Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa
File:                     00b53504-d201-3183-abec-a767fa62601e.roa (raw, json)
Hash identifier:          lOJ38niOyIU3t2AVOxdUTNHP6W5SKIVkGZTN2tq/8qs=
Subject key identifier:   AF:03:DC:15:58:EC:FE:FD:49:4E:78:14:8F:1D:32:7D:A2:48:60:68
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF5B58E50B7EE90F06F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f5:b5:8e:50:b7:ee:90:f0:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6454c77d-934a-4edd-a02c-45aec9534b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:85:51:c2:ec:ad:26:d7:fa:61:b5:ea:9f:
                    e5:ca:46:86:aa:85:fa:cd:0f:6e:b4:f8:a3:55:32:
                    16:ff:1e:ee:d8:41:cd:52:7d:56:69:63:4d:d9:40:
                    1e:65:63:ab:d2:6d:6d:b4:df:e2:00:4c:6d:e1:5f:
                    22:62:a5:fa:c2:4d:f3:5e:f8:64:1d:17:d9:62:0c:
                    fe:a6:21:99:e6:5c:b1:e4:00:a7:de:55:22:4b:97:
                    2b:69:14:2f:56:fb:68:3b:4f:42:c2:4c:fe:db:cc:
                    05:a8:65:0a:4b:c4:5a:0a:5a:b7:5e:f4:2d:d3:74:
                    cd:d7:af:e3:dc:14:53:11:ce:86:97:97:1f:21:85:
                    1a:31:82:25:48:9c:61:1c:54:c1:c7:fd:f0:2c:72:
                    4a:b4:50:db:4d:5f:7c:77:e7:70:04:ca:9e:3d:82:
                    84:a3:33:a7:d7:34:5b:5d:54:b9:9e:0c:f3:e2:60:
                    b9:cd:a1:ba:a5:ed:ec:01:1a:0e:de:e2:cd:d7:9c:
                    24:60:c2:86:90:0a:31:91:43:49:88:04:40:fb:b5:
                    56:99:2f:90:f4:99:aa:a8:ac:3a:ce:de:7b:bd:42:
                    8d:65:85:ae:c4:80:22:29:66:2a:f1:18:f6:c8:2b:
                    f5:51:a5:4d:71:f4:da:69:ec:03:90:99:ec:57:69:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:DC:15:58:EC:FE:FD:49:4E:78:14:8F:1D:32:7D:A2:48:60:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00b53504-d201-3183-abec-a767fa62601e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:54:9c:87:6f:d3:3c:0a:11:b3:ae:98:9f:7a:43:0f:6b:
         50:8b:ab:47:a2:dd:49:0b:30:ac:b7:89:30:fb:88:83:23:aa:
         7b:eb:9c:9a:e0:18:2a:d1:f0:1d:8c:2c:e5:a1:63:a3:b6:aa:
         bd:4e:b7:93:27:da:07:d3:e6:64:2e:95:bf:bf:e3:87:10:e1:
         d2:1e:c9:e0:94:42:4d:f1:07:41:9c:6b:3e:f2:65:08:9b:0e:
         f5:be:67:b0:17:a3:6a:5f:04:6f:e0:f2:79:4c:32:c1:ca:ad:
         13:e9:e5:3b:79:c5:76:84:17:5c:10:97:f7:06:02:83:6e:c3:
         e0:1a:ab:46:cd:2f:e3:61:a7:46:3f:73:59:b9:f6:13:5d:02:
         0d:5c:1f:63:13:dd:26:55:de:d2:a9:67:e6:3e:74:cd:70:24:
         84:27:f7:24:bf:11:74:f1:e7:f6:86:4d:d0:ff:d3:33:40:80:
         1e:d7:c7:f4:54:b5:ee:56:68:9a:c1:a9:08:ab:88:78:9a:62:
         d9:b9:e2:c9:bf:00:23:15:8d:d6:f1:d6:25:72:08:2e:93:47:
         33:f1:09:cc:d7:a3:d3:66:56:b3:cd:e1:e1:b3:41:22:56:9c:
         ad:5b:0e:17:1b:ca:82:54:a8:f9:0c:9d:bd:b8:9e:f2:a6:93:
         77:fe:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:06:11 2025 by rpki-client