Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa
File:                     438239bd-ffa5-3739-be76-61c3fe8b13b8.roa (raw, json)
Hash identifier:          sHNj19+/Me53accM6Qyv9L43iVdt9Cyb38EddJmaq50=
Subject key identifier:   27:FE:6F:E8:3B:86:DB:B5:6A:B1:3E:59:4E:13:E6:56:DB:A6:5A:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0D3F8E81C871E5B85140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:0d:3f:8e:81:c8:71:e5:b8:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4c663285-f499-4ff7-bbb3-1c7f5bfff585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:b2:a7:78:05:2d:0d:c2:61:dc:9c:5d:4d:
                    75:d1:72:1b:ce:41:6d:90:b2:16:ce:34:d2:91:90:
                    ab:13:78:72:72:bf:34:40:20:e4:1f:19:1e:71:67:
                    45:ce:27:37:e0:f2:31:7b:a5:dc:01:07:b8:17:2d:
                    12:c2:eb:58:14:1a:71:9b:05:0c:0b:27:fc:ba:7c:
                    56:fc:f3:b8:07:1f:c8:40:44:5c:16:cd:7a:4b:b7:
                    02:18:4b:b6:10:b6:9d:4f:6c:4e:2d:f4:dd:67:7e:
                    f7:e4:f6:af:72:f9:12:0a:90:4e:cc:28:76:ba:99:
                    f8:13:c4:ec:7c:14:0d:c1:76:9e:c3:cc:68:97:c0:
                    0c:cd:76:cf:ca:07:3b:88:67:e1:55:8d:ea:24:f6:
                    86:f7:7a:d8:17:4a:7e:d1:17:8e:6e:30:a3:35:b8:
                    da:15:68:70:98:f1:68:d9:b5:13:8f:a1:37:9a:ff:
                    b5:7e:64:de:83:6d:ac:76:33:bf:e1:62:87:ec:18:
                    12:4a:78:1a:bc:7c:35:2b:74:dc:a2:fb:2b:1a:2a:
                    01:97:71:2e:86:54:53:e4:56:d8:1e:8d:d7:d9:d5:
                    7e:0e:62:9b:7f:5a:3c:bb:2a:ac:a0:3a:63:ad:9c:
                    65:d4:31:0a:d2:ac:9f:c3:5e:d7:da:b7:5b:66:2f:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:6F:E8:3B:86:DB:B5:6A:B1:3E:59:4E:13:E6:56:DB:A6:5A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:d6:04:1e:a8:c7:c2:4b:38:b3:45:73:a6:3a:42:96:5a:
         f4:95:fc:09:7a:4c:fe:72:a7:f0:8a:ce:9b:59:81:fc:26:65:
         5b:c7:1f:a3:01:b1:b5:2d:23:1b:a4:44:39:bf:38:ad:f4:5a:
         47:83:c1:4c:13:11:44:01:fd:82:66:b8:87:f3:20:8a:1c:45:
         b8:ff:95:7a:fc:ed:1f:40:21:c3:c7:08:f1:62:7b:a6:b5:76:
         8e:9c:f3:02:a1:f2:ae:ba:bf:c7:97:d7:ec:7d:6f:12:b5:75:
         ed:0c:ee:fb:c0:9d:73:b1:4f:85:d5:39:fe:6a:ad:52:e4:25:
         ae:d4:da:18:10:22:cf:4f:4f:d4:0e:54:9c:ad:41:63:7f:94:
         f6:6f:b4:0c:6c:89:da:2e:38:ae:e0:94:f6:55:4c:8a:c0:fd:
         95:56:64:42:fe:15:d1:79:69:1d:d2:9a:fa:5e:fe:30:0b:9e:
         72:56:b4:94:2e:ab:01:8c:11:22:ca:65:88:bf:62:ad:35:a4:
         db:a9:de:47:f6:c9:60:a3:e8:fb:35:09:69:29:9c:9c:e3:20:
         0c:58:70:a4:b7:73:bd:2e:be:59:b3:34:01:53:be:d2:41:1f:
         a6:bd:64:d1:74:dc:5c:2e:81:5d:2c:38:cf:34:11:5b:89:88:
         a6:1b:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:22 2025 by rpki-client