Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa
File:                     56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa (raw, json)
Hash identifier:          7DdShSSS7tbB5S2oKnj6KFj4JFr02W6pUJd9R9FDJxA=
Subject key identifier:   B4:1E:29:2E:EC:00:13:1C:E9:90:89:1F:0A:CD:7E:A4:CD:0F:C2:6B
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F432858482BF54FBD55AA8FA3F16E4CF0
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     7212
IP address blocks:        129.59.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:4f:bd:55:aa:8f:a3:f1:6e:4c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=9fa54bd2-beb9-40ae-b1bd-a737f574513f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:ac:58:dc:e1:5b:5c:fe:ae:19:8d:66:be:
                    e4:0c:76:94:4c:e7:ad:f9:0f:1a:b6:55:42:7e:de:
                    1e:66:be:0d:1f:f2:0d:66:82:23:47:10:fe:33:f0:
                    87:e4:1f:64:ee:f3:cd:31:01:88:a5:28:ed:04:7f:
                    9a:f7:40:db:03:c5:48:42:2c:99:3d:fa:36:81:4b:
                    0a:c0:04:d6:9c:06:da:48:31:2d:65:0a:c5:4e:43:
                    61:d6:ef:f1:a8:7a:61:bb:20:a4:db:10:84:53:54:
                    0a:77:5e:23:c7:37:42:89:c1:6b:4e:a8:51:48:9e:
                    c5:14:24:e5:26:7e:c1:9e:65:7d:5c:9d:94:35:e9:
                    46:bd:8b:96:77:15:a7:e8:42:f5:90:13:83:51:b4:
                    06:18:37:c0:03:e0:50:3d:74:c7:a8:2f:d9:db:ff:
                    3b:cc:6d:ee:52:09:5f:fd:35:34:46:00:e0:41:b4:
                    37:d4:3a:d5:ad:5b:64:a1:e1:33:8d:56:28:f5:a5:
                    28:a5:b1:b2:f6:72:f8:87:69:4d:8a:a4:a3:74:82:
                    2e:8d:3a:dc:55:78:33:11:30:e4:e6:71:6c:71:5a:
                    5e:7d:8b:1d:44:29:1a:ad:b0:e4:fa:f0:51:f1:38:
                    f5:01:31:42:e2:c0:c7:d6:32:e9:59:85:28:8e:e9:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1E:29:2E:EC:00:13:1C:E9:90:89:1F:0A:CD:7E:A4:CD:0F:C2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.59.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:04:af:fd:c2:7c:4a:f8:dd:2d:cd:9d:a5:01:22:1b:36:ec:
         d2:af:89:dd:64:f4:c0:15:15:72:c4:09:8b:d3:66:6b:1f:23:
         1c:f4:fd:53:ee:aa:d9:9d:1b:49:df:fa:30:5d:a0:e5:fa:a3:
         7a:8d:06:c3:23:19:ab:d6:c5:64:85:4a:ef:66:4c:79:38:a1:
         21:cb:67:ba:49:a5:85:c7:e8:ec:55:44:5e:f5:a5:86:e0:0b:
         e0:d0:9b:08:79:4e:ae:ed:9e:b4:a7:73:f1:04:24:ab:96:f6:
         e9:37:71:22:4f:ec:00:4a:e1:7b:d2:14:d9:20:59:01:93:b8:
         10:72:7a:e8:c0:e2:05:80:52:34:7d:94:c5:e1:22:34:c0:63:
         d4:bb:7b:e2:3e:6e:ba:d7:d0:d0:82:98:25:93:24:1c:fd:6b:
         63:3a:31:d5:32:50:3c:a7:0f:05:7f:68:90:68:e7:92:6e:67:
         5c:29:e4:ab:a5:42:0a:86:bc:82:42:be:b7:73:18:52:22:b0:
         8d:c9:a4:dd:83:53:1b:7e:73:9f:0b:42:6c:be:5d:99:ec:d2:
         ed:63:e5:12:ef:20:b0:29:3b:26:9f:2d:96:e4:f4:ca:8c:2d:
         9b:bc:84:24:39:75:da:72:a0:e5:d6:f3:30:1f:58:14:fa:b2:
         84:a4:c8:78
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgr9U+9VaqPo/FuTPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWFjMDA4OTQtNWUxNy00ZTE0LWI4ZWItYjdmYjM0OGFk
MWMyMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OWZhNTRiZDItYmViOS00MGFlLWIxYmQtYTczN2Y1NzQ1MTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWGsWNzhW1z+rhmNZr7kDHaUTOet+Q8atlVC
ft4eZr4NH/INZoIjRxD+M/CH5B9k7vPNMQGIpSjtBH+a90DbA8VIQiyZPfo2gUsK
wATWnAbaSDEtZQrFTkNh1u/xqHphuyCk2xCEU1QKd14jxzdCicFrTqhRSJ7FFCTl
Jn7BnmV9XJ2UNelGvYuWdxWn6EL1kBODUbQGGDfAA+BQPXTHqC/Z2/87zG3uUglf
/TU0RgDgQbQ31DrVrVtkoeEzjVYo9aUopbGy9nL4h2lNiqSjdIIujTrcVXgzETDk
5nFscVpefYsdRCkarbDk+vBR8Tj1ATFC4sDH1jLpWYUojumgOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLQeKS7sABMc6ZCJHwrNfqTND8JrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMw
MDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4YWQxYzIvNTZkZTgzZWQtNGNiZC0z
MTU0LTlhOTUtYTU0YjdhMWI3ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWFjMDA4OTQtNWUxNy00ZTE0LWI4
ZWItYjdmYjM0OGFkMWMyL2VhYzAwODk0LTVlMTctNGUxNC1iOGViLWI3ZmIzNDhh
ZDFjMi5jcmwwHwYDVR0jBBgwFoAUwYzMbm96JB9XCrDBoqjJfPoxvcUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2Zi
MzQ4YWQxYzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgTswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASgSv/cJ8SvjdLc2dpQEiGzbs0q+J3WT0wBUVcsQJi9Nmax8jHPT9U+6q
2Z0bSd/6MF2g5fqjeo0GwyMZq9bFZIVK72ZMeTihIctnukmlhcfo7FVEXvWlhuAL
4NCbCHlOru2etKdz8QQkq5b26TdxIk/sAErhe9IU2SBZAZO4EHJ66MDiBYBSNH2U
xeEiNMBj1Lt74j5uutfQ0IKYJZMkHP1rYzox1TJQPKcPBX9okGjnkm5nXCnkq6VC
Coa8gkK+t3MYUiKwjcmk3YNTG35znwtCbL5dmezS7WPlEu8gsCk7Jp8tluT0yowt
m7yEJDl12nKg5dbzMB9YFPqyhKTIeA==
-----END CERTIFICATE-----
Generated at Tue May 13 04:55:10 2025 by rpki-client