Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e328f74-a887-3475-a8c0-20ba801ac4d7.roa
File:                     3e328f74-a887-3475-a8c0-20ba801ac4d7.roa (raw, json)
Hash identifier:          HUy4sgi5ojk6MgJ2GXjC075l9vCzLvVwRpK9bEM5G7E=
Subject key identifier:   44:97:BF:B2:08:8C:3C:D5:12:9D:C3:04:60:88:2E:3A:36:E7:3E:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6E8C52B5DC887AB66D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e328f74-a887-3475-a8c0-20ba801ac4d7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:6e:8c:52:b5:dc:88:7a:b6:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b8f3ea76-4eb9-41bd-9a4a-47371eaa0e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:58:41:71:60:14:e3:ad:fe:95:52:a8:8e:30:
                    e4:62:2a:3d:7f:7c:46:b1:2d:10:0a:a2:61:a8:6f:
                    79:8e:8a:19:cb:54:b3:b1:a9:6f:40:07:e5:50:45:
                    05:bb:10:a9:94:ff:6e:f5:03:13:a4:d6:ae:9d:33:
                    24:a3:1d:d7:bc:56:2a:ab:10:14:b4:bc:2f:aa:f4:
                    bf:a8:b3:b0:1a:4d:8a:35:2f:0e:f3:04:9c:33:02:
                    7f:e1:ba:1c:73:cc:6b:5b:e8:d9:50:1b:e4:db:47:
                    5b:a0:e4:4f:76:de:f0:8c:7c:cb:f7:eb:9a:4e:27:
                    b2:e0:8c:c4:83:ea:10:0b:b0:50:15:73:0f:20:8d:
                    5c:78:46:b8:84:42:c6:b1:59:e2:45:10:83:61:5b:
                    12:fb:58:a4:08:6e:16:66:f6:cd:7a:1c:dd:cb:28:
                    24:81:c4:57:86:6c:47:44:4b:7f:47:cd:dc:ee:25:
                    01:51:f7:2f:75:cc:77:fd:c9:6c:3e:2f:d1:20:63:
                    a7:95:b9:16:f3:e0:ef:f1:67:99:36:19:9a:55:04:
                    7c:56:02:88:1a:72:b6:a1:ee:cb:b2:9f:a7:63:e9:
                    64:94:4a:78:90:cf:ec:69:46:b9:83:e5:29:6f:1c:
                    c1:6a:b0:bc:34:d5:f1:0f:7c:f0:28:1a:4d:85:74:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:97:BF:B2:08:8C:3C:D5:12:9D:C3:04:60:88:2E:3A:36:E7:3E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e328f74-a887-3475-a8c0-20ba801ac4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:93:8a:5f:0f:39:5f:b7:15:c5:a4:8e:61:8d:e2:7e:0a:
         e4:d6:f4:75:68:69:9f:c1:06:d3:97:6d:01:19:be:67:81:8e:
         43:bf:9a:95:eb:97:b9:26:16:86:5d:79:21:e4:47:4a:33:16:
         43:4a:f0:e6:c9:cf:8c:c2:dc:81:2c:83:2f:da:42:d2:dd:7e:
         f9:06:9e:a4:f1:83:e5:f8:25:f5:96:77:23:a1:97:e8:38:de:
         cf:bb:1e:f5:7c:1d:ac:2f:f1:28:91:d3:3c:aa:45:95:be:60:
         ed:34:2d:f9:f4:ea:3d:0a:cd:61:be:5b:a5:57:43:4a:1b:db:
         e9:b3:02:23:7d:41:b3:af:d5:46:9a:60:d9:39:78:fc:7d:9a:
         a4:38:54:9c:d9:e1:8a:ca:3b:fc:7f:9b:c0:f8:09:4a:fd:0e:
         19:97:a3:12:b3:d4:d9:59:52:ab:c3:25:7f:d0:e7:22:fa:61:
         67:63:0a:74:00:18:28:2f:7a:a5:bb:6e:33:a1:ac:ac:e4:e4:
         57:6b:04:60:a5:35:1c:cb:a7:d8:8c:25:c9:c8:32:11:8f:64:
         01:3d:78:18:df:e9:d9:12:08:b7:75:24:3f:3c:de:29:e1:85:
         db:32:d3:8b:5b:0d:2f:a9:c9:3c:a1:4b:ab:95:70:04:84:66:
         bb:65:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:17 2025 by rpki-client