Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
File:                     5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa (raw, json)
Hash identifier:          KTDWm6crLu/hIpq6N/Xxe2mzw2TcivFlP1P3Gb0La9U=
Subject key identifier:   5C:C6:49:CB:AD:5C:20:9A:31:2C:5B:51:19:75:AA:17:9D:C5:CA:71
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858481F6520045B92C3964BCF5B00
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     32889
IP address blocks:        96.60.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:20:04:5b:92:c3:96:4b:cf:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=9501f274-8b1e-4646-a8fe-cc4d63061aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:1e:49:fe:ef:b6:4d:c8:f1:57:1f:6c:fe:65:
                    0b:13:e7:a8:cb:21:ca:5e:ec:ae:ff:eb:c3:57:3d:
                    4c:72:08:2b:b7:60:47:d9:db:e4:68:1d:0f:ce:cd:
                    42:f2:32:df:65:8d:15:e7:f8:e9:8c:75:1d:98:8d:
                    bd:a1:c8:62:a2:2c:1a:ea:bc:f8:e8:e5:cb:36:14:
                    3e:85:18:7c:ff:0f:32:db:1d:b2:be:17:82:6c:6f:
                    a2:5b:45:de:4d:be:55:e6:45:99:ec:9d:3e:c3:c7:
                    74:4d:4c:4a:b1:3e:4b:8d:7b:49:2d:87:13:6b:3d:
                    9b:3e:05:61:a7:c1:76:ba:96:29:24:a2:b7:b8:0b:
                    6a:da:02:d9:1a:95:b5:67:7f:9b:00:93:f2:80:19:
                    d7:86:b0:6c:a4:ca:ef:18:47:c0:d5:22:af:83:13:
                    91:6e:1c:5c:73:48:a2:54:bf:bb:35:d2:b8:6e:4b:
                    35:63:14:83:e9:ba:60:95:34:08:07:da:29:66:c2:
                    c3:48:8e:aa:14:b7:1d:5d:f0:64:96:b5:db:f2:5e:
                    f3:8a:95:b4:b3:af:a9:32:2c:79:14:26:0b:24:cf:
                    e1:9c:9b:f0:d7:63:67:80:e8:df:de:e6:87:c8:2f:
                    88:cf:90:6e:d3:33:c6:ba:a8:e3:fc:74:b8:75:e0:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:49:CB:AD:5C:20:9A:31:2C:5B:51:19:75:AA:17:9D:C5:CA:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.60.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:47:a7:8d:19:6d:82:c6:9f:ed:98:6a:8a:e1:09:d5:7a:
         fd:5a:bc:2b:ba:b8:b9:dd:06:be:22:5c:43:94:f6:54:dc:3e:
         aa:30:9c:1b:a2:15:8e:4c:b3:97:5f:9a:d6:c1:36:6a:17:6a:
         75:9e:52:04:1c:f9:43:3b:9a:33:d3:80:6b:80:ff:da:99:16:
         f4:a6:08:10:8c:e3:63:aa:f8:05:2e:f0:e6:4a:38:23:e4:aa:
         39:c6:23:95:94:4e:3f:2b:64:86:f3:97:83:b6:a6:20:b3:bd:
         36:ef:00:80:23:bd:17:15:74:5d:48:67:8a:15:09:d0:14:98:
         2d:f5:01:27:67:da:8b:0b:8f:3d:cf:08:cb:b6:73:23:61:d7:
         57:75:ea:01:12:83:52:60:57:5d:46:3e:e1:67:3e:09:e3:29:
         27:71:7c:1d:2b:0f:0d:b2:0c:18:c9:8b:8c:89:69:ba:3c:c2:
         7d:57:17:0e:17:37:60:10:07:55:1a:73:ea:b5:4f:89:dd:9a:
         0c:0c:6b:a3:99:25:02:cc:7a:fb:8e:e7:a4:75:47:3f:f5:f2:
         8c:cc:25:78:ad:41:a7:ff:f4:3d:27:23:67:15:16:e7:50:d4:
         51:35:a9:1f:07:13:27:40:35:37:a2:cb:9e:a9:df:b2:14:f2:
         dd:f4:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:12:58 2025 by rpki-client