Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa
File:                     24538dcc-b074-32f8-b726-fa4dcd42f595.roa (raw, json)
Hash identifier:          PRfGPxhnFKvP9ASoB9YQcNt6I+MdV9WuyY8w3HKRRL0=
Subject key identifier:   AD:98:26:2E:D4:25:84:54:DC:5C:81:75:86:5B:94:B3:99:D3:03:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AFDDA777D579F2A8A58C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.198.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:fd:da:77:7d:57:9f:2a:8a:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b554c9df-7168-44c5-875b-b8eb2c029b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:c7:77:b5:83:31:9a:19:4a:04:81:30:a6:
                    79:12:36:43:91:06:64:04:c7:7a:2c:48:94:b0:3d:
                    ea:b7:3c:6d:b5:d0:42:51:70:cb:d1:0b:01:c7:75:
                    c7:2a:4e:90:bc:a3:7e:20:2d:2c:f0:8b:35:66:ae:
                    92:0c:b4:6b:85:a9:ce:32:b5:b7:8f:41:a3:7d:fb:
                    ce:6b:82:0d:fa:d1:0e:63:22:66:c8:47:01:4c:3a:
                    74:ad:19:bc:74:fe:72:d4:59:c3:10:5a:c3:41:b7:
                    4a:39:b8:78:bf:51:a6:d3:da:86:d7:a2:90:a8:2e:
                    b7:33:57:83:23:05:d5:84:7f:31:51:c0:f7:c8:40:
                    ea:33:0c:99:82:73:16:6b:38:dc:3b:60:3a:13:60:
                    26:3b:20:53:be:69:05:7f:db:d6:4a:79:a0:37:52:
                    55:7f:69:9f:1c:7c:18:ce:51:4c:0d:45:c8:fb:13:
                    d2:4b:bb:26:41:ee:27:2f:f4:fd:09:a6:9c:a1:69:
                    3f:81:db:28:85:62:09:8c:63:5e:9d:b8:37:2d:53:
                    94:a1:d0:02:95:34:ab:a5:23:f3:79:3a:f3:ab:f2:
                    2f:b6:30:31:c3:8f:3c:d8:b7:91:e5:71:d6:88:a6:
                    0d:70:07:ba:58:36:af:33:1b:fa:6b:f4:82:1b:75:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:26:2E:D4:25:84:54:DC:5C:81:75:86:5B:94:B3:99:D3:03:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/24538dcc-b074-32f8-b726-fa4dcd42f595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:9b:0c:67:84:f9:96:02:74:d2:99:8e:98:d9:48:94:81:
         20:8c:fb:92:d9:5d:32:2c:37:3a:6e:5b:8f:7c:1e:a2:8d:62:
         8a:15:ca:d8:9a:97:60:e2:3e:c3:5d:e2:6d:7a:37:82:28:00:
         a1:dc:ee:a6:75:09:92:46:0d:24:d9:c1:6c:b4:44:87:08:a3:
         ca:ab:88:d5:02:00:55:1e:57:52:82:a8:6f:30:c4:d3:86:77:
         04:ed:d5:d3:19:e6:e3:29:03:4c:a7:41:c3:7b:18:3e:24:ec:
         1c:54:c8:87:67:0f:b7:3d:cc:2c:85:35:f5:4b:14:c2:65:27:
         48:00:ff:0b:98:92:e5:a8:f9:e6:57:dd:f4:39:13:84:79:c5:
         97:ed:0b:86:ee:b1:48:8a:c8:2f:2a:a4:2d:44:1c:2d:b0:f2:
         0d:91:bd:69:87:6d:78:26:91:12:e2:fa:34:4c:57:c0:c0:60:
         0c:36:0b:ae:27:c2:7e:2b:ea:e4:72:66:4d:19:a2:50:44:97:
         49:fa:c0:c7:17:f3:6d:bf:6a:ee:c0:fe:a3:2f:44:f3:b4:02:
         d5:ef:48:96:b9:dd:70:61:80:72:7a:cf:96:7b:23:a2:ca:70:
         af:0c:c7:67:11:77:32:1b:80:a0:41:4c:12:4e:98:ba:d4:09:
         d9:58:2b:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKv3ad31XnyqKWMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjU1NGM5ZGYtNzE2OC00NGM1LTg3NWItYjhlYjJjMDI5YjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3zHd7WDMZoZSgSBMKZ5EjZDkQZkBMd6LEiU
sD3qtzxttdBCUXDL0QsBx3XHKk6QvKN+IC0s8Is1Zq6SDLRrhanOMrW3j0GjffvO
a4IN+tEOYyJmyEcBTDp0rRm8dP5y1FnDEFrDQbdKObh4v1Gm09qG16KQqC63M1eD
IwXVhH8xUcD3yEDqMwyZgnMWazjcO2A6E2AmOyBTvmkFf9vWSnmgN1JVf2mfHHwY
zlFMDUXI+xPSS7smQe4nL/T9CaacoWk/gdsohWIJjGNenbg3LVOUodAClTSrpSPz
eTrzq/IvtjAxw4882LeR5XHWiKYNcAe6WDavMxv6a/SCG3UGLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2YJi7UJYRU3FyBdYZblLOZ0wNHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQ1MzhkY2MtYjA3NC0z
MmY4LWI3MjYtZmE0ZGNkNDJmNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8Y4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiMmwxnhPmWAnTSmY6Y2UiUgSCM+5LZXTIsNzpuW498HqKNYooVytia
l2DiPsNd4m16N4IoAKHc7qZ1CZJGDSTZwWy0RIcIo8qriNUCAFUeV1KCqG8wxNOG
dwTt1dMZ5uMpA0ynQcN7GD4k7BxUyIdnD7c9zCyFNfVLFMJlJ0gA/wuYkuWo+eZX
3fQ5E4R5xZftC4busUiKyC8qpC1EHC2w8g2RvWmHbXgmkRLi+jRMV8DAYAw2C64n
wn4r6uRyZk0ZolBEl0n6wMcX822/au7A/qMvRPO0AtXvSJa53XBhgHJ6z5Z7I6LK
cK8Mx2cRdzIbgKBBTBJOmLrUCdlYK14=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:35:55 2025 by rpki-client