Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c7604ea-8e7b-3fcf-a918-41fe2d9ae742.roa
File:                     1c7604ea-8e7b-3fcf-a918-41fe2d9ae742.roa (raw, json)
Hash identifier:          zseT3EeF+8/WO2iIHgyQRPv+TVWYlAjWuVmbz7RR0FU=
Subject key identifier:   2C:D9:F6:D8:C4:AE:75:CD:E7:90:79:ED:04:E7:6E:33:08:2E:46:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF0EF1A8E7C4C0A15B550
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c7604ea-8e7b-3fcf-a918-41fe2d9ae742.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f0:ef:1a:8e:7c:4c:0a:15:b5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2d4822f1-be6b-4679-9fa6-fe3bde58b4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:63:96:71:f0:33:cc:f0:e4:84:e1:8a:e5:1f:
                    a3:41:0b:c2:3c:a4:a4:dd:6a:bc:56:bb:03:e4:36:
                    2c:23:6b:a3:30:f5:57:5a:b9:87:2d:69:79:e6:f7:
                    68:ae:2a:f1:08:2b:dc:04:45:3d:2e:b5:3a:94:fd:
                    8d:70:92:60:b1:75:d4:33:9c:9e:54:b9:cf:28:20:
                    f4:c9:b5:a4:b7:15:1c:31:0a:ed:3b:fb:d9:a8:0d:
                    54:56:1e:0e:1a:a9:31:06:ec:88:30:d7:29:ec:08:
                    52:2b:89:5c:4e:32:34:35:f6:b3:fa:9c:e1:4b:90:
                    30:52:a8:b3:9e:b4:d0:7a:68:e2:be:d1:8b:ba:c4:
                    92:52:da:62:f1:52:cf:68:b8:1d:4e:9f:bf:c7:3f:
                    9c:a7:d0:e7:d2:79:1f:04:10:f2:2d:13:db:13:41:
                    af:a1:b6:51:fd:35:19:df:8d:95:a4:67:aa:30:57:
                    fa:f7:31:86:3b:91:2d:65:7a:67:42:29:4f:8b:f9:
                    6c:50:b3:37:17:28:d0:15:82:ec:f9:e4:3a:2f:55:
                    27:fd:b6:66:d6:0b:fa:63:9e:3f:f6:bc:28:5c:d5:
                    db:65:53:ff:f9:4b:5a:58:88:71:ac:40:c4:30:c9:
                    d2:b0:bf:b4:6f:89:85:a6:b8:4b:69:d1:39:71:a1:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:F6:D8:C4:AE:75:CD:E7:90:79:ED:04:E7:6E:33:08:2E:46:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c7604ea-8e7b-3fcf-a918-41fe2d9ae742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:27:bd:c6:d4:93:ac:05:6c:3e:6d:1b:0c:51:b7:94:e5:5c:
         98:8f:7a:f9:e5:17:dd:02:de:91:f4:3a:17:61:6d:0e:f6:0c:
         af:5d:18:92:a5:a2:82:59:c9:46:60:88:b8:08:0d:77:fc:0c:
         d8:4c:2e:b1:db:c1:2e:30:cc:0f:0f:25:ba:f7:31:f2:66:81:
         45:e0:81:bf:d7:b7:87:fb:9c:16:2e:c0:b6:95:9c:b4:cb:20:
         95:57:fe:ab:b2:18:74:81:74:b3:97:8d:64:81:7b:9d:72:c6:
         5c:90:fc:51:f0:35:f2:a8:32:0e:23:d0:97:24:8f:a8:fb:d0:
         75:c3:cb:2c:e8:16:9b:86:ea:65:cb:76:a9:36:dc:74:8b:b3:
         1b:0c:bd:e1:5d:5f:08:0c:66:eb:ec:dc:34:83:a3:71:82:bb:
         c3:35:f6:64:36:7f:39:91:b4:2f:48:f3:54:1d:e2:60:e1:75:
         45:0f:6f:6b:42:8b:16:ed:bb:fd:da:bc:a4:66:5f:f5:f0:88:
         79:6b:7d:35:db:21:51:a6:3d:7b:92:76:c9:08:a6:9b:4e:ed:
         7c:59:8a:56:b2:37:ce:ca:03:9b:84:65:0e:68:ba:24:cd:9e:
         65:cc:d8:c2:77:ef:1c:d9:cd:69:16:ee:e7:c4:e9:2e:a8:99:
         3c:f5:d2:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKvDvGo58TAoVtVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MmQ0ODIyZjEtYmU2Yi00Njc5LTlmYTYtZmUzYmRlNThiNGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmOWcfAzzPDkhOGK5R+jQQvCPKSk3Wq8VrsD
5DYsI2ujMPVXWrmHLWl55vdorirxCCvcBEU9LrU6lP2NcJJgsXXUM5yeVLnPKCD0
ybWktxUcMQrtO/vZqA1UVh4OGqkxBuyIMNcp7AhSK4lcTjI0Nfaz+pzhS5AwUqiz
nrTQemjivtGLusSSUtpi8VLPaLgdTp+/xz+cp9Dn0nkfBBDyLRPbE0GvobZR/TUZ
342VpGeqMFf69zGGO5EtZXpnQilPi/lsULM3FyjQFYLs+eQ6L1Un/bZm1gv6Y54/
9rwoXNXbZVP/+UtaWIhxrEDEMMnSsL+0b4mFprhLadE5caEmOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzZ9tjErnXN55B57QTnbjMILkY3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWM3NjA0ZWEtOGU3Yi0z
ZmNmLWE5MTgtNDFmZTJkOWFlNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQnvcbUk6wFbD5tGwxRt5TlXJiPevnlF90C3pH0OhdhbQ72DK9dGJKl
ooJZyUZgiLgIDXf8DNhMLrHbwS4wzA8PJbr3MfJmgUXggb/Xt4f7nBYuwLaVnLTL
IJVX/quyGHSBdLOXjWSBe51yxlyQ/FHwNfKoMg4j0Jckj6j70HXDyyzoFpuG6mXL
dqk23HSLsxsMveFdXwgMZuvs3DSDo3GCu8M19mQ2fzmRtC9I81Qd4mDhdUUPb2tC
ixbtu/3avKRmX/XwiHlrfTXbIVGmPXuSdskIpptO7XxZilayN87KA5uEZQ5ouiTN
nmXM2MJ37xzZzWkW7ufE6S6omTz10iA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:31:29 2025 by rpki-client