Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3224263a-d021-3024-b049-6ea963c89a68.roa
File:                     3224263a-d021-3024-b049-6ea963c89a68.roa (raw, json)
Hash identifier:          t5YNJW8YoNfrH6JbK3ozW8yCLjAtiweuQo1DEbUhcuY=
Subject key identifier:   9A:1A:3B:65:FD:03:A1:5A:DF:DD:DD:2D:F1:EB:A1:46:98:8F:A3:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A819BC30325A448586D20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3224263a-d021-3024-b049-6ea963c89a68.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:81:9b:c3:03:25:a4:48:58:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cca63e3e-4043-4f67-b087-4dbef884e177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:ca:21:6a:f9:7a:d2:2a:c1:33:20:26:19:
                    48:00:82:bb:46:ec:e8:6c:da:2a:33:20:c0:a3:df:
                    79:1e:0c:a1:0d:ee:ad:ba:fe:64:10:26:fe:2c:2c:
                    93:51:44:ca:98:52:95:e3:5f:cc:53:c8:ce:38:76:
                    d2:59:ea:f4:bf:17:7a:9c:c5:0f:3e:28:01:01:f4:
                    42:65:a3:b2:6f:35:f1:9f:78:e7:8c:a8:33:21:52:
                    62:2f:7d:bd:57:6b:bc:cf:96:7b:4b:40:2a:9c:68:
                    39:3c:5b:4a:81:64:a7:59:98:78:d2:74:86:95:b1:
                    f3:df:ee:3a:47:20:98:f2:19:d8:12:63:ce:c0:3d:
                    67:90:e4:f3:44:31:62:30:84:08:58:da:df:c4:1e:
                    86:bb:52:fd:fb:be:ed:02:a5:15:5a:07:03:71:ee:
                    03:6f:40:20:05:0b:50:b4:b4:6f:ab:8a:49:ca:bf:
                    98:95:da:49:29:29:44:70:9d:de:10:29:92:7d:0f:
                    9b:e4:7e:f5:c8:30:8b:67:c9:71:11:d3:e1:51:70:
                    5e:4a:cf:48:83:69:ce:bf:ac:a2:16:d3:0f:00:c1:
                    48:16:6a:3a:1e:6f:75:55:99:71:4f:4b:ba:3d:31:
                    70:b1:87:9d:77:ab:8d:af:7e:72:54:bc:4b:8e:80:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:3B:65:FD:03:A1:5A:DF:DD:DD:2D:F1:EB:A1:46:98:8F:A3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3224263a-d021-3024-b049-6ea963c89a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:b4:81:e8:f9:79:fc:ab:13:e2:e4:94:02:0f:cc:d7:4c:
         83:6c:86:62:ce:71:00:e1:80:15:5d:12:66:eb:da:2e:fa:68:
         b6:59:8c:35:41:fb:cb:29:c6:5b:2e:1a:5f:ed:8c:a3:85:6a:
         1c:97:bf:5b:98:ac:e1:94:d8:c4:b0:9b:7b:f8:64:02:4e:a3:
         d7:f3:07:2e:55:5d:58:3f:1e:a2:cd:07:06:7c:fd:d4:4e:e6:
         9a:ed:1c:b8:76:82:68:11:a8:c0:1e:b7:95:b9:f7:a6:b4:cb:
         11:de:80:d5:3c:b2:5e:46:15:38:51:8e:90:11:1d:f6:e3:7e:
         ef:2d:85:5b:9f:1c:e4:35:33:e3:88:31:79:b3:82:6b:5d:88:
         15:3f:84:c0:f4:55:a4:e7:d1:be:e8:de:08:2d:21:f4:3b:f6:
         40:cf:73:1e:0a:35:28:55:85:25:9f:da:8b:db:24:3a:9c:7f:
         11:21:88:72:9f:64:43:f9:d8:25:d4:48:9c:ed:53:2b:76:6c:
         a9:f2:fd:b7:8c:48:59:06:36:b4:1b:4a:1f:f2:d2:19:fe:9a:
         84:c7:7a:6a:99:d2:d5:36:2a:8d:27:26:67:23:83:8f:60:a7:
         69:36:72:e8:0e:b7:d5:e7:16:f7:d3:21:18:6a:59:e8:48:ea:
         ab:15:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:31 2025 by rpki-client