Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa
File:                     3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa (raw, json)
Hash identifier:          DwB5gGRkt/uIQyAISBzvN+Qp90C9r3p9alszGQm0GFc=
Subject key identifier:   5D:76:C6:20:72:9E:B6:82:89:96:FC:6C:26:05:5F:03:93:42:08:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3317315BC6152CD7B2B6
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        67.54.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:33:17:31:5b:c6:15:2c:d7:b2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ce4c19b0-b3f7-4e79-b61f-c30f2ce8712c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:8d:b1:75:11:80:9b:0e:02:4e:52:21:2f:
                    65:b8:0e:85:31:67:bf:65:d4:5b:7a:f9:43:a0:18:
                    26:10:b0:69:a3:20:e5:92:be:78:b6:16:83:31:1f:
                    3b:f7:35:95:3b:a6:64:24:0f:1c:42:e0:c1:4a:c8:
                    bf:29:72:96:f1:18:ea:57:ee:b8:dd:f8:b9:6a:7b:
                    b3:58:61:aa:64:4c:25:82:ab:a7:2e:0a:2d:9c:be:
                    91:16:4a:78:f4:39:14:2a:24:aa:a4:cd:4a:64:e2:
                    d6:10:13:64:cf:b4:2b:3c:a2:1b:ad:6b:4d:6d:43:
                    ec:62:75:3d:5e:58:0b:d4:2c:98:f7:b5:54:94:ec:
                    77:4e:8b:49:2b:93:27:ab:2d:f0:79:46:3a:db:ae:
                    80:15:ad:11:23:43:ab:4a:dd:20:cb:75:97:88:86:
                    5c:bb:7b:11:df:1b:73:39:24:17:b3:d7:bf:1d:36:
                    63:84:35:70:72:bb:b3:ec:73:98:b2:de:5d:d4:4c:
                    07:cb:7b:06:60:6a:a9:ca:d3:07:d4:f7:94:ae:78:
                    ec:11:7e:ec:51:7c:84:3d:7e:52:61:34:de:c2:da:
                    61:44:6e:3b:9c:52:1d:52:db:78:d9:32:f8:f0:af:
                    38:a6:c6:2d:9a:20:0d:4a:29:24:4d:b6:a7:7e:0a:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:76:C6:20:72:9E:B6:82:89:96:FC:6C:26:05:5F:03:93:42:08:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:4b:6e:3e:f4:32:2d:7e:d4:05:df:b9:d8:c5:c4:1b:9b:
         a0:60:ef:b5:d0:4b:49:f0:83:6d:17:aa:09:32:2f:1d:38:08:
         59:e3:74:db:6d:d9:8b:64:10:0e:5e:93:a7:dd:71:c0:d1:66:
         80:9f:a9:6f:c2:a6:8c:b0:72:7e:c2:c5:9a:f7:f9:1b:28:2b:
         a4:b6:0f:29:35:e0:3d:da:b7:d7:46:96:9e:b2:bf:4d:98:c2:
         f6:aa:c5:dd:21:7f:8f:bd:fe:55:a3:e6:05:1c:50:51:d2:f9:
         a1:53:9c:25:5a:2d:b1:89:e1:f4:a7:8a:b0:d8:50:a6:07:a9:
         fd:db:26:4f:5f:d1:f9:d0:bd:25:c6:1e:d5:e2:f2:bf:f5:4e:
         0a:01:35:01:ae:d6:6a:67:77:03:7a:f3:8a:e6:46:e5:f0:6f:
         a6:10:ae:4c:99:c5:6e:40:ff:6b:02:8b:2a:20:4e:b5:0c:ab:
         0c:ff:e4:b3:79:e1:24:cb:03:a8:30:e4:23:11:ad:e2:b0:fe:
         df:6a:1c:f6:a9:c8:6b:ba:a5:09:d2:8e:4b:1e:81:82:46:d8:
         0b:c6:42:9c:ab:2a:ed:5b:a7:f7:7e:c2:49:c0:84:00:ab:fc:
         40:58:25:5a:fa:29:db:5f:f9:4f:09:13:d0:fd:ff:7b:69:18:
         de:67:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:53 2025 by rpki-client