Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa
File:                     f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa (raw, json)
Hash identifier:          tgrw+6Z6O37WaNpxsZmo0qg3xvhjTjDLwD0ClHDWcYw=
Subject key identifier:   51:BE:A8:EB:E4:3D:DE:79:6C:87:C1:F0:22:A4:35:CB:0C:BC:FC:0B
Certificate issuer:       /CN=60a3faac-69f1-4258-94e7-1128c7a528ea
Certificate serial:       010D0C9F43285848530AEE5C384CEC8F42765E80
Authority key identifier: 93:24:DC:03:34:19:A5:27:1B:7E:95:2B:D7:21:E8:53:5A:F1:42:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     36391
IP address blocks:        142.90.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ee:5c:38:4c:ec:8f:42:76:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a3faac-69f1-4258-94e7-1128c7a528ea
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=125e7ef0-5a9d-4e22-9b1e-59240fb77280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:dc:aa:58:56:9d:1a:12:6a:3e:4a:20:e6:
                    42:76:9c:23:a8:14:06:44:fc:37:f2:d9:5d:b4:73:
                    00:37:86:63:48:f3:bc:55:1b:af:10:9e:c3:db:35:
                    f2:ee:35:d9:d9:f0:4a:bf:b6:b8:f7:9d:ab:75:ad:
                    10:0a:91:85:5d:72:cd:10:3d:c3:5d:9e:9b:de:b9:
                    4c:af:d7:75:3a:d0:71:0b:60:c1:c4:01:98:ac:63:
                    b3:3d:53:df:18:6a:12:60:15:1c:90:54:70:67:79:
                    fc:07:be:ef:eb:5a:d8:e9:04:ff:5a:03:1f:15:30:
                    83:e1:dd:ac:71:67:26:6d:ce:5c:60:8a:b5:ad:49:
                    fe:97:43:80:c0:df:06:8f:2b:dd:15:0e:75:45:b0:
                    99:a6:57:ee:2d:00:eb:e1:3d:04:7a:57:20:85:c8:
                    74:d6:14:8e:f0:85:f8:29:9f:78:23:e0:1b:62:6d:
                    ec:4e:67:38:3f:1b:79:85:e5:6a:b3:57:04:4a:fb:
                    45:eb:39:59:37:a4:19:db:67:69:be:aa:a2:92:49:
                    f8:5c:41:b1:dc:19:00:ac:4e:e0:0e:e8:d1:c3:64:
                    cd:d7:6e:0b:7b:79:1c:e7:0e:5d:35:98:d4:2d:e0:
                    fd:42:8e:4c:1d:ad:2a:a5:ed:36:36:93:13:64:15:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BE:A8:EB:E4:3D:DE:79:6C:87:C1:F0:22:A4:35:CB:0C:BC:FC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.crl

            X509v3 Authority Key Identifier:
                keyid:93:24:DC:03:34:19:A5:27:1B:7E:95:2B:D7:21:E8:53:5A:F1:42:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.90.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:40:90:3a:6c:b9:f8:68:dc:f3:a9:43:e6:49:19:c2:4a:72:
         c3:73:b9:7f:27:bb:4d:22:17:48:59:41:03:b4:99:b6:b8:5d:
         a8:a7:73:50:e2:6b:c5:16:83:6f:a9:0f:99:87:6e:6b:ba:eb:
         29:9f:c6:9d:03:28:77:01:39:92:a0:c3:2f:06:1f:cf:12:9f:
         46:76:b4:b1:e9:bf:78:eb:9c:19:02:30:96:48:c1:05:ae:24:
         7a:76:44:01:c5:0f:ba:58:43:55:53:04:27:b7:af:6c:d1:4a:
         e4:a6:ea:94:36:1b:ba:74:f2:27:b6:40:51:85:43:f7:ae:9d:
         6a:67:3f:c4:a7:e9:e3:e7:4f:4d:c3:d5:2f:64:53:06:df:5f:
         95:e7:49:48:4e:af:07:21:a5:ca:5d:75:45:bf:7b:3d:79:41:
         e5:98:af:d3:13:ec:2a:36:5e:2a:b7:6f:6b:47:80:2f:f6:f5:
         e6:6b:43:4a:97:6f:57:2c:ef:0a:da:a2:b0:91:ac:d7:78:66:
         70:df:24:7d:33:a8:2b:fa:34:82:4d:7e:9e:d7:1b:a2:f4:3d:
         db:74:5f:98:b7:00:d3:dd:88:8d:ba:b0:b7:3e:56:c2:68:69:
         94:e4:06:aa:70:3d:b3:c8:20:59:79:56:93:e9:2b:68:d7:af:
         13:9f:a7:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCu5cOEzsj0J2XoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhM2ZhYWMtNjlmMS00MjU4LTk0ZTctMTEyOGM3YTUy
OGVhMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTI1ZTdlZjAtNWE5ZC00ZTIyLTliMWUtNTkyNDBmYjc3MjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJXcqlhWnRoSaj5KIOZCdpwjqBQGRPw38tld
tHMAN4ZjSPO8VRuvEJ7D2zXy7jXZ2fBKv7a4952rda0QCpGFXXLNED3DXZ6b3rlM
r9d1OtBxC2DBxAGYrGOzPVPfGGoSYBUckFRwZ3n8B77v61rY6QT/WgMfFTCD4d2s
cWcmbc5cYIq1rUn+l0OAwN8GjyvdFQ51RbCZplfuLQDr4T0Eelcghch01hSO8IX4
KZ94I+AbYm3sTmc4Pxt5heVqs1cESvtF6zlZN6QZ22dpvqqikkn4XEGx3BkArE7g
DujRw2TN124Le3kc5w5dNZjULeD9Qo5MHa0qpe02NpMTZBUjbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFG+qOvkPd55bIfB8CKkNcsMvPwLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGEz
ZmFhYy02OWYxLTQyNTgtOTRlNy0xMTI4YzdhNTI4ZWEvZjJhY2I3ZWItYWU1Yi0z
NDA4LTg3NWItZTAzZWNkZTQyMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhM2ZhYWMtNjlmMS00MjU4LTk0
ZTctMTEyOGM3YTUyOGVhLzYwYTNmYWFjLTY5ZjEtNDI1OC05NGU3LTExMjhjN2E1
MjhlYS5jcmwwHwYDVR0jBBgwFoAUkyTcAzQZpScbfpUr1yHoU1rxQjIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MGEzZmFhYy02OWYxLTQyNTgtOTRlNy0xMTI4
YzdhNTI4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjlqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBAkDpsufho3POpQ+ZJGcJKcsNzuX8nu00iF0hZQQO0mba4Xainc1Di
a8UWg2+pD5mHbmu66ymfxp0DKHcBOZKgwy8GH88Sn0Z2tLHpv3jrnBkCMJZIwQWu
JHp2RAHFD7pYQ1VTBCe3r2zRSuSm6pQ2G7p08ie2QFGFQ/eunWpnP8Sn6ePnT03D
1S9kUwbfX5XnSUhOrwchpcpddUW/ez15QeWYr9MT7Co2Xiq3b2tHgC/29eZrQ0qX
b1cs7wraorCRrNd4ZnDfJH0zqCv6NIJNfp7XG6L0Pdt0X5i3ANPdiI26sLc+VsJo
aZTkBqpwPbPIIFl5VpPpK2jXrxOfp14=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:06 2025 by rpki-client