Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
File:                     e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa (raw, json)
Hash identifier:          h8rX7AGMwtPj6C6UHEL7MCrPDiumALuIIQ64xeO6/dU=
Subject key identifier:   52:68:35:EF:88:DB:42:AD:FF:C6:ED:57:1A:32:CF:14:4C:00:F7:A2
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F432858480645030D90482EA8929B5980
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     174
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:03:0d:90:48:2e:a8:92:9b:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=4b5045b1-0b87-4869-bc9b-f900c760f789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:49:84:a0:7d:70:ed:9c:69:10:69:6c:30:
                    59:22:a6:dc:57:36:c7:de:98:cc:96:9b:02:4d:ee:
                    66:02:5c:2e:75:1d:6d:01:ca:ad:9b:ca:c0:80:05:
                    1f:b3:37:37:7f:99:04:4d:5d:9f:c8:78:56:5a:45:
                    12:ef:ad:75:e2:3d:3b:9d:a6:b6:4b:eb:d6:58:d2:
                    ff:0e:0f:0b:59:ce:9f:4f:00:1c:0a:f7:1e:8e:8d:
                    62:e3:e7:a8:bf:8b:5a:6b:0a:a6:8f:95:db:3e:de:
                    07:d9:e2:6e:cc:80:80:88:3f:52:98:68:4a:f4:b3:
                    b7:5d:e5:2c:e2:6c:21:bb:43:b9:d5:85:ea:4a:fb:
                    41:63:d4:80:be:50:5d:cf:fe:b1:cb:31:cd:3c:c0:
                    d3:1d:35:33:12:0a:e4:4b:5b:cd:43:9e:37:da:6e:
                    14:fd:8f:bc:a8:d3:c4:72:ce:25:08:67:89:60:1c:
                    eb:44:ca:ca:06:2d:34:40:c6:ac:00:d3:3b:b9:bf:
                    a8:c8:6f:03:f0:90:fa:90:d9:3d:8b:51:64:05:97:
                    f7:78:36:bc:cd:fe:1e:7a:d5:8f:83:1b:a9:f5:6d:
                    5e:8a:7f:34:1f:d5:ae:69:6b:fd:1b:c9:67:fa:73:
                    db:30:ed:6d:08:9f:9b:30:fe:21:c0:66:03:ff:6e:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:68:35:EF:88:DB:42:AD:FF:C6:ED:57:1A:32:CF:14:4C:00:F7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:37:8e:aa:ca:6b:f1:54:16:5f:b7:5a:bc:d0:cb:7e:95:
         5a:e8:6f:0f:3e:cc:b0:62:d1:d4:4d:49:ca:77:13:c7:d8:ec:
         1f:0b:af:47:4c:be:ad:47:ba:ad:6c:67:0e:d6:01:e5:46:c1:
         b7:09:69:7e:00:97:1c:84:ba:86:ce:1c:88:ce:fc:77:9f:1b:
         94:1a:d6:a5:b0:56:f2:14:6e:0c:50:9c:2e:36:56:b0:43:13:
         a6:2d:6a:04:2b:37:30:45:bf:08:e4:98:25:42:3a:43:50:73:
         1c:e1:1e:0a:78:22:57:1a:e6:a7:cd:3d:d0:38:ce:5c:93:62:
         40:bf:34:1d:8b:c0:54:e2:83:0f:ff:e4:76:db:71:26:1f:a8:
         47:1b:45:38:c6:8a:3d:54:0b:fd:41:91:63:63:d2:eb:fd:d4:
         0c:06:28:68:f0:60:1c:a5:2c:f3:9e:52:71:a6:46:ed:10:6b:
         04:e3:53:58:7d:13:6d:65:f5:c4:8a:c7:68:32:4b:12:26:e4:
         13:47:8c:60:89:bc:38:a8:29:e3:51:34:52:24:d0:11:ad:c2:
         bd:e9:78:8c:de:08:ad:7b:f6:e0:9b:2e:09:03:69:89:44:2c:
         dc:b3:0c:9b:c4:eb:17:3b:1a:86:71:3d:f2:c4:03:68:45:36:
         5b:d8:a1:27
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgGRQMNkEguqJKbWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NGI1MDQ1YjEtMGI4Ny00ODY5LWJjOWItZjkwMGM3NjBmNzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9lJhKB9cO2caRBpbDBZIqbcVzbH3pjMlpsC
Te5mAlwudR1tAcqtm8rAgAUfszc3f5kETV2fyHhWWkUS76114j07naa2S+vWWNL/
Dg8LWc6fTwAcCvcejo1i4+eov4taawqmj5XbPt4H2eJuzICAiD9SmGhK9LO3XeUs
4mwhu0O51YXqSvtBY9SAvlBdz/6xyzHNPMDTHTUzEgrkS1vNQ5432m4U/Y+8qNPE
cs4lCGeJYBzrRMrKBi00QMasANM7ub+oyG8D8JD6kNk9i1FkBZf3eDa8zf4eetWP
gxup9W1ein80H9WuaWv9G8ln+nPbMO1tCJ+bMP4hwGYD/25E8wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFJoNe+I20Kt/8btVxoyzxRMAPeiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvZTZiNTkwNjAtZmJlYi0z
MTRjLTkyZTEtZmRiODg1ZmJlZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADqzN46qymvxVBZft1q80Mt+lVrobw8+zLBi0dRNScp3E8fY
7B8Lr0dMvq1Huq1sZw7WAeVGwbcJaX4AlxyEuobOHIjO/HefG5Qa1qWwVvIUbgxQ
nC42VrBDE6YtagQrNzBFvwjkmCVCOkNQcxzhHgp4Ilca5qfNPdA4zlyTYkC/NB2L
wFTigw//5HbbcSYfqEcbRTjGij1UC/1BkWNj0uv91AwGKGjwYBylLPOeUnGmRu0Q
awTjU1h9E21l9cSKx2gySxIm5BNHjGCJvDioKeNRNFIk0BGtwr3peIzeCK179uCb
LgkDaYlELNyzDJvE6xc7GoZxPfLEA2hFNlvYoSc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:21:47 2025 by rpki-client