Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/fe25528e-112b-3146-883e-78ce9a511ac9.roa
File:                     fe25528e-112b-3146-883e-78ce9a511ac9.roa (raw, json)
Hash identifier:          DxPIuQCmaFPWOUc8qXWjs4e8hLYKQtddzWS0HZAWJa8=
Subject key identifier:   C4:3C:0C:F8:56:E9:38:F0:51:28:DD:CD:B5:B6:B1:74:2C:A1:85:4C
Certificate issuer:       /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial:       010D0C9F432858480644F60124BF287C4833D380
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/fe25528e-112b-3146-883e-78ce9a511ac9.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     397047
IP address blocks:        139.60.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f6:01:24:bf:28:7c:48:33:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=00281a60-bce8-4405-97f6-82eba24f7884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:2a:64:11:05:cd:dd:ee:bd:59:35:0d:63:
                    3e:cb:ab:32:0b:ed:e6:7b:f0:e7:16:cf:1f:66:a3:
                    10:db:13:ad:40:e0:9d:2f:5d:07:20:c2:ac:39:8a:
                    ec:27:b1:e5:7c:db:aa:ac:7c:6e:c8:4a:36:5f:48:
                    d4:ee:5b:1e:99:a0:1d:70:12:43:d7:7d:89:b3:6c:
                    de:9c:9a:df:f6:97:66:fb:02:94:13:ff:3b:15:06:
                    63:fc:0d:cf:bc:ee:85:96:bf:cd:ba:d4:c5:02:ad:
                    fd:e2:fb:33:b2:1d:c8:15:9a:54:98:30:93:e3:91:
                    e6:35:48:01:4c:b1:8a:08:b3:1c:a5:e3:08:b1:a0:
                    b6:93:ac:ac:32:91:81:69:e3:7e:2a:88:f4:9e:db:
                    d6:fa:3e:2c:2e:2a:f1:26:dd:3b:7d:bd:e0:ff:ad:
                    dc:42:ec:f5:76:17:66:2a:c1:74:fd:47:10:ca:6f:
                    b3:22:7f:ef:28:71:fd:5e:67:e7:a9:68:4a:68:f2:
                    6a:35:e4:68:9b:67:9e:0a:8c:1e:85:fe:64:6d:d2:
                    6e:db:ed:ff:4a:c2:d2:e4:ac:2a:54:f4:6d:c2:1d:
                    70:23:6b:27:cb:d5:dc:77:a1:11:d7:79:18:37:39:
                    2d:bb:04:7b:f6:f7:a4:71:00:25:8d:a4:33:a0:23:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:0C:F8:56:E9:38:F0:51:28:DD:CD:B5:B6:B1:74:2C:A1:85:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/fe25528e-112b-3146-883e-78ce9a511ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl

            X509v3 Authority Key Identifier:
                keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:4e:54:32:03:ce:1f:29:e1:5b:11:fb:1f:87:13:4c:f9:
         46:45:e6:dc:1d:7b:c7:51:3f:41:30:2f:6e:9a:6c:dc:15:57:
         f1:cb:bd:fc:95:c6:9a:09:35:e2:72:ca:f2:1f:b8:ba:08:43:
         76:ab:f7:71:a0:e7:3c:23:07:6d:37:79:d6:d2:9b:b7:d4:32:
         24:1f:b6:08:74:d9:aa:84:de:59:8d:b0:97:a4:76:20:ed:4c:
         40:d6:fa:cf:6b:bc:eb:36:18:d3:e9:00:27:9c:e1:a0:bd:5e:
         15:f0:04:21:ab:1e:17:80:33:66:cc:84:46:ef:43:ad:8c:69:
         34:4c:85:6a:9f:d3:fb:aa:16:f5:ba:c8:b8:53:7d:bb:a0:4a:
         82:e5:5b:d3:33:ef:25:21:ba:b9:81:f1:27:49:c6:e7:f2:be:
         0d:60:27:30:8e:8d:f9:cb:97:85:8b:19:30:08:62:0c:04:a6:
         4a:46:96:e4:4b:3a:89:79:bc:75:57:5d:33:57:5a:81:1b:15:
         3c:ae:b4:e5:96:9e:1c:c5:18:19:87:9e:2c:f8:ea:e9:1b:94:
         62:6e:22:e8:2c:3d:4b:fd:37:5b:10:11:3b:9c:96:e6:40:2c:
         9f:df:bf:a8:21:ae:ac:b5:b8:55:59:9c:3c:36:48:b7:b5:9e:
         61:0e:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:19 2025 by rpki-client