35:6f:21:26:e7:76:57:1d:ae:58:49:9a:6a:a1:
         c8:b2:d5:07:11:e7:81:ba:59:63:54:49:f4:98:6c:42:47:ec:
         33:69:bc:c6:f7:3b:0b:9d:ec:d3:50:bc:be:cf:e9:2a:d7:53:
         78:05:ac:8c:94:ff:9e:4a:cd:c4:44:b1:21:0d:28:aa:6a:92:
         e5:a7:e5:03:8e:32:a9:bb:7b:91:f7:43:a9:68:6f:43:bd:5d:
         80:58:3b:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf5tOPWxaRVx5sDBaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI0MTEyMzE0MDAzOVoXDTI1MDIyMTE0MDAzOVowLzEtMCsGA1UEAxMk
MDA4NzM3ZDYtMmU1Yy00MzMxLTg1MTctZDliYWNkMWY0OTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7PQe4dIl9RPlXwIHJEID/legHDerjBkOnBh
TOu9wg8vkS/K3JkuPWjZe41BvY+VhxbZUn793Y4bbyLBUL5sXic0KZEdES/q2v4V
F51uLQ2rr0A1w6iquGZdIbpkd2r1yA5QYX0to8x02QgX8IYQLh/Hk7YI7Ci35ISs
ik+BAGHmSmU70ZCgP5a+7ocY6QKG8Plj3cSUDbgueiYaa3M1l9Oo/JuKm0dZ0LpN
JoV0SVMwlrX1rGdFJRLuFGGrR8jzJsJGEOwwxyl94wsHNug+QvKCrw5TWUrexmE2
du9qmWu5cbE8ogVpl9f7uG6fe6pcifqgLH+ISre0fxS/2ENesQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTScwTBbjtBEm2AxELOHc5Pae53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvNTlkYzAzZTUtY2UxOC0z
NzU5LTg5YTYtMzU3ZmNkZmY1OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn/LzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2ubwriaOrwKr+arAFudJfN12DXDy97HnOn6CsI3Eol7wCkFclsbjoR
sADvlcMxtkebUKJwjxEvbrzMXCMsb+/0Gzt7bPIIhtRxknvLpFtNGR0xOWFlcuc7
crQ0Ywre5cz29Qax1c9s6D/+vf1WmVb5MriMqzfjCbiIda75pTiZ0jwmyAJCzOy3
D0Ygq9KjL8ucm7wiaWTv1XVDGYB4toS/4ESN3Ao1byEm53ZXHa5YSZpqociy1QcR
54G6WWNUSfSYbEJH7DNpvMb3Owud7NNQvL7P6SrXU3gFrIyU/55KzcREsSENKKpq
kuWn5QOOMqm7e5H3Q6lob0O9XYBYOwU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:20 2025 by rpki-client