Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
File:                     d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa (raw, json)
Hash identifier:          C5aW9CyDz5eKYtFjG2H6WB1jZK4XxUsboAtMgDey/tc=
Subject key identifier:   DA:D4:C1:74:BD:31:93:4A:97:C9:A0:30:AE:F0:2D:71:9E:3A:58:99
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F432858484AAAE12E10922692CEF76E80
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        216.24.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e1:2e:10:92:26:92:ce:f7:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=97955e8d-5da2-4ae3-8bd6-1bbe4b67fbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:5a:50:5b:08:94:d0:d0:30:a2:41:af:55:
                    85:10:eb:67:f4:61:e4:6f:af:fd:6c:b4:a3:57:ca:
                    ff:5e:dd:3f:c0:db:87:5d:7e:1c:e1:cf:08:01:14:
                    a3:92:6b:92:47:24:f4:a9:08:c0:b0:ad:e4:62:f0:
                    5c:c1:f7:a1:0d:b1:b9:83:58:44:c3:05:34:36:a8:
                    a3:3b:e7:6e:9e:94:42:0e:b6:ac:50:a2:69:67:52:
                    44:09:16:b5:13:ed:84:cb:1f:bc:82:bb:17:73:a9:
                    a2:05:eb:cc:6d:ab:80:98:fc:df:39:ac:84:da:f6:
                    3f:20:38:7d:93:11:30:0b:24:2c:39:fd:22:43:75:
                    dc:e8:62:17:b7:d1:65:65:e2:c9:e1:12:b7:c0:c7:
                    02:3f:a3:4c:a3:be:5c:05:45:24:66:a0:9f:10:2d:
                    aa:ad:be:64:1c:82:a0:c7:04:ac:58:38:dd:d2:e0:
                    a0:bd:df:cb:38:b9:55:92:b8:19:e6:d5:f9:0c:70:
                    d4:ac:1c:ef:86:c9:fa:8e:05:0a:c0:64:b8:05:3f:
                    0f:a1:a6:33:e5:d4:fa:d4:15:c5:12:f5:17:c3:04:
                    90:b2:33:50:a3:d8:c8:99:9f:dd:eb:67:52:96:75:
                    21:60:ff:32:7c:bc:63:a1:ba:9e:85:63:d3:12:27:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D4:C1:74:BD:31:93:4A:97:C9:A0:30:AE:F0:2D:71:9E:3A:58:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:bb:2a:51:64:99:93:b3:c9:8a:81:a6:6d:e1:43:0a:65:
         af:08:7c:3a:5e:54:22:67:27:41:b4:fe:f4:54:c9:ae:3d:7f:
         0d:b1:b0:27:4d:f5:b6:08:07:ca:cc:c3:4e:b0:e0:e9:39:c6:
         61:01:af:8b:fa:c5:b5:f0:30:23:24:58:5e:f1:43:04:9f:13:
         96:47:57:4c:07:29:9e:e1:84:01:ce:55:b6:26:53:1b:54:71:
         01:f8:85:ba:0b:91:9c:f6:03:1f:1c:ee:5c:17:99:12:79:44:
         a7:8b:66:ef:85:97:5a:61:c7:37:3f:d5:60:9b:75:5a:91:02:
         be:7d:df:1b:de:0c:84:e1:a6:f3:b5:41:59:01:80:89:5b:d6:
         5d:7d:b8:11:ed:ce:eb:0d:6a:81:59:81:1a:d0:5b:c7:a7:47:
         49:4d:77:6a:d8:3e:f0:8f:96:43:d1:f9:0b:6f:d7:55:91:08:
         ab:a7:e1:e3:e2:a3:2a:b9:9b:9b:8b:60:2b:4f:2a:15:94:4c:
         88:bc:76:3b:dc:2b:25:8f:26:a3:e9:17:b8:e9:e6:36:51:b6:
         23:20:48:61:6c:01:59:3b:32:eb:81:24:8a:8b:cb:92:ed:82:
         c7:94:02:50:d5:d6:b4:a6:e8:a3:27:cb:25:94:e6:e4:d9:5a:
         22:6d:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:55:39 2025 by rpki-client