Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa
File:                     21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa (raw, json)
Hash identifier:          ZzKbEq6mjRa0kh9XBC7BxYgcjXQNkoLtcObsqL8aMys=
Subject key identifier:   11:0B:E1:98:DC:A1:7E:F3:7A:17:3A:BE:00:25:E6:C6:F5:43:FD:3D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A938CFF68C5F067559980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.63.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:93:8c:ff:68:c5:f0:67:55:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2d288612-6ac6-4888-888a-8733b7b8d3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:fd:a0:1b:c5:54:6e:c3:c0:8a:9b:4a:15:
                    7e:9e:1b:53:e5:49:11:1f:3b:da:1a:7a:d7:eb:de:
                    45:cf:2c:e4:a5:10:49:46:6c:be:b5:fa:46:cc:af:
                    71:76:ee:65:c9:f9:f9:82:b7:c6:8c:b0:10:69:5b:
                    e4:e9:37:96:7b:03:c2:33:84:76:9c:53:d9:50:3b:
                    59:f9:55:1a:8e:34:99:8f:3e:8e:d5:ca:ff:3a:ec:
                    95:ab:a4:97:13:eb:cb:d6:5b:69:dd:6a:6f:e3:e3:
                    a3:f4:8d:af:74:49:0a:2f:ce:32:18:e5:86:a1:33:
                    78:6b:bc:34:6b:60:3a:b5:75:4e:d0:d9:3b:f6:d9:
                    55:c8:5e:0c:26:0d:ad:36:e0:9c:30:25:98:28:22:
                    47:f9:a9:3e:2c:5f:99:1d:82:2b:6a:1b:f2:3b:e7:
                    ff:65:e1:d7:a5:ea:3f:47:ad:43:a1:17:2b:c1:6b:
                    89:77:dd:8e:a8:83:dc:20:dd:46:03:da:dd:df:ee:
                    f5:60:bd:3a:4f:c8:e1:6e:bc:eb:4a:10:e9:b7:21:
                    92:ba:8f:c8:5d:ac:f2:1d:ec:97:0f:fb:ef:a8:ac:
                    1d:05:dc:b3:5b:b0:6d:d7:25:35:d3:88:70:c3:d4:
                    e0:05:22:69:57:e6:df:cb:8b:04:b7:c9:d4:11:5b:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:E1:98:DC:A1:7E:F3:7A:17:3A:BE:00:25:E6:C6:F5:43:FD:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cdd9c9-bc56-36e4-ad8d-aca31c6ed36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1a:3b:69:0d:d3:db:3a:88:69:eb:32:cd:b2:c2:db:7b:eb:
         cd:a3:07:32:d3:9c:82:52:03:af:7e:ee:fc:9d:bf:c7:05:f1:
         93:5e:6a:61:13:2e:e8:17:19:67:d2:30:e0:fd:9a:07:25:f5:
         d4:f3:9a:5a:df:7f:e9:4c:d9:cd:1b:0f:71:64:72:69:72:97:
         30:15:09:84:6d:17:19:55:5a:21:6a:05:2b:95:e9:6b:27:08:
         13:00:33:04:7c:b4:85:a4:7c:82:94:d0:a5:a6:fa:b1:c1:87:
         1b:7f:2f:15:e5:5f:3f:08:76:ca:11:c2:4d:25:7d:d8:44:c7:
         55:ed:78:65:06:94:5c:24:de:2f:cd:6d:6e:dd:8f:e4:32:2c:
         84:21:07:3a:d4:5c:dc:9d:d1:db:ab:e3:ab:f2:9c:28:a7:2e:
         3e:d0:49:7b:fe:16:34:48:ac:52:59:81:c9:e9:fc:62:86:36:
         e7:65:be:3f:46:54:6e:f5:02:78:d0:47:0e:33:f8:77:60:d2:
         41:98:b0:77:a4:3b:97:bf:05:f9:00:78:f6:6f:03:e5:c0:13:
         08:0d:92:8e:82:af:98:b0:a2:ac:39:1d:56:74:4d:1e:4c:2e:
         de:37:05:ad:e2:3a:c3:1b:be:18:b8:8b:39:ff:c6:b4:3e:9d:
         d2:81:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:17 2025 by rpki-client