Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/edcb6103-74d8-3026-aa47-9fd588b85bf5.roa
File:                     edcb6103-74d8-3026-aa47-9fd588b85bf5.roa (raw, json)
Hash identifier:          LKeBd/G4vxxguE18JlVSsEmvDsZQAY62XRt8R65lvI8=
Subject key identifier:   77:08:22:34:E6:37:C9:D0:44:5D:D7:98:15:69:02:FE:0B:45:C6:6F
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584819CFE12303DFF600274C6580
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/edcb6103-74d8-3026-aa47-9fd588b85bf5.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     25899
IP address blocks:        67.59.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e1:23:03:df:f6:00:27:4c:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=3dfc0c09-22b6-45da-bc88-6e59035c3562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:49:11:81:33:8b:8b:79:02:52:2d:1d:5f:
                    7b:c5:6a:b3:ee:3b:7a:6a:18:6d:4a:45:b6:02:08:
                    fe:15:e7:b0:e1:e0:df:d8:c1:87:30:e8:67:bd:3c:
                    bb:0d:16:65:58:0e:47:4f:c7:a7:f3:15:d8:68:29:
                    ff:52:2a:25:0b:10:4b:df:05:5f:cb:35:fe:70:96:
                    5a:09:a7:fe:6d:5f:28:bf:e6:9f:b0:29:6c:2d:50:
                    7c:89:f0:c9:55:aa:1f:23:73:a9:66:f8:bf:74:b7:
                    8b:c0:67:94:e9:27:9d:1e:14:9e:58:bf:6d:c4:1e:
                    bc:1d:a9:f5:d7:5b:1d:91:72:b2:d2:d6:ac:6a:c4:
                    d3:be:dc:5f:64:0d:03:d6:4d:cc:10:54:d3:c2:59:
                    6a:b0:c9:62:f4:da:9f:6f:36:0c:f8:76:cd:40:79:
                    5b:db:60:40:10:ae:0f:4c:1e:59:7e:52:53:0b:12:
                    e8:87:0f:08:91:b3:a3:ae:94:16:11:ba:09:f6:04:
                    1a:5b:98:c3:45:98:56:87:44:70:91:fc:89:9f:c6:
                    e7:fc:86:c7:a8:2c:94:4f:e3:44:18:39:f3:71:30:
                    0f:13:9e:c6:73:88:c7:65:26:48:42:b6:9f:b9:a8:
                    78:a5:57:a4:85:d2:45:5c:00:fe:2d:e1:08:1b:e6:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:22:34:E6:37:C9:D0:44:5D:D7:98:15:69:02:FE:0B:45:C6:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/edcb6103-74d8-3026-aa47-9fd588b85bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:db:ee:e7:ff:7d:40:44:f6:ee:94:ba:b9:e4:ce:6c:7c:
         b3:94:86:80:c2:4b:a6:84:f4:30:ed:77:83:61:02:8d:11:71:
         ce:37:89:a0:dc:26:be:d1:21:ca:18:fc:5c:62:e9:20:1c:bc:
         b8:a7:57:e4:68:cd:0c:a6:24:f3:91:cf:3b:a9:27:18:68:d7:
         aa:b8:df:52:2a:f8:3d:37:55:60:96:93:d1:f7:6b:20:08:de:
         0f:37:7f:3d:52:b6:39:c3:ec:e1:5d:44:9d:56:5b:45:7f:15:
         e1:7d:47:7f:8e:0a:f0:a1:a2:ba:28:79:fc:b8:5a:49:4f:4a:
         7c:d7:c8:a2:3c:80:19:94:3b:0e:70:1f:49:d9:52:58:03:14:
         0d:a7:1a:d0:67:ee:b9:7c:39:f0:fc:e0:a5:18:26:41:10:23:
         49:ae:ee:70:61:01:1f:bd:54:c9:75:45:00:44:b4:4f:36:57:
         4c:83:9e:63:2a:95:b0:9f:cf:f6:c1:14:91:cf:79:a2:3d:f1:
         09:ba:a4:e4:b1:97:08:c7:c3:3e:93:b9:7c:17:d2:56:b6:9e:
         49:8f:3f:95:4a:60:40:8a:11:c3:e5:c1:3a:88:8f:24:93:d3:
         6f:f5:ec:20:0f:a1:e5:64:89:ff:08:2a:3e:e9:63:f1:78:e6:
         0b:bb:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:13:54 2025 by rpki-client