Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa
File:                     60a013d0-02a4-37bc-80b4-e210514778da.roa (raw, json)
Hash identifier:          txey2qM9SIYeh1/zsOrIXewwa00sF6Da2kcEhOtZPFg=
Subject key identifier:   2C:AB:81:B7:78:64:D3:81:4E:7B:A9:33:87:BB:11:9C:85:A9:10:0F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5822F3BEE6D16E255DF2640
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.251.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2f:3b:ee:6d:16:e2:55:df:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=59c3f24c-1b17-4166-93c8-3fd90b8f580d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:35:98:ae:79:b1:04:dc:b4:c6:a5:12:0e:
                    8c:de:64:39:83:a1:3a:69:a3:14:b6:7d:0f:81:43:
                    5e:bf:b3:0d:b9:73:db:a4:b2:22:69:bb:77:52:9d:
                    60:e2:09:d4:dd:8f:ca:37:68:df:5e:ac:98:82:a8:
                    a7:12:1f:29:82:51:24:40:d1:3b:d7:9d:e4:12:ce:
                    b3:7c:9c:a4:21:16:2e:dd:92:03:d8:e2:49:c8:2a:
                    3b:dc:b7:74:f5:d0:f8:ac:b3:1c:e3:27:b4:4f:79:
                    b9:2f:22:80:85:35:3f:9a:d7:2e:aa:cc:fc:c2:6a:
                    cb:bb:a4:d9:24:d2:45:da:cd:92:28:95:75:8e:12:
                    80:23:bc:4d:ce:4c:3d:db:cd:a8:5d:97:37:e3:c4:
                    5e:0e:85:45:8b:26:fc:5d:a6:02:81:7c:9c:18:20:
                    14:a9:b8:f3:da:45:17:31:a6:10:a7:3b:e8:7b:60:
                    ed:f0:b7:ed:97:b7:fc:24:73:86:cb:31:2a:f7:f9:
                    35:85:0d:f6:6e:3e:48:2e:e5:55:16:2f:a3:a1:0e:
                    ca:27:ac:c4:e2:d4:50:4c:6f:a8:90:55:8b:75:8d:
                    fe:6c:ae:50:a8:a4:2b:d7:f7:c9:26:3a:7d:75:15:
                    ad:be:83:5c:4f:83:cc:e7:a5:e4:70:22:e9:57:54:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:81:B7:78:64:D3:81:4E:7B:A9:33:87:BB:11:9C:85:A9:10:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a3:9a:bb:87:ce:e5:62:35:84:99:51:b0:08:1e:a0:ee:2f:
         1c:92:2f:81:a2:1f:d6:d2:23:5e:1d:e9:8e:3f:e1:24:34:cb:
         37:95:1f:61:0d:e4:b3:a4:42:42:67:13:05:29:7e:c4:81:03:
         62:ae:c0:68:58:9f:0c:f2:47:85:ed:0a:d4:b5:5a:85:9f:9a:
         27:3c:74:d8:b2:d4:6b:ad:df:8f:5d:d6:e1:e6:ec:a7:1c:79:
         97:5f:4a:b3:1d:39:b6:9c:8d:9e:6f:d7:e3:40:51:d1:c1:59:
         49:80:12:7f:fc:65:8e:f9:8e:5f:78:7c:ae:3a:3d:15:20:e0:
         a0:9e:17:64:8d:7b:fa:89:1d:6b:74:5e:08:da:e1:35:f7:88:
         50:ca:3a:dd:d5:2a:bd:1e:6b:5f:48:8d:05:f5:b3:7c:b8:07:
         03:44:35:5a:18:7f:13:46:a7:c4:e2:1b:95:c5:a2:7f:f2:8d:
         59:68:00:81:6d:cd:11:46:93:d2:e6:0d:13:fd:ce:59:32:e4:
         38:61:bc:88:2e:54:ea:ae:3e:c6:70:81:63:e0:e8:5b:bb:17:
         51:7e:f4:50:6c:88:1b:82:fc:af:04:78:57:99:78:96:4e:02:
         c4:20:c9:95:70:0e:e6:1d:e5:2f:c1:1e:55:1d:3a:90:ec:6b:
         58:d2:3b:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi877m0W4lXfJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTljM2YyNGMtMWIxNy00MTY2LTkzYzgtM2ZkOTBiOGY1ODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoto1mK55sQTctMalEg6M3mQ5g6E6aaMUtn0P
gUNev7MNuXPbpLIiabt3Up1g4gnU3Y/KN2jfXqyYgqinEh8pglEkQNE7153kEs6z
fJykIRYu3ZID2OJJyCo73Ld09dD4rLMc4ye0T3m5LyKAhTU/mtcuqsz8wmrLu6TZ
JNJF2s2SKJV1jhKAI7xNzkw9282oXZc348ReDoVFiyb8XaYCgXycGCAUqbjz2kUX
MaYQpzvoe2Dt8Lftl7f8JHOGyzEq9/k1hQ32bj5ILuVVFi+joQ7KJ6zE4tRQTG+o
kFWLdY3+bK5QqKQr1/fJJjp9dRWtvoNcT4PM56XkcCLpV1RUMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyrgbd4ZNOBTnupM4e7EZyFqRAPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjBhMDEzZDAtMDJhNC0z
N2JjLTgwYjQtZTIxMDUxNDc3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvskMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOjmruHzuViNYSZUbAIHqDuLxySL4GiH9bSI14d6Y4/4SQ0yzeVH2EN
5LOkQkJnEwUpfsSBA2KuwGhYnwzyR4XtCtS1WoWfmic8dNiy1Gut349d1uHm7Kcc
eZdfSrMdObacjZ5v1+NAUdHBWUmAEn/8ZY75jl94fK46PRUg4KCeF2SNe/qJHWt0
Xgja4TX3iFDKOt3VKr0ea19IjQX1s3y4BwNENVoYfxNGp8TiG5XFon/yjVloAIFt
zRFGk9LmDRP9zlky5DhhvIguVOquPsZwgWPg6Fu7F1F+9FBsiBuC/K8EeFeZeJZO
AsQgyZVwDuYd5S/BHlUdOpDsa1jSO30=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:50:02 2025 by rpki-client