Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/139f5a3b-b399-314b-af0a-388b3799f659.roa
File:                     139f5a3b-b399-314b-af0a-388b3799f659.roa (raw, json)
Hash identifier:          kh5cBu0T74dI0yC0GXiwLQSLZyqecknyTVbPuyTnLxY=
Subject key identifier:   59:08:2D:F7:37:29:12:A8:D3:B7:0B:15:3C:BD:FF:8A:4C:E1:90:7B
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584820CA8FF479BF9550B13D7940
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/139f5a3b-b399-314b-af0a-388b3799f659.roa
Signing time:             Sat 07 Dec 2024 14:00:51 +0000
ROA not before:           Sat 07 Dec 2024 14:00:51 +0000
ROA not after:            Fri 07 Mar 2025 14:00:51 +0000
asID:                     834
IP address blocks:        45.59.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:20:ca:8f:f4:79:bf:95:50:b1:3d:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Dec  7 14:00:51 2024 GMT
            Not After : Mar  7 14:00:51 2025 GMT
        Subject: CN=03aeea06-94dc-4957-b626-daab16536015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:af:b1:17:02:32:a7:28:30:4f:20:1a:f9:
                    5e:15:5f:a6:df:8b:06:1c:a7:09:cb:21:3f:4f:da:
                    fb:05:ce:d5:ad:8a:40:3c:88:a6:43:de:e3:75:38:
                    f5:9b:76:d6:35:5b:ee:80:f7:43:87:45:ff:76:34:
                    a9:aa:13:b9:19:a6:ef:c0:e0:93:5c:80:fa:c3:02:
                    13:81:53:38:9b:a5:b6:49:f1:81:7b:53:eb:35:58:
                    c0:19:c2:02:f8:bf:18:2a:ef:c0:7e:d0:8c:ed:64:
                    c5:4b:28:4f:1e:5e:68:84:72:52:f8:95:57:ee:5c:
                    94:30:22:1f:98:72:4f:39:ee:1e:18:f7:b5:e2:c4:
                    e2:13:fe:14:c1:01:4c:c6:03:3c:f0:23:9f:95:8d:
                    90:09:0d:85:9f:03:d5:19:68:93:ab:1e:c0:14:b8:
                    b7:3c:cf:1d:eb:ba:de:d2:bd:33:4d:ec:d3:3a:11:
                    6a:a9:4f:ed:4f:00:f8:5e:95:24:4a:44:9a:a6:3c:
                    a0:c5:e0:4f:4c:0d:9c:f6:93:94:98:b7:47:ad:52:
                    f6:17:0d:0a:ea:1f:1b:71:41:9e:65:3f:ec:bb:44:
                    68:19:96:19:9a:67:ed:b7:64:da:21:14:3f:d0:bc:
                    00:ac:5b:3f:40:60:f1:31:07:90:38:a9:a6:fd:94:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:08:2D:F7:37:29:12:A8:D3:B7:0B:15:3C:BD:FF:8A:4C:E1:90:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/139f5a3b-b399-314b-af0a-388b3799f659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:09:f1:45:95:47:30:cc:35:20:85:ab:79:00:73:e9:e2:
         94:9d:2d:9d:75:ec:7d:89:b2:03:62:4a:b6:3b:b5:7e:ef:d7:
         31:aa:2c:af:39:9c:83:88:f5:77:41:04:07:c1:a2:d0:cf:cc:
         fd:9e:a5:68:d9:28:11:55:67:6b:b7:5b:04:fd:5d:f3:89:44:
         aa:84:08:c3:20:b0:33:fd:29:22:a4:d2:5b:2a:3e:83:45:cc:
         e7:34:31:18:de:34:8d:9f:f1:2e:65:a7:89:91:a5:43:a3:54:
         19:d6:91:62:c6:ba:fd:52:41:58:42:14:39:c9:10:fb:ef:65:
         3b:47:27:af:6c:fa:fa:9d:f2:10:2e:b8:cd:82:9b:2d:a4:4b:
         e3:da:fd:00:e3:2c:ca:1a:81:72:bc:1a:87:b6:0e:21:bb:4a:
         26:6b:0c:d3:68:a9:a5:02:0f:51:6e:16:22:46:0f:6f:60:ad:
         ac:9d:5f:05:39:9a:f3:fe:3b:b0:57:38:d1:6d:a4:7f:f6:f0:
         5d:de:28:82:43:ab:48:89:b5:19:66:b0:e8:17:94:4e:97:c9:
         57:d6:e2:ae:95:73:6d:da:ce:bc:e8:cf:df:66:e7:5d:ce:96:
         3e:75:74:8b:b3:79:c2:0a:53:75:03:c4:35:54:df:92:0b:4e:
         32:85:de:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEggyo/0eb+VULE9eUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3ODQtMDJhYzNjMTQ0
NTM4MB4XDTI0MTIwNzE0MDA1MVoXDTI1MDMwNzE0MDA1MVowLzEtMCsGA1UEAxMk
MDNhZWVhMDYtOTRkYy00OTU3LWI2MjYtZGFhYjE2NTM2MDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqavsRcCMqcoME8gGvleFV+m34sGHKcJyyE/
T9r7Bc7VrYpAPIimQ97jdTj1m3bWNVvugPdDh0X/djSpqhO5GabvwOCTXID6wwIT
gVM4m6W2SfGBe1PrNVjAGcIC+L8YKu/AftCM7WTFSyhPHl5ohHJS+JVX7lyUMCIf
mHJPOe4eGPe14sTiE/4UwQFMxgM88COflY2QCQ2FnwPVGWiTqx7AFLi3PM8d67re
0r0zTezTOhFqqU/tTwD4XpUkSkSapjygxeBPTA2c9pOUmLdHrVL2Fw0K6h8bcUGe
ZT/su0RoGZYZmmftt2TaIRQ/0LwArFs/QGDxMQeQOKmm/ZQgdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkILfc3KRKo07cLFTy9/4pM4ZB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3
YzllMi02NDhjLTRjYTItODc4NC0wMmFjM2MxNDQ1MzgvMTM5ZjVhM2ItYjM5OS0z
MTRiLWFmMGEtMzg4YjM3OTlmNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3
ODQtMDJhYzNjMTQ0NTM4LzlmMDdjOWUyLTY0OGMtNGNhMi04Nzg0LTAyYWMzYzE0
NDUzOC5jcmwwHwYDVR0jBBgwFoAUZHXrfCV7cP95Mb9Xfny6xnTRzpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3YzllMi02NDhjLTRjYTItODc4NC0wMmFj
M2MxNDQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOiCfFFlUcwzDUghat5AHPp4pSdLZ117H2JsgNiSrY7tX7v1zGqLK85
nIOI9XdBBAfBotDPzP2epWjZKBFVZ2u3WwT9XfOJRKqECMMgsDP9KSKk0lsqPoNF
zOc0MRjeNI2f8S5lp4mRpUOjVBnWkWLGuv1SQVhCFDnJEPvvZTtHJ69s+vqd8hAu
uM2Cmy2kS+Pa/QDjLMoagXK8Goe2DiG7SiZrDNNoqaUCD1FuFiJGD29graydXwU5
mvP+O7BXONFtpH/28F3eKIJDq0iJtRlmsOgXlE6XyVfW4q6Vc23azrzoz99m513O
lj51dIuzecIKU3UDxDVU35ILTjKF3hI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:02 2025 by rpki-client