Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46909c8e-0574-3e52-a236-c78a09a4c57c.roa
File:                     46909c8e-0574-3e52-a236-c78a09a4c57c.roa (raw, json)
Hash identifier:          PNXwCuJI28LqX2Vut/MoWzO5ealEfZSFPIMPxH8KaLw=
Subject key identifier:   33:BE:0E:78:3B:DB:37:1E:FD:3F:C8:E9:70:39:A2:FB:D0:16:45:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC3DC86926A2886CF4180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46909c8e-0574-3e52-a236-c78a09a4c57c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        67.54.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c3:dc:86:92:6a:28:86:cf:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5c9481bb-885e-47bb-b21d-41479e47b4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:99:29:62:5f:3a:dc:1c:5d:b2:ac:8f:3f:
                    61:b4:d1:55:69:cb:0e:31:1e:7c:a1:b5:f6:0d:54:
                    9f:5e:c3:b5:86:a1:e7:2f:38:65:0d:02:c5:a4:96:
                    c6:79:da:90:ce:60:d1:d7:5a:a5:1c:09:fd:10:1b:
                    e4:66:9a:8d:44:cf:93:78:19:85:46:cc:ec:c8:d8:
                    b1:da:2b:c0:15:31:a1:08:bf:cf:44:b8:a8:2a:a2:
                    7f:96:00:c1:5f:30:37:a9:af:63:33:ca:fb:1a:89:
                    75:09:72:1a:18:2f:5f:e9:32:c0:b0:18:cf:4e:d8:
                    8f:b7:3c:16:c9:c8:b0:8c:9b:fb:18:30:b2:11:44:
                    c7:38:32:87:1d:4a:eb:34:6e:df:ef:34:98:6c:db:
                    58:6c:a5:9a:2f:0b:c9:88:d3:a7:c1:ee:56:f4:74:
                    c7:81:eb:3b:aa:72:44:26:a9:23:55:4b:da:0a:1b:
                    e6:b4:ca:0d:c7:f4:6c:53:67:71:57:ce:33:68:c7:
                    c0:ca:27:25:98:5f:4a:32:41:cb:ff:51:0b:77:3c:
                    33:d8:7c:e1:2a:19:ba:14:ba:0d:d1:2f:57:16:b6:
                    3f:df:fd:15:2a:4d:8a:1c:be:e0:50:6d:1d:09:42:
                    25:b0:e8:d1:ee:0f:32:f0:3f:c9:c7:58:0c:af:dc:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BE:0E:78:3B:DB:37:1E:FD:3F:C8:E9:70:39:A2:FB:D0:16:45:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46909c8e-0574-3e52-a236-c78a09a4c57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:53:8b:29:f3:78:e0:7a:61:7e:d8:e0:a5:5b:ad:27:4b:
         5b:6f:91:c9:cc:52:59:5c:0a:cc:26:fe:3f:f1:1f:89:0a:9c:
         82:16:60:57:ee:48:f2:25:48:22:5a:c8:11:68:f5:22:7d:93:
         d1:55:bb:29:e0:ed:25:95:25:67:8b:c7:f2:b5:6f:e6:5f:ea:
         2e:28:cb:73:fc:b0:32:85:50:04:7b:49:26:c1:d3:4b:3e:22:
         73:ef:ca:25:d7:ff:d9:5f:49:4b:e0:5b:c8:09:d1:46:9d:1b:
         1a:c5:72:a8:d8:1d:e6:55:2d:dc:30:d1:08:bc:59:a5:e5:2d:
         94:69:12:0b:83:49:65:66:e9:21:b8:83:b8:f7:b1:08:36:0e:
         aa:25:c8:97:7e:fd:0d:9b:50:0c:5d:56:13:dc:d5:9e:c1:27:
         18:cd:c8:5f:4d:aa:62:6c:97:42:b3:03:9a:a1:17:0b:14:ed:
         11:d6:d5:54:94:f4:3b:ad:ca:c0:80:91:e8:7b:81:91:f8:9d:
         30:99:4d:57:2a:8b:1a:eb:f4:81:69:30:9d:4f:d0:6f:5c:80:
         23:d9:8a:7e:93:86:a4:f6:d4:61:4b:1d:87:86:11:97:cf:33:
         d6:da:e3:b4:57:4d:d7:c3:eb:8b:90:5f:1b:2b:b8:7c:bb:bb:
         a0:7e:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:15:03 2025 by rpki-client