Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/60fadeec-5e08-33df-be40-ee9ead18b844.roa
File:                     60fadeec-5e08-33df-be40-ee9ead18b844.roa (raw, json)
Hash identifier:          YGwZUCHZPmF46HqlStD+kCZKjQL6uQCRr8wMDbMc1mU=
Subject key identifier:   16:9C:50:B3:D9:D2:AE:F7:4F:FF:3E:3E:E8:AF:5D:25:35:34:1F:BD
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858484D758D0E81A7B4C8DA184700
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/60fadeec-5e08-33df-be40-ee9ead18b844.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     396998
IP address blocks:        148.59.74.0/24 maxlen: 24
                          216.126.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8d:0e:81:a7:b4:c8:da:18:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=2d46eae8-4e89-4a5b-9bac-f71840fd6675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:7c:5c:c8:e4:2b:66:12:12:7b:90:af:e2:
                    4e:9d:25:ba:41:27:5b:dd:fa:37:f6:44:e2:63:7a:
                    14:a0:ac:89:74:51:ea:6c:8f:df:6b:49:4d:4b:1e:
                    ac:e0:df:f2:60:5e:bb:35:6e:ee:05:a0:bb:30:e7:
                    3e:a4:5d:de:81:33:b8:b1:6d:32:4e:2d:3f:77:f6:
                    c8:95:39:b0:f7:e5:8e:b9:16:78:27:d9:ba:3a:c5:
                    8b:2a:59:d3:fb:48:b7:bd:b8:10:7a:64:dd:13:d7:
                    1d:e6:77:a9:99:1f:3a:d8:cb:c8:c5:6c:f4:02:6d:
                    48:dd:a0:45:6e:65:e1:a7:26:8a:77:e4:5c:db:c6:
                    fc:e5:16:bb:cb:0c:ae:e3:c5:42:62:ba:2a:2a:0e:
                    6d:f7:a1:05:0c:6a:11:f1:7f:5f:69:ee:0b:c0:d0:
                    20:4d:13:fb:b9:12:5f:88:0d:e4:db:1c:ec:bc:26:
                    bb:cc:24:e6:c3:a1:42:e8:f8:a9:68:81:38:31:72:
                    46:6c:cf:93:d3:8c:6b:7b:7c:82:15:59:37:1d:8a:
                    37:58:eb:64:83:08:44:cb:c3:ca:e1:c6:d9:15:c2:
                    ff:d3:33:d3:12:55:f3:35:b6:41:78:3a:63:bb:e1:
                    54:f8:54:18:e2:71:e7:67:ad:88:24:bc:3b:83:6c:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9C:50:B3:D9:D2:AE:F7:4F:FF:3E:3E:E8:AF:5D:25:35:34:1F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/60fadeec-5e08-33df-be40-ee9ead18b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.74.0/24
                  216.126.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:a3:16:96:dc:b7:1b:3d:60:cb:10:ba:8e:c7:df:32:65:
         4a:ce:59:50:a9:79:7c:96:dd:57:f9:2e:b3:73:65:f0:18:37:
         4f:f1:f4:03:d2:b1:71:bc:5e:1c:8d:96:27:65:ad:aa:7d:a3:
         14:e1:4d:86:21:47:b7:10:2e:39:97:34:5e:b4:0c:f8:0d:2c:
         f0:29:71:e3:4a:42:56:5f:25:2d:ba:39:06:03:1f:72:9a:7d:
         14:5c:95:e1:a0:c6:31:43:e8:e7:b0:3c:14:59:e2:cd:6a:7c:
         c0:c2:f8:27:0b:ee:1e:74:1b:6c:a6:52:de:d6:1c:23:60:30:
         b3:75:79:37:11:6d:f5:2c:02:5d:7a:10:4a:d6:4b:7e:83:94:
         7b:cb:13:df:ba:79:64:83:3d:24:c2:5d:e4:38:6f:d2:61:b2:
         ac:cd:cb:ee:ea:a9:e5:11:25:0b:04:bb:46:0f:cc:e9:44:d9:
         bb:29:af:a7:e2:72:c2:7b:9b:1b:5f:f1:71:62:07:51:6d:e2:
         c8:99:86:4e:8a:ad:3e:24:5e:d3:ce:5d:f4:89:93:eb:37:62:
         ad:3d:df:58:00:5c:a1:1d:61:94:83:5b:4b:65:8f:8f:a4:85:
         64:7d:40:cd:44:5a:bf:30:fe:f7:a1:6e:7d:67:b8:d2:4b:f5:
         40:45:90:b4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhNdY0Ogae0yNoYRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
MmQ0NmVhZTgtNGU4OS00YTViLTliYWMtZjcxODQwZmQ2Njc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOh8XMjkK2YSEnuQr+JOnSW6QSdb3fo39kTi
Y3oUoKyJdFHqbI/fa0lNSx6s4N/yYF67NW7uBaC7MOc+pF3egTO4sW0yTi0/d/bI
lTmw9+WOuRZ4J9m6OsWLKlnT+0i3vbgQemTdE9cd5nepmR862MvIxWz0Am1I3aBF
bmXhpyaKd+Rc28b85Ra7ywyu48VCYroqKg5t96EFDGoR8X9fae4LwNAgTRP7uRJf
iA3k2xzsvCa7zCTmw6FC6PipaIE4MXJGbM+T04xre3yCFVk3HYo3WOtkgwhEy8PK
4cbZFcL/0zPTElXzNbZBeDpju+FU+FQY4nHnZ62IJLw7g2xYdQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBacULPZ0q73T/8+PuivXSU1NB+9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvNjBmYWRlZWMtNWUwOC0z
M2RmLWJlNDAtZWU5ZWFkMThiODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlDtKAwQA
2H7PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADvyoxaW3LcbPWDLELqOx98yZUrOWVCpeXyW3Vf5LrNzZfAY
N0/x9APSsXG8XhyNlidlrap9oxThTYYhR7cQLjmXNF60DPgNLPApceNKQlZfJS26
OQYDH3KafRRcleGgxjFD6OewPBRZ4s1qfMDC+CcL7h50G2ymUt7WHCNgMLN1eTcR
bfUsAl16EErWS36DlHvLE9+6eWSDPSTCXeQ4b9JhsqzNy+7qqeURJQsEu0YPzOlE
2bspr6ficsJ7mxtf8XFiB1Ft4siZhk6KrT4kXtPOXfSJk+s3Yq0931gAXKEdYZSD
W0tlj4+khWR9QM1EWr8w/vehbn1nuNJL9UBFkLQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:05:16 2025 by rpki-client