Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26362edd-1fd6-32c0-91b6-e244e8c5fab6.roa
File:                     26362edd-1fd6-32c0-91b6-e244e8c5fab6.roa (raw, json)
Hash identifier:          OuqJuZPGs+GiP4xr4hHBoTLe8gpgBnwcDGAJj55SQko=
Subject key identifier:   D0:A9:FF:04:9C:68:BD:3F:14:4A:9F:98:AC:69:BB:0B:A3:28:02:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3A3168102767B462EB90
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26362edd-1fd6-32c0-91b6-e244e8c5fab6.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3a:31:68:10:27:67:b4:62:eb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=df74586b-560e-4c36-8385-a4360e6487c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:76:d1:48:74:87:ef:fb:be:71:a6:f4:c2:
                    57:f4:8c:3d:1a:0f:fb:c0:bd:63:c4:57:39:89:33:
                    c6:8e:c7:ee:7b:b7:a3:ab:45:39:95:8f:c8:04:6d:
                    0f:67:45:75:22:7c:d0:c1:9a:1a:02:b3:9d:ec:94:
                    d5:81:a0:fb:4e:bd:60:74:f5:99:e3:26:ae:92:da:
                    f8:bd:fe:84:7f:10:f2:37:3d:24:4b:10:97:98:6b:
                    ff:6d:e1:38:86:29:79:aa:2d:1d:50:e3:05:78:78:
                    63:de:e9:a2:b0:10:60:42:83:a5:8e:33:21:8b:03:
                    24:ab:ff:e1:4f:9a:41:30:ec:91:b7:0f:b2:71:3c:
                    d7:e2:48:7c:da:cc:95:c6:79:58:a5:c9:65:22:a8:
                    dc:fe:8c:04:be:d0:7d:fb:6b:87:dd:d1:04:e2:1b:
                    fa:ea:4f:ab:dc:38:f0:32:cb:93:93:03:00:da:19:
                    99:a5:60:f7:88:1e:b7:9f:d3:7a:22:22:4e:c1:fb:
                    75:dc:6a:01:16:8f:36:ab:7c:0c:9c:3d:e3:79:e1:
                    eb:66:9f:1f:34:2b:09:43:0a:68:bf:52:e9:f0:71:
                    24:96:5b:f0:bc:ef:c4:cc:e9:bc:a6:c0:38:b2:c5:
                    9f:1f:a9:fc:a4:3c:33:bd:16:78:35:48:eb:c1:7e:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A9:FF:04:9C:68:BD:3F:14:4A:9F:98:AC:69:BB:0B:A3:28:02:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26362edd-1fd6-32c0-91b6-e244e8c5fab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:70:ea:7a:44:ff:39:a9:61:06:3d:f0:b1:4b:8b:c4:75:79:
         5e:df:16:87:87:89:e7:de:b0:34:60:74:43:f9:9e:43:6b:8e:
         c0:a2:8d:e6:a5:41:44:e6:21:94:fb:4a:22:6b:8e:f3:cf:98:
         c7:78:98:4e:50:52:e8:70:4a:06:39:c9:79:2c:8b:8f:d4:2f:
         d8:17:19:fb:53:fe:5c:5c:61:a1:ea:b7:bb:4f:42:2a:2c:bd:
         10:96:e3:6e:b6:be:f3:17:00:ee:7e:9e:2d:d7:b7:62:cb:b3:
         4c:ed:a7:aa:56:53:b8:a6:2f:13:8f:1c:c1:96:33:5b:ed:f4:
         e4:9f:a3:d4:d4:34:fb:77:d1:cf:2c:c3:bf:e1:79:20:ee:24:
         d3:69:d7:72:4e:d3:c7:55:d1:2b:27:25:57:8f:37:da:49:78:
         2e:fd:f5:d6:66:10:35:22:dc:a0:b0:84:17:03:f5:a7:71:49:
         ac:a5:a8:5c:e0:20:fd:dc:2a:6e:a5:38:a6:7b:6e:5d:40:76:
         0e:c7:3a:d4:1b:ce:ba:25:5c:36:83:0a:c2:52:81:51:5e:8c:
         76:b6:92:4b:db:fe:15:f2:de:b6:b2:7d:33:ff:a9:58:8c:58:
         9f:23:d2:ad:40:76:b5:2c:72:52:f5:5e:50:bc:ae:63:a0:cb:
         f2:17:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:12 2025 by rpki-client