Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa
File:                     4cddd1e8-4a48-3dbd-885a-05195287e404.roa (raw, json)
Hash identifier:          IDiiTUz6ZhpxuzP3mV1wnfBaU6DaQIYOd0TqmBcj6TI=
Subject key identifier:   6C:5E:9C:16:04:D9:43:FF:28:7E:31:AB:15:BC:EF:10:1E:43:48:F4
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858481C9A8AFD2E0B89CD1FD4A000
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     23875
IP address blocks:        63.216.59.0/24 maxlen: 24
                          63.216.61.0/24 maxlen: 24
                          63.216.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:8a:fd:2e:0b:89:cd:1f:d4:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=94aa5168-c116-4450-b469-424486f90378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:a9:68:36:cb:25:15:25:ce:aa:e2:a5:63:
                    f5:db:cf:d6:8c:98:5a:82:93:5e:5b:49:3b:9f:8b:
                    36:8d:49:02:d8:06:ad:dd:3b:44:7c:24:3d:bc:7a:
                    9d:69:48:11:2a:91:9f:19:75:37:b7:13:0d:a4:63:
                    ea:5c:0f:0f:ff:02:91:86:d6:73:18:f1:82:51:ca:
                    4b:20:e2:8c:51:41:cb:86:13:39:d1:2f:b6:60:e8:
                    3b:cb:6d:cb:fb:00:45:4c:83:fc:29:fb:c2:53:64:
                    9b:a1:16:a9:0a:a9:98:bd:83:46:9d:04:24:d8:8f:
                    0d:91:e0:d4:01:2b:76:de:1d:ac:4c:ed:34:7e:7b:
                    66:df:72:ed:86:14:aa:4f:a0:6f:22:6c:7e:9f:ec:
                    76:59:15:0d:f2:ab:e2:8d:13:d9:d8:ab:ab:01:b7:
                    52:b7:11:f2:18:30:66:6d:66:a5:10:8e:a8:39:e7:
                    d7:77:ae:0c:61:d4:ac:29:d8:42:fd:60:0b:9b:73:
                    73:eb:61:49:74:a3:02:31:5a:27:e6:59:63:7f:78:
                    94:c5:a5:69:31:73:2e:8e:eb:35:55:0a:d1:b2:71:
                    fd:5f:e1:39:ec:23:b2:aa:e6:bd:3a:e9:27:61:b0:
                    be:fe:8d:72:da:8b:00:3c:d4:da:68:56:d0:8d:2e:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:9C:16:04:D9:43:FF:28:7E:31:AB:15:BC:EF:10:1E:43:48:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.59.0/24
                  63.216.61.0-63.216.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:72:e9:40:87:93:86:a1:47:5d:af:e8:a4:17:e7:8e:08:
         5a:a0:d7:c0:f9:cb:3c:0d:14:e7:f0:55:3b:a6:df:39:6b:50:
         2c:f3:fc:23:b9:4c:62:19:22:c5:fe:1e:63:1b:b3:81:45:35:
         d6:23:44:cd:5a:33:dc:5e:67:76:c0:64:d7:f1:b9:33:66:57:
         04:5a:c4:de:27:7e:96:5d:92:1e:8d:79:6f:3c:5b:41:25:c8:
         0b:14:c1:60:bf:99:de:f8:e1:26:6b:34:67:99:7b:00:58:23:
         53:61:57:d4:dc:ca:ea:09:a7:5d:bf:fd:9c:58:88:dd:bd:56:
         04:b2:07:cb:3e:a0:f8:0d:8c:a6:fb:1a:ec:fd:de:6b:8c:a5:
         51:97:7e:53:82:20:2f:f0:62:29:a8:a7:e1:44:11:ec:a3:66:
         6c:29:17:a0:49:e4:7c:c3:d5:a8:50:33:90:b5:f7:44:7d:fb:
         d5:b3:c9:b6:c0:bb:c6:aa:1c:32:0a:66:41:5e:04:b1:75:7c:
         9b:cb:75:e4:49:6e:4d:52:cc:18:28:66:52:0f:d4:8a:8f:c3:
         69:f5:96:3d:9d:06:57:7d:ef:87:d1:35:63:4d:9b:cc:66:fb:
         9e:42:70:97:3f:e6:8e:6f:3f:12:6b:a6:f3:1a:e5:93:8d:34:
         8e:ae:1d:01
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEgcmor9LguJzR/UoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
OTRhYTUxNjgtYzExNi00NDUwLWI0NjktNDI0NDg2ZjkwMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPOpaDbLJRUlzqripWP128/WjJhagpNeW0k7
n4s2jUkC2Aat3TtEfCQ9vHqdaUgRKpGfGXU3txMNpGPqXA8P/wKRhtZzGPGCUcpL
IOKMUUHLhhM50S+2YOg7y23L+wBFTIP8KfvCU2SboRapCqmYvYNGnQQk2I8NkeDU
ASt23h2sTO00fntm33LthhSqT6BvImx+n+x2WRUN8qvijRPZ2KurAbdStxHyGDBm
bWalEI6oOefXd64MYdSsKdhC/WALm3Nz62FJdKMCMVon5lljf3iUxaVpMXMujus1
VQrRsnH9X+E57COyqua9OuknYbC+/o1y2osAPNTaaFbQjS7c8wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFGxenBYE2UP/KH4xqxW87xAeQ0j0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNGNkZGQxZTgtNGE0OC0z
ZGJkLTg4NWEtMDUxOTUyODdlNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAP9g7MAwD
BAA/2D0DBAA/2D4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAGfxy6UCHk4ahR12v6KQX544IWqDXwPnLPA0U
5/BVO6bfOWtQLPP8I7lMYhkixf4eYxuzgUU11iNEzVoz3F5ndsBk1/G5M2ZXBFrE
3id+ll2SHo15bzxbQSXICxTBYL+Z3vjhJms0Z5l7AFgjU2FX1NzK6gmnXb/9nFiI
3b1WBLIHyz6g+A2Mpvsa7P3ea4ylUZd+U4IgL/BiKain4UQR7KNmbCkXoEnkfMPV
qFAzkLX3RH371bPJtsC7xqocMgpmQV4EsXV8m8t15EluTVLMGChmUg/Uio/DafWW
PZ0GV33vh9E1Y02bzGb7nkJwlz/mjm8/Emum8xrlk400jq4dAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:28 2025 by rpki-client