Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60a5c5d7-45b8-366a-8eb5-fe9cecd37381.roa
File:                     60a5c5d7-45b8-366a-8eb5-fe9cecd37381.roa (raw, json)
Hash identifier:          eiwHkLm2Rw5S70dHivjlZMpxuFjjy9OJ/XGJrF/G0fo=
Subject key identifier:   A4:CE:B9:C3:20:CA:00:B2:0F:34:4B:35:E4:F1:9E:85:2E:C7:2E:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848305A9B9E0EA2FBD6DE038988
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60a5c5d7-45b8-366a-8eb5-fe9cecd37381.roa
Signing time:             Fri 13 Dec 2024 03:48:15 +0000
ROA not before:           Fri 13 Dec 2024 03:48:15 +0000
ROA not after:            Thu 13 Mar 2025 02:48:15 +0000
asID:                     13335
IP address blocks:        173.245.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:5a:9b:9e:0e:a2:fb:d6:de:03:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 03:48:15 2024 GMT
            Not After : Mar 13 02:48:15 2025 GMT
        Subject: CN=dea3cae9-35cc-4089-b5a8-f7f1e6e2cf24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:8a:a2:bd:e7:e7:7a:2d:89:2e:55:10:0c:
                    25:ac:ec:1e:93:2f:50:d2:3e:d2:48:b7:78:ba:59:
                    13:20:29:af:d9:55:33:fb:ae:12:d0:9b:69:f0:ab:
                    f0:d8:7d:6a:e6:b2:65:ec:90:8d:b2:e8:82:db:4a:
                    d8:0d:49:aa:eb:7a:01:b7:65:76:63:fa:52:73:b2:
                    43:60:a6:f1:f4:f9:18:19:a8:fa:76:25:ef:90:ad:
                    a0:fd:49:f2:17:0e:b6:fb:e3:8a:25:90:89:5a:98:
                    17:0a:96:a0:1e:44:68:ad:69:0d:ca:23:c2:6a:a3:
                    47:64:68:55:ac:98:4f:94:3c:1e:72:61:ee:0d:cd:
                    af:68:58:a0:5e:ee:0f:27:fd:6b:43:6a:f6:7a:ad:
                    1c:67:8d:db:3b:37:03:99:c5:b4:8b:10:86:45:8a:
                    00:23:50:21:be:e1:f6:1d:6e:2c:5b:a8:18:e8:a0:
                    49:7e:76:5f:30:b4:57:87:cc:dd:da:f1:87:77:e2:
                    b4:d0:16:2a:5f:a1:08:c8:77:00:f1:28:4d:27:2d:
                    9b:f0:eb:a5:6c:19:5c:86:72:7f:5f:f7:00:53:e2:
                    54:e9:fe:95:74:f3:4a:52:79:e2:b9:b3:10:28:e8:
                    26:e2:2a:65:3c:92:95:f7:58:b7:42:f1:84:35:0a:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CE:B9:C3:20:CA:00:B2:0F:34:4B:35:E4:F1:9E:85:2E:C7:2E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60a5c5d7-45b8-366a-8eb5-fe9cecd37381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:42:97:16:33:33:f3:7d:a2:1a:59:44:1a:d0:7d:7f:48:17:
         1c:05:87:8a:23:86:38:1d:2b:04:48:b9:e2:74:9c:c4:12:73:
         90:aa:ff:f0:4e:fa:3c:1c:bf:7b:e9:9d:f9:28:02:5f:78:dd:
         2c:d1:e4:3d:9e:e5:df:96:45:4f:bc:41:a4:8e:92:f7:d3:03:
         69:34:ea:b7:b9:d6:be:16:3e:9f:24:62:d3:c5:a6:0e:5a:ed:
         3c:49:eb:55:51:1f:11:b9:b8:80:6a:2b:34:77:01:18:ab:cf:
         cd:ea:af:34:20:d6:e6:e7:4f:ab:55:8a:6f:64:15:39:f5:cd:
         69:5a:89:f7:39:b4:a6:5e:2f:44:c1:cf:f3:39:66:e2:03:a7:
         4f:c8:37:7b:1e:63:60:9f:7b:d3:cf:3b:26:ac:d2:21:03:11:
         69:be:c6:e3:a2:89:e8:85:08:60:c8:3d:e2:81:e3:b5:3e:90:
         90:ef:cf:a7:8b:42:16:6d:a8:9c:48:3e:57:f6:7b:59:a6:e8:
         93:d2:1c:98:5a:cd:35:08:8d:13:b0:dc:3a:83:f8:c8:db:79:
         a8:48:c0:39:54:ca:cb:82:10:0d:e3:71:3a:95:8f:26:0f:bf:
         9a:1f:57:7c:9c:99:76:64:f7:47:e5:af:cb:c4:cb:d7:06:f2:
         88:1b:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:02 2025 by rpki-client