Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32440121-925a-3115-b4ef-672dfb8a6c8a.roa
File:                     32440121-925a-3115-b4ef-672dfb8a6c8a.roa (raw, json)
Hash identifier:          78AU7liWpTCJRqHeEIPqjiTvCnVM/v+liALq5jFr7jc=
Subject key identifier:   44:30:F3:4A:51:5A:A0:2F:83:05:20:03:90:79:19:1E:A4:71:59:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A97F9FEC51499E7C42000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32440121-925a-3115-b4ef-672dfb8a6c8a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        198.45.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:97:f9:fe:c5:14:99:e7:c4:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1ada7350-d2a7-453d-8cf6-c372d1eea1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:b4:18:2a:c9:b4:17:57:04:4c:4b:aa:0e:
                    2d:31:b3:9f:53:05:00:c0:e5:d0:53:36:ef:29:d0:
                    24:25:c8:e4:74:7f:b6:e5:6e:85:e7:93:e7:49:17:
                    62:35:94:52:bd:e3:b7:f5:09:63:29:5e:55:75:81:
                    34:82:77:c1:4c:9a:8b:1b:67:d4:bf:cd:db:dc:5f:
                    db:ad:4a:7e:2e:19:6c:3b:0c:a8:72:e7:c5:a5:31:
                    15:82:1b:84:e4:62:34:3c:06:f8:73:56:c4:d4:b4:
                    5f:f9:86:1d:45:f1:f5:d2:27:9e:25:1d:9f:18:13:
                    51:99:4e:ee:b2:c4:4a:a8:af:d3:6c:88:48:81:1f:
                    b5:69:f9:cb:84:64:93:c0:95:29:46:2c:82:99:11:
                    a1:a4:96:a0:6e:ad:d9:2e:38:44:c0:01:4c:88:6c:
                    6a:dd:aa:07:3d:6b:d8:c9:83:61:a5:9f:41:38:95:
                    1a:c4:32:9f:2d:43:fd:5f:4f:42:d1:e0:c6:78:df:
                    e7:73:55:f8:41:07:da:2f:c8:52:aa:f5:28:3e:c5:
                    76:e4:27:4a:e3:65:20:f0:bc:c8:3b:65:a2:80:57:
                    dc:07:9e:fa:8d:7a:39:cf:1e:3e:d5:0b:90:42:3d:
                    ac:3d:fc:fc:30:d6:15:8e:b7:30:19:dd:03:9d:ce:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:30:F3:4A:51:5A:A0:2F:83:05:20:03:90:79:19:1E:A4:71:59:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32440121-925a-3115-b4ef-672dfb8a6c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:09:ee:61:45:c3:df:90:19:1a:d4:19:ee:52:b4:03:7f:
         7e:03:75:75:9b:d6:88:5a:5d:a6:4b:15:65:56:cc:ae:1d:b2:
         f0:a8:ef:bc:f7:fa:13:ad:ae:95:d1:ef:0c:1a:1c:c5:bd:6d:
         ff:bb:70:91:a2:54:7f:e7:f8:04:d6:05:22:fe:d2:44:e7:c4:
         df:77:8a:c9:51:0d:1b:c3:4c:98:ce:c5:92:f5:f5:27:e6:79:
         89:c7:5f:69:f4:42:32:6d:22:ee:4a:1a:bc:41:85:33:f5:0c:
         22:50:86:37:fd:98:e7:58:79:3f:6c:9b:8d:22:05:6e:cf:d3:
         c0:7e:89:96:c8:c4:6f:ca:8c:10:df:1c:67:87:52:c1:1f:10:
         61:1a:95:81:54:be:fe:ca:1b:4b:07:c6:23:81:2c:3a:5e:3a:
         21:79:a2:8b:b7:46:8f:2d:4c:56:22:40:c6:87:c9:c6:b4:8e:
         87:4b:9c:dc:7c:dc:1c:e0:09:ef:37:29:b4:bc:eb:5b:ea:1a:
         8d:22:46:0a:32:49:60:89:d3:01:1f:76:9a:02:9f:f9:85:76:
         68:c1:c0:0d:c8:2e:fb:5a:7a:6b:9c:4b:47:3b:a4:0f:1d:79:
         ba:e8:dd:21:2b:e0:6c:9e:ec:24:fb:29:85:a1:20:e8:19:27:
         4f:fc:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:40 2025 by rpki-client