Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa
File:                     8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa (raw, json)
Hash identifier:          5PMBR8KMnJ/xSJKYr+KwdgsiMrPte0tNgXST8UGGwmo=
Subject key identifier:   A4:52:B9:F6:26:57:F2:52:A8:3A:5B:85:21:BA:A4:32:E1:11:FE:8A
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858483E1AA248E00FB0F504D91F40
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        216.234.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:a2:48:e0:0f:b0:f5:04:d9:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=890c5547-7e14-4dfd-9fc4-f2bcf15a9ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:8b:42:f4:40:ce:cd:87:5c:96:7d:50:1a:
                    56:ee:fd:8e:71:96:07:6d:8a:87:19:4b:43:15:8d:
                    45:26:00:00:e4:cb:34:48:df:1c:28:71:6a:4d:d5:
                    39:c8:12:4e:24:97:5f:4d:c8:4f:63:21:f0:f4:4a:
                    39:d1:0f:02:02:86:44:b7:c9:7a:db:cd:61:bb:bd:
                    23:24:c6:40:52:55:e5:9f:e8:4b:91:07:82:7a:d1:
                    ee:a7:b2:d3:77:5d:b6:e9:26:81:b4:65:fa:3d:98:
                    82:e3:96:b0:a4:cf:5f:54:b4:b5:be:19:b8:be:f6:
                    74:c8:76:27:89:43:7f:0a:98:d1:f1:09:94:6c:12:
                    3c:3b:b3:71:a7:a9:96:35:25:4b:e7:0d:98:a7:0b:
                    62:ae:8e:6e:ae:34:1c:a5:94:da:f1:89:72:70:7d:
                    d3:dd:6a:56:ec:e2:42:f4:03:ab:60:dd:b5:42:d1:
                    0a:f5:fd:ee:d6:b5:1a:6f:4e:55:d3:07:af:97:ee:
                    80:6f:de:f7:ec:3e:9f:de:7c:75:80:88:cd:52:f8:
                    29:13:50:c8:1d:2e:70:3f:92:bb:39:ff:ff:49:f4:
                    3b:c7:3a:10:74:44:e0:a2:94:ca:a3:bb:71:04:55:
                    87:6d:f6:aa:5d:9b:4e:07:11:cc:2a:fb:73:d3:9d:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:B9:F6:26:57:F2:52:A8:3A:5B:85:21:BA:A4:32:E1:11:FE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:cf:b0:45:6c:77:1b:d5:6a:29:00:0d:e8:06:b8:03:14:
         7b:91:88:e7:77:da:2a:3d:e4:67:39:ad:89:65:10:a1:e0:c5:
         79:a6:22:d2:36:55:af:bf:98:3b:23:1d:e1:cf:4d:91:fa:e3:
         c6:b8:94:c4:1a:ef:6e:88:38:84:ef:53:d7:b7:88:2a:18:38:
         bd:10:25:32:ca:ca:2a:25:be:23:53:d4:0c:6d:f4:a7:4a:3d:
         a2:22:9d:0d:a1:9a:52:be:d1:46:58:51:94:7a:cc:db:f4:f5:
         b9:d9:68:48:69:29:e4:b3:8e:aa:10:c2:e1:a1:16:6a:d4:ab:
         9f:af:7e:86:0c:97:16:1b:07:bf:44:57:bf:c7:39:8f:69:73:
         b6:ab:94:a4:c7:cd:ca:33:7a:ab:7a:29:cf:c4:5a:f9:29:32:
         44:ae:15:d9:13:ca:4c:40:37:46:b5:93:17:48:06:84:52:a6:
         fe:77:f0:c2:00:ed:9d:da:3b:d7:79:b9:de:31:ed:11:f5:e7:
         f6:6d:9c:d5:c8:fd:36:6d:54:78:f9:f8:e2:f6:27:2d:7b:ab:
         78:0d:fa:01:b2:92:bc:91:eb:0e:0a:ad:2b:34:17:23:79:80:
         d7:77:5b:6c:4f:ee:5a:73:c1:7c:0c:3e:94:a1:37:83:bd:88:
         99:22:1a:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqJI4A+w9QTZH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
ODkwYzU1NDctN2UxNC00ZGZkLTlmYzQtZjJiY2YxNWE5ZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOqLQvRAzs2HXJZ9UBpW7v2OcZYHbYqHGUtD
FY1FJgAA5Ms0SN8cKHFqTdU5yBJOJJdfTchPYyHw9Eo50Q8CAoZEt8l6281hu70j
JMZAUlXln+hLkQeCetHup7LTd1226SaBtGX6PZiC45awpM9fVLS1vhm4vvZ0yHYn
iUN/CpjR8QmUbBI8O7Nxp6mWNSVL5w2Ypwtiro5urjQcpZTa8YlycH3T3WpW7OJC
9AOrYN21QtEK9f3u1rUab05V0wevl+6Ab9737D6f3nx1gIjNUvgpE1DIHS5wP5K7
Of//SfQ7xzoQdETgopTKo7txBFWHbfaqXZtOBxHMKvtz051jEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRSufYmV/JSqDpbhSG6pDLhEf6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvOGViMmUxNWEtY2YyMi0z
ZGMwLTg2NzMtZjQwMjRiYzI4MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKAnz7BFbHcb1WopAA3oBrgDFHuRiOd32io95Gc5rYllEKHgxXmmItI2
Va+/mDsjHeHPTZH648a4lMQa726IOITvU9e3iCoYOL0QJTLKyiolviNT1Axt9KdK
PaIinQ2hmlK+0UZYUZR6zNv09bnZaEhpKeSzjqoQwuGhFmrUq5+vfoYMlxYbB79E
V7/HOY9pc7arlKTHzcozeqt6Kc/EWvkpMkSuFdkTykxAN0a1kxdIBoRSpv538MIA
7Z3aO9d5ud4x7RH15/ZtnNXI/TZtVHj5+OL2Jy17q3gN+gGykryR6w4KrSs0FyN5
gNd3W2xP7lpzwXwMPpShN4O9iJkiGpc=
-----END CERTIFICATE-----