Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f8b5fb-1906-31bc-939f-09520140e6a6.roa
File:                     59f8b5fb-1906-31bc-939f-09520140e6a6.roa (raw, json)
Hash identifier:          yk6c+9WMWXWLi4A5OXDi3ynJpvVo6NGXptdgNaA2oEA=
Subject key identifier:   88:33:BF:C0:97:23:40:7A:1D:E4:FD:6E:68:17:AB:06:BF:FB:38:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848222FEE124B240DBB06FCB540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f8b5fb-1906-31bc-939f-09520140e6a6.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     45758
IP address blocks:        96.6.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:ee:12:4b:24:0d:bb:06:fc:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=9fa171f6-0a40-43ef-a471-ff3a1d66b37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:3c:ac:13:77:6e:15:92:5b:7d:40:c4:c3:
                    a2:24:4e:c9:d5:d0:6d:4e:6b:3d:7c:32:b2:3a:2f:
                    d1:50:bc:54:20:64:d9:9f:a7:b6:12:d7:ed:d5:06:
                    17:43:39:5e:4d:df:d1:10:85:24:0f:f2:8c:69:55:
                    0d:2e:db:b4:52:6d:0b:68:30:58:24:8d:ab:54:da:
                    72:b8:dc:18:2f:80:7b:d9:78:4e:ec:eb:7e:62:72:
                    bb:3d:19:c3:32:86:a4:9a:3f:e3:7a:0d:1f:41:3d:
                    0c:87:55:7e:6b:a0:d4:02:4a:ed:73:d7:83:10:28:
                    72:02:79:3e:21:19:99:cd:9c:12:d8:4c:96:9d:98:
                    34:57:dd:90:b8:4d:3d:68:a1:78:a6:a9:73:88:ba:
                    86:e1:84:88:74:94:59:af:6f:6b:e2:d8:cf:a2:3a:
                    99:51:82:a1:10:80:e2:4e:d3:56:da:98:b6:15:02:
                    08:f1:3a:03:a6:21:f1:a3:bc:a8:3f:ca:74:c0:14:
                    bf:6e:fe:8c:ad:77:a2:de:05:96:c9:a0:0c:6a:d8:
                    2f:52:ab:c8:a0:f7:21:8f:75:ef:d0:23:6f:78:cf:
                    04:06:f3:bc:f3:79:01:56:cd:94:6d:d8:cd:7e:b5:
                    2e:bc:d1:e7:04:88:ca:cc:52:7e:f1:b7:59:f8:53:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:BF:C0:97:23:40:7A:1D:E4:FD:6E:68:17:AB:06:BF:FB:38:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f8b5fb-1906-31bc-939f-09520140e6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:ee:f4:11:36:91:e1:08:8b:f9:42:cd:97:4e:c6:86:2d:
         97:74:6e:53:49:99:51:a5:14:89:04:cf:dc:5e:9a:71:84:ea:
         a7:de:b3:d0:b8:ce:f2:12:b5:79:41:df:a1:23:af:8b:8c:b7:
         18:9c:e8:43:38:83:f0:4e:d3:dc:6b:8f:0e:03:9c:d6:2b:a6:
         ea:18:29:98:de:6b:d7:b0:6b:83:0b:50:ce:d9:7c:cf:ef:32:
         1d:b6:fc:1c:78:b7:83:01:f3:0d:78:26:b0:c6:17:24:53:e9:
         bf:21:3e:97:c0:e5:5d:6a:8a:a8:4b:09:68:92:9f:5c:c8:cd:
         7e:de:fc:ab:83:65:c1:23:aa:fe:da:2f:49:d4:6f:9a:bd:72:
         7c:2c:31:1a:ff:e9:f5:a3:e8:4b:f8:a9:c7:8b:69:65:33:dd:
         3e:3a:b2:32:12:01:5e:3b:0d:44:ab:ec:00:e5:69:89:ea:a8:
         14:2f:c7:09:71:fa:d8:47:21:c4:06:2e:36:ca:ca:4f:0d:78:
         dd:63:c7:74:12:47:a0:3e:b8:de:58:4f:78:47:c3:0c:36:ed:
         55:ed:aa:ee:43:26:32:0c:60:49:e8:97:7c:5c:f9:da:3c:b0:
         39:78:b3:29:6b:68:98:47:4f:a9:d4:51:90:41:b6:a2:c3:20:
         b6:84:e3:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+4SSyQNuwb8tUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
OWZhMTcxZjYtMGE0MC00M2VmLWE0NzEtZmYzYTFkNjZiMzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PA8rBN3bhWSW31AxMOiJE7J1dBtTms9fDKy
Oi/RULxUIGTZn6e2Etft1QYXQzleTd/REIUkD/KMaVUNLtu0Um0LaDBYJI2rVNpy
uNwYL4B72XhO7Ot+YnK7PRnDMoakmj/jeg0fQT0Mh1V+a6DUAkrtc9eDEChyAnk+
IRmZzZwS2EyWnZg0V92QuE09aKF4pqlziLqG4YSIdJRZr29r4tjPojqZUYKhEIDi
TtNW2pi2FQII8ToDpiHxo7yoP8p0wBS/bv6MrXei3gWWyaAMatgvUqvIoPchj3Xv
0CNveM8EBvO883kBVs2UbdjNfrUuvNHnBIjKzFJ+8bdZ+FMdQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgzv8CXI0B6HeT9bmgXqwa/+zgLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlmOGI1ZmItMTkwNi0z
MWJjLTkzOWYtMDk1MjAxNDBlNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAYpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFN97vQRNpHhCIv5Qs2XTsaGLZd0blNJmVGlFIkEz9xemnGE6qfes9C4
zvIStXlB36Ejr4uMtxic6EM4g/BO09xrjw4DnNYrpuoYKZjea9ewa4MLUM7ZfM/v
Mh22/Bx4t4MB8w14JrDGFyRT6b8hPpfA5V1qiqhLCWiSn1zIzX7e/KuDZcEjqv7a
L0nUb5q9cnwsMRr/6fWj6Ev4qceLaWUz3T46sjISAV47DUSr7ADlaYnqqBQvxwlx
+thHIcQGLjbKyk8NeN1jx3QSR6A+uN5YT3hHwww27VXtqu5DJjIMYEnol3xc+do8
sDl4sylraJhHT6nUUZBBtqLDILaE42c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:26 2025 by rpki-client