Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2b60bb16-5e02-367c-94b9-b2b069234fee.roa
File:                     2b60bb16-5e02-367c-94b9-b2b069234fee.roa (raw, json)
Hash identifier:          jz+KIlzGJxeLedDm7Q1Fu55kF4oJw2Sy+lmXLLGcRA8=
Subject key identifier:   0F:B0:4C:18:77:14:C2:23:C4:03:FE:F6:3F:32:55:94:05:4A:F0:6D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858485470205D8E26E9DAE80FF080
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2b60bb16-5e02-367c-94b9-b2b069234fee.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     13938
IP address blocks:        65.51.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:20:5d:8e:26:e9:da:e8:0f:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=da2007f7-a0fd-437b-8b88-e636848e09fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:89:b0:d7:4b:97:8b:92:f4:7d:20:4e:bc:
                    1d:35:b6:f8:02:f1:b1:d4:a3:7b:61:44:4e:5e:15:
                    a8:82:63:be:6e:a2:a8:64:8f:3f:cb:d7:40:8a:91:
                    18:c1:88:8f:ca:7e:45:69:ad:54:04:bd:94:e6:10:
                    7a:04:cd:38:e3:b3:a3:77:48:d5:a7:2a:fa:12:dc:
                    a9:19:36:75:ea:25:04:b9:63:84:ad:82:df:a5:3b:
                    54:74:0e:8a:54:19:2b:a2:b9:87:68:84:7c:de:86:
                    0e:7a:67:d9:d0:e5:c6:3d:0d:b7:cb:36:65:a1:74:
                    a5:2e:ee:2c:67:aa:88:9e:50:93:d2:14:45:89:9b:
                    5a:4e:c4:59:1b:b5:a7:c0:20:bc:4b:26:94:b2:81:
                    da:48:b5:e9:25:37:af:c9:88:1b:c2:e1:83:dc:d1:
                    a3:b6:1b:ed:3b:40:46:25:19:36:7b:4d:a7:de:ac:
                    82:9e:ad:d4:91:87:68:c6:14:67:b4:dd:b0:c0:58:
                    b9:fd:7d:9f:ed:dd:df:86:76:fb:e5:8c:a7:b3:03:
                    ee:b8:c8:eb:b3:64:13:43:5b:7d:e5:5c:8d:e9:2e:
                    cc:98:e7:22:5d:1f:b6:2f:ef:29:c4:b2:5a:13:34:
                    91:10:ef:e7:48:79:a6:71:35:d6:1f:26:3b:50:55:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B0:4C:18:77:14:C2:23:C4:03:FE:F6:3F:32:55:94:05:4A:F0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2b60bb16-5e02-367c-94b9-b2b069234fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:de:e2:aa:e5:4e:6c:1a:01:e7:ca:23:27:fc:f0:a0:dc:be:
         b9:a6:50:4f:d3:45:9d:a1:a0:58:9f:93:b0:fe:0a:fb:f8:1b:
         0c:d7:a5:2b:69:e2:6f:4f:ec:a2:11:ee:61:86:68:8e:25:10:
         9c:19:9d:26:53:06:c7:c0:ca:16:69:98:85:11:f8:dd:0c:37:
         2b:0c:9f:7d:3d:d3:2a:ef:f0:36:c5:40:1f:7b:ef:a8:ba:e0:
         b3:53:88:87:30:cb:4b:45:31:31:57:b9:05:e8:59:9e:7e:79:
         cd:4a:12:18:3c:42:42:8f:08:56:15:3d:ce:f6:3e:15:16:81:
         3a:2f:c6:7e:21:7e:57:99:21:42:89:b5:d2:de:b8:88:7d:d6:
         d2:22:6f:55:61:3d:39:19:5b:5e:48:b0:cc:f3:6f:de:f7:69:
         67:1b:0f:c2:b3:81:05:f6:b6:9e:8b:90:4b:df:c4:2a:41:f6:
         91:05:05:0c:d9:4e:c3:57:6f:7c:04:9f:59:a6:15:a4:6d:c8:
         ca:29:32:d5:f0:79:4f:f1:5b:62:d9:8d:fa:c6:e9:ab:ee:24:
         c2:ea:a3:d2:79:d8:7a:09:1d:62:56:03:d8:f9:6f:bb:6d:a5:
         be:a5:b3:0d:81:10:20:2b:29:38:ad:80:74:e0:c7:05:06:a7:
         85:2e:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:23:23 2025 by rpki-client