Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/282b6536-c698-30b9-bc71-40c069359579.roa
File:                     282b6536-c698-30b9-bc71-40c069359579.roa (raw, json)
Hash identifier:          LA1LXTsRDB+YSr7mbH/d4JoWTS58Z3UwnE5lKGgWXr8=
Subject key identifier:   8F:09:48:1C:8B:0C:75:1D:E8:19:87:55:D7:83:70:89:71:A8:D0:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A618A3150FDCF3C332520
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/282b6536-c698-30b9-bc71-40c069359579.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:61:8a:31:50:fd:cf:3c:33:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=adcb5d49-c06d-4b18-95e6-16722e4a2911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:04:23:06:4f:37:41:6e:a4:15:a9:d4:40:4b:
                    62:f8:c0:2a:da:eb:ec:92:e2:b4:2a:d4:68:8b:6d:
                    ea:1e:17:a0:ab:f3:f8:6f:16:49:23:ef:45:ff:1f:
                    89:71:1f:a7:fb:98:7e:ea:96:49:98:32:7f:e4:5c:
                    91:26:c9:fb:84:04:dc:27:b2:53:0f:6f:09:61:e0:
                    f6:85:38:e9:38:64:36:7e:2f:f8:3b:09:0e:40:2e:
                    bb:b6:43:91:5f:f7:45:e5:59:ca:6f:9a:e9:9c:cd:
                    08:c8:72:10:32:02:83:71:c7:15:58:73:0b:7a:42:
                    3a:74:79:32:4d:80:01:f6:fd:e4:c5:6c:83:00:4b:
                    79:40:41:5a:4d:a6:15:85:76:1d:1c:d4:69:d3:cc:
                    cc:24:a6:c2:bc:2b:92:1f:8e:3b:1e:71:b6:69:06:
                    3d:fc:5d:43:fd:0d:9c:a2:18:58:9a:47:38:9b:6a:
                    b9:89:7c:77:fc:e7:c4:34:1d:0c:06:32:b9:29:a7:
                    ac:bc:7b:dd:93:4d:8f:0e:30:c5:29:cf:e8:e7:97:
                    f1:dc:64:25:40:02:a9:f7:d7:e5:00:18:c0:8c:c8:
                    de:71:83:37:f1:bc:c7:e5:e5:2f:d4:61:b4:5c:79:
                    35:07:ff:a9:f4:ef:5e:d0:98:29:96:c8:10:e3:8f:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:09:48:1C:8B:0C:75:1D:E8:19:87:55:D7:83:70:89:71:A8:D0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/282b6536-c698-30b9-bc71-40c069359579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:eb:b2:e7:aa:a3:97:0e:8e:0e:2c:9e:4c:b4:24:0a:6c:e0:
         e1:d6:a5:80:10:fc:52:c3:10:7b:7d:13:4f:e0:88:34:e4:d9:
         9e:86:66:15:70:ca:cc:d9:31:52:c4:24:41:52:b5:4d:b5:75:
         94:86:41:92:12:01:f3:aa:3c:3c:69:11:a5:ae:68:50:d4:58:
         25:7b:dc:0b:2d:b8:e4:89:be:18:fa:4d:68:e6:88:de:96:35:
         a5:3d:46:2e:9e:44:1b:90:35:cd:15:dd:07:bb:71:29:fc:9c:
         87:6c:ef:c4:b5:61:c0:4d:4a:05:68:4e:0b:0d:0c:7e:8e:f7:
         e0:21:bf:3b:c3:55:1e:c2:54:55:01:57:64:d4:58:71:df:41:
         62:89:45:c7:1c:e2:4f:a2:8f:9a:45:6d:79:41:ce:61:2d:e3:
         ff:77:e5:58:63:37:8c:e2:e7:e6:27:0b:5f:c1:9e:21:61:8b:
         85:e2:7d:98:3c:e4:ff:85:65:97:a5:89:a7:05:20:b1:d6:3d:
         31:44:0f:38:71:17:82:ec:2f:03:d8:24:ce:66:5c:78:85:ee:
         f2:c2:91:c0:e5:9e:93:87:23:42:7a:d1:6f:d2:f1:45:da:83:
         7b:d3:db:66:fe:6a:d1:e1:96:ed:08:76:85:06:ce:50:48:ed:
         98:ff:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:08 2025 by rpki-client