Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/bf102fe4-9e52-3302-9214-95617b2bce6f.roa
File:                     bf102fe4-9e52-3302-9214-95617b2bce6f.roa (raw, json)
Hash identifier:          GyRy+Cm2HS7tpY3E01qPbu3edILNdfJ3p8wYPLcCuoo=
Subject key identifier:   05:3D:79:0E:88:88:44:D1:19:9D:6B:02:94:E1:09:96:6D:6F:2E:8E
Certificate issuer:       /CN=46d53077-7648-422a-806b-3635119b5b4c
Certificate serial:       010D0C9F43285848037B6F29C3F968225C879D00
Authority key identifier: 4B:75:3C:0A:A8:02:7A:F1:D2:7D:7A:62:7F:BD:57:EC:F3:5A:F9:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/bf102fe4-9e52-3302-9214-95617b2bce6f.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     46783
IP address blocks:        199.245.100.0/24 maxlen: 24
                          199.245.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:6f:29:c3:f9:68:22:5c:87:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d53077-7648-422a-806b-3635119b5b4c
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=7c4d7422-16b2-45a7-8e2f-ef7efa6d6387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:d1:93:32:80:cb:c1:f5:46:0f:e8:fa:d7:
                    d9:c6:93:61:8f:22:c0:e8:01:15:38:d8:fe:5b:41:
                    b8:68:ab:06:23:18:b1:75:c4:3b:38:52:63:f5:c7:
                    8f:e3:0b:f3:80:7a:5b:21:b3:ae:22:b1:50:5d:7f:
                    00:05:1b:84:79:76:8e:66:48:fc:22:df:fd:08:f7:
                    a8:91:0c:24:5e:72:4f:0a:18:fb:a0:d0:53:1f:f3:
                    72:3f:65:42:c1:62:23:2d:d6:20:28:4d:20:5a:b3:
                    d9:50:06:41:d6:f9:76:bb:1c:f2:ce:57:41:ae:67:
                    bf:28:c5:f7:a0:4e:e0:ee:24:c5:42:75:52:d9:b6:
                    76:9a:89:d1:cd:7e:fa:5c:f1:1a:6d:24:24:54:67:
                    47:aa:7b:0f:c4:80:69:a1:5c:b6:b6:d2:4e:19:d7:
                    e2:2d:e1:6f:e5:9f:60:7c:7f:23:75:bc:b0:28:16:
                    8b:42:ca:f3:11:88:11:40:80:7b:47:d0:cb:bb:8e:
                    07:f7:69:07:b1:d0:0b:a8:82:86:2e:43:25:6c:5c:
                    b8:a1:30:97:ee:41:0a:7e:cb:b9:86:12:fc:78:c8:
                    a9:31:ab:d1:b6:27:30:16:0d:86:81:d4:66:3e:d9:
                    03:45:fd:08:25:c4:0e:03:e6:5f:d1:bb:e2:f9:c2:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:79:0E:88:88:44:D1:19:9D:6B:02:94:E1:09:96:6D:6F:2E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/bf102fe4-9e52-3302-9214-95617b2bce6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c/46d53077-7648-422a-806b-3635119b5b4c.crl

            X509v3 Authority Key Identifier:
                keyid:4B:75:3C:0A:A8:02:7A:F1:D2:7D:7A:62:7F:BD:57:EC:F3:5A:F9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/46d53077-7648-422a-806b-3635119b5b4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:51:46:f2:8c:b1:20:4c:9a:80:0e:1e:55:94:78:c3:49:df:
         8f:97:08:60:83:07:3a:26:8b:00:c0:7e:aa:56:06:f8:ba:8c:
         e1:08:c7:c4:a7:64:8d:b7:f4:0a:52:ee:4c:eb:9b:37:02:f7:
         1f:f1:f7:92:cb:83:6d:b4:8e:94:7e:85:b1:a6:a5:ba:b3:06:
         44:dc:e6:b1:3d:dd:35:54:95:ba:3a:25:dc:ca:63:1b:99:a2:
         3e:dd:dc:e4:56:d7:7e:33:37:c0:23:d7:de:3e:aa:4c:ac:f4:
         5c:75:ba:3d:0d:81:79:72:d7:02:de:81:dd:98:ce:fa:05:d6:
         1f:c5:8a:7d:a3:66:f8:26:c0:d2:23:5e:ec:d0:24:01:4e:c2:
         94:97:60:5a:76:ff:18:85:08:32:d2:cf:fb:12:54:a2:b9:ca:
         99:f4:1f:73:90:e5:b5:21:da:c8:29:b5:da:19:da:30:58:50:
         18:db:75:fd:37:a7:f6:66:f4:d0:9c:40:78:4a:1f:d2:64:56:
         31:55:d7:d8:6d:76:c5:bd:b1:61:a0:3a:c0:43:99:2f:30:15:
         c5:05:c4:c3:f2:4a:4f:10:22:95:51:ea:44:33:e4:a5:e7:fd:
         45:6a:e7:06:44:89:b5:3b:38:88:63:c1:93:51:ab:c5:51:14:
         69:d3:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:44:33 2025 by rpki-client