Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa
File:                     f6ba3890-638c-37cc-80b2-c27c14be5a92.roa (raw, json)
Hash identifier:          TA562RfxyZjv7vBGeJq59IwEYUpASYu8iPsPVFWDrF4=
Subject key identifier:   21:BA:2A:47:25:55:D9:C2:03:13:76:7C:AF:14:91:19:7D:E0:9A:2F
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858483E1AA29328A8E12B7C993C00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        216.234.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:a2:93:28:a8:e1:2b:7c:99:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=4c5deba1-1997-4473-98ce-f7d212422eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:d8:6e:db:5d:5b:7b:6a:72:e8:fe:f8:b6:
                    ba:74:f1:0b:2d:a7:5d:21:37:68:3d:45:c8:91:d1:
                    2f:d6:83:68:b2:7d:ee:1b:0e:ad:ab:5c:ef:10:af:
                    a1:09:df:75:16:3d:7c:7c:1d:58:ae:98:4d:03:45:
                    0a:51:45:9d:f8:82:fa:e7:76:ba:ae:e6:28:08:28:
                    18:52:0a:28:d8:79:a8:9e:17:9f:7c:90:7c:76:bf:
                    6b:69:3d:da:07:25:a7:e6:c7:02:b3:f2:e9:5f:28:
                    af:53:35:82:69:65:7b:92:9d:ff:2b:10:c7:a1:4e:
                    e7:65:3d:96:a8:42:00:0b:56:50:0f:1c:ec:2d:00:
                    d0:7d:4f:80:e5:01:92:26:38:e0:07:2f:a5:bd:d6:
                    da:d3:6e:c7:22:ab:36:ea:73:17:db:f5:b2:00:3e:
                    58:89:66:cf:f5:65:bd:8d:37:a0:7e:32:a9:98:33:
                    4e:7a:3b:28:97:f0:dd:8c:62:fb:45:ea:28:1f:08:
                    ab:1e:95:13:4c:e4:f1:6e:43:4b:b3:45:8e:6f:2a:
                    ae:48:af:d2:18:7b:a5:6d:cf:d3:ad:a2:17:42:f8:
                    5e:75:68:04:e3:c4:1a:9c:ef:00:4f:e3:56:54:76:
                    a5:b7:2b:16:57:9a:3b:32:10:3a:ae:1f:db:19:4e:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:2A:47:25:55:D9:C2:03:13:76:7C:AF:14:91:19:7D:E0:9A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:c2:8d:8b:7a:57:90:43:10:d9:0d:68:3d:a0:38:e3:87:
         94:17:72:27:f4:a8:60:a0:a7:3f:17:52:54:36:42:f2:90:8e:
         0f:24:c6:c6:d1:60:f0:e6:c1:ca:5d:59:63:c1:2d:f3:00:09:
         46:10:27:a4:9f:dd:75:73:f6:73:42:e4:4d:33:79:1c:50:15:
         50:c2:18:3f:6d:8f:cf:2c:1e:85:35:ad:e7:3a:e0:59:2c:8e:
         90:bb:55:02:e9:59:fc:e1:b3:75:7e:a9:93:48:e3:c9:91:d2:
         71:43:49:bb:9d:fe:67:68:49:df:e5:35:4f:23:fd:93:a3:c0:
         6e:e7:55:65:7c:6e:f2:de:03:cb:be:1b:2d:b1:93:f8:22:49:
         5f:70:99:e9:8f:98:54:7e:13:d4:13:57:e3:ab:88:1b:27:ee:
         92:a1:3c:cd:f1:45:60:f2:a3:e3:24:8a:ce:a9:fa:07:c4:88:
         79:08:5d:df:d8:6c:ca:0c:11:f6:bc:77:51:d2:61:d0:0e:29:
         86:e6:c0:9f:3e:80:c5:66:17:f5:41:9a:52:fc:97:97:fc:7a:
         fe:2c:ad:ca:26:66:d5:f7:56:98:a1:52:01:16:4c:9a:fb:86:
         46:c3:e4:f7:21:54:e1:80:df:3c:bc:58:3c:1a:6c:a7:46:58:
         ea:37:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----