Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/47da0ea3-ff6f-3e5f-aba7-2ed99ba820e3.roa
File:                     47da0ea3-ff6f-3e5f-aba7-2ed99ba820e3.roa (raw, json)
Hash identifier:          9PeNDRk7HOdlftcnIFoB8GaaqVXRb5TUpJv+oapjJxk=
Subject key identifier:   13:08:76:13:BC:FD:7C:F2:11:56:54:E4:0E:62:AF:18:50:C4:84:13
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F43285847F84F808EC87906F1C74AF780
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/47da0ea3-ff6f-3e5f-aba7-2ed99ba820e3.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     40676
IP address blocks:        216.126.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:80:8e:c8:79:06:f1:c7:4a:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=9f70082a-e8cd-4494-b784-b0920fc262cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:4c:51:fc:e5:e7:66:0c:3b:7a:bd:21:89:
                    db:13:49:d3:ea:ae:69:23:2e:32:16:94:af:50:1d:
                    e1:65:37:76:bd:5b:03:26:e8:9b:56:71:91:17:2c:
                    8b:4a:40:5b:97:a6:d2:15:c5:51:78:18:b9:5b:e8:
                    f0:04:b7:f9:ba:72:35:42:2f:f7:65:73:c0:db:33:
                    59:77:e8:49:73:d6:c0:6b:96:3d:85:c6:c6:2c:2b:
                    bf:2a:b3:59:a3:13:60:27:22:3e:fc:37:f5:b3:a7:
                    14:f3:74:d0:3a:21:e2:f9:cb:19:32:02:2e:8b:45:
                    32:33:23:47:7e:b7:5c:6a:e1:c3:58:f0:76:9c:63:
                    65:96:69:d5:9d:fc:f1:e4:b3:da:77:44:c8:f7:1b:
                    c7:23:dc:9a:b2:49:40:ca:e4:02:3a:96:ea:2f:6f:
                    ea:09:1c:95:07:12:59:03:f8:53:94:21:34:73:9e:
                    2c:a3:f7:e1:3e:0f:ea:bc:b3:10:c9:58:54:24:bf:
                    7b:9e:f0:29:10:b1:36:f2:a2:35:57:16:ed:b3:1b:
                    55:16:50:a7:78:6d:38:58:30:ae:52:df:a5:0f:4d:
                    f9:10:2e:06:99:06:0b:7d:9b:e4:32:90:2f:d7:22:
                    3d:09:22:45:e2:88:b5:d9:76:ea:bc:1a:6b:70:06:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:76:13:BC:FD:7C:F2:11:56:54:E4:0E:62:AF:18:50:C4:84:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/47da0ea3-ff6f-3e5f-aba7-2ed99ba820e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:43:e8:8d:f4:7a:4e:99:80:ec:2d:69:c6:33:ce:1f:94:
         a0:cc:44:71:18:43:4e:3d:47:5b:71:00:62:dd:c0:2a:1c:b1:
         5d:c2:fa:b0:e6:3a:67:09:20:f0:fd:72:26:56:35:9e:08:9d:
         73:35:57:88:c6:4e:97:23:ea:29:6a:d3:46:0d:19:a8:35:c9:
         c9:58:1d:85:61:f3:ff:38:9e:54:6b:55:11:06:0f:c9:41:70:
         b4:33:cc:73:82:fa:f3:9b:4e:c8:36:39:4c:25:ad:d2:c1:68:
         13:a7:0b:23:90:2c:c8:25:05:26:35:ac:98:2d:b7:d7:c3:f1:
         d7:7a:7a:ee:c4:a6:f7:8d:2b:9a:7c:1a:1a:6b:a8:ab:61:91:
         a7:ee:5f:93:9f:3e:6d:ff:91:13:1c:7d:7e:6d:b6:31:4c:c4:
         e1:20:ea:71:4e:d9:23:92:64:75:37:3d:9f:78:6f:e5:15:df:
         be:5c:3e:3a:4d:fd:15:3d:f9:99:6f:89:01:0c:f7:31:8c:a2:
         f1:7a:72:eb:f5:18:59:ff:cd:30:cf:48:f0:db:38:96:17:4e:
         04:c3:ec:14:16:10:89:54:63:34:02:1b:ab:c2:ef:30:eb:4c:
         94:8c:eb:85:7a:cf:d0:7b:a4:da:f2:67:2a:31:0e:72:db:a9:
         1f:55:d6:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T4COyHkG8cdK94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
OWY3MDA4MmEtZThjZC00NDk0LWI3ODQtYjA5MjBmYzI2MmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ9MUfzl52YMO3q9IYnbE0nT6q5pIy4yFpSv
UB3hZTd2vVsDJuibVnGRFyyLSkBbl6bSFcVReBi5W+jwBLf5unI1Qi/3ZXPA2zNZ
d+hJc9bAa5Y9hcbGLCu/KrNZoxNgJyI+/Df1s6cU83TQOiHi+csZMgIui0UyMyNH
frdcauHDWPB2nGNllmnVnfzx5LPad0TI9xvHI9yasklAyuQCOpbqL2/qCRyVBxJZ
A/hTlCE0c54so/fhPg/qvLMQyVhUJL97nvApELE28qI1VxbtsxtVFlCneG04WDCu
Ut+lD035EC4GmQYLfZvkMpAv1yI9CSJF4oi12XbqvBprcAaKVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMIdhO8/XzyEVZU5A5irxhQxIQTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvNDdkYTBlYTMtZmY2Zi0z
ZTVmLWFiYTctMmVkOTliYTgyMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H47MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbgQ+iN9HpOmYDsLWnGM84flKDMRHEYQ049R1txAGLdwCocsV3C+rDm
OmcJIPD9ciZWNZ4InXM1V4jGTpcj6ilq00YNGag1yclYHYVh8/84nlRrVREGD8lB
cLQzzHOC+vObTsg2OUwlrdLBaBOnCyOQLMglBSY1rJgtt9fD8dd6eu7EpveNK5p8
GhprqKthkafuX5OfPm3/kRMcfX5ttjFMxOEg6nFO2SOSZHU3PZ94b+UV375cPjpN
/RU9+ZlviQEM9zGMovF6cuv1GFn/zTDPSPDbOJYXTgTD7BQWEIlUYzQCG6vC7zDr
TJSM64V6z9B7pNryZyoxDnLbqR9V1sg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:19:44 2025 by rpki-client