Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53c62e60-172d-371f-8bea-6f0a906bfbe5.roa
File:                     53c62e60-172d-371f-8bea-6f0a906bfbe5.roa (raw, json)
Hash identifier:          WrD6GuugUxlSn8dfuoczxdo3k9HxSOJKgrNDOoVsfPY=
Subject key identifier:   E3:0B:F5:80:A1:A6:EB:07:C4:9D:D2:83:97:07:99:D9:19:D2:67:EE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD1C961B8477FD59B7B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53c62e60-172d-371f-8bea-6f0a906bfbe5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d1:c9:61:b8:47:7f:d5:9b:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4083abe5-a1c9-4acb-9257-986a3d53748d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:9d:ae:b7:31:77:91:e5:50:ed:02:3e:9e:
                    c4:63:1c:b2:bd:38:72:fa:72:2b:9f:34:a2:50:8f:
                    e4:0c:db:91:c6:50:29:7d:7d:53:ca:2c:4c:0b:a1:
                    99:ca:f6:b9:a7:96:07:02:df:d9:f7:fe:0d:13:61:
                    39:30:93:3e:47:b6:bb:79:9a:c9:90:58:68:41:be:
                    8b:85:47:20:96:38:8a:35:54:a4:a7:7b:b9:8e:85:
                    1c:62:b8:6b:9d:5c:78:3a:e0:d9:3d:9a:44:bd:5c:
                    36:6c:24:41:81:b0:69:37:e2:91:4d:d6:3e:df:55:
                    b0:3a:2e:4d:75:0a:d8:2f:ae:fc:80:90:4b:77:36:
                    19:f1:73:fa:37:02:68:31:15:00:22:18:8a:a4:32:
                    eb:e9:0c:cd:af:17:80:1d:3a:2a:09:9b:50:23:1a:
                    25:38:22:77:42:9e:4a:9e:5f:ba:fb:77:9c:1c:2d:
                    e2:72:e1:5f:4f:21:2a:72:6a:02:d6:81:ca:a5:2d:
                    ba:25:58:da:a4:fd:3e:44:bd:0b:64:0b:2d:8d:4d:
                    71:72:4d:c8:6e:b9:3f:7f:00:a5:20:8a:86:42:3b:
                    ff:47:a2:b6:a5:a9:b6:e2:62:c3:4d:c6:73:07:fc:
                    cf:b6:bc:1b:3e:1f:be:22:a5:0a:99:4f:08:b4:82:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0B:F5:80:A1:A6:EB:07:C4:9D:D2:83:97:07:99:D9:19:D2:67:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53c62e60-172d-371f-8bea-6f0a906bfbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:84:65:76:ab:6a:74:1b:c7:f3:c2:a4:56:89:ce:ff:a0:
         bd:aa:0b:a2:7a:38:f3:b7:68:00:de:6c:a4:da:23:98:d6:f2:
         a5:c4:96:65:6b:25:a7:e4:fa:6d:48:d1:ce:c0:71:e6:a1:9f:
         4b:a2:8d:f8:04:eb:d3:69:6c:6a:af:fb:70:96:bc:b3:ac:23:
         3c:89:d6:c6:2e:dc:84:b4:2f:32:e0:ed:80:e8:38:9e:99:10:
         52:ac:30:dd:81:84:ad:b3:16:b9:34:b3:d1:3f:12:c2:33:4e:
         30:fb:7b:79:9c:b4:06:ff:ca:51:40:36:9d:11:c1:d7:e4:1f:
         c5:7c:83:33:13:8e:20:0c:94:7d:b9:78:40:75:15:80:28:c2:
         f6:e4:d8:af:95:3a:45:d7:d0:2f:66:99:e7:00:8d:e3:d6:a4:
         8a:40:c9:47:5a:b2:ff:35:89:ff:a5:09:8d:49:27:d2:05:fd:
         cc:9e:f9:dc:6c:ae:57:3a:97:29:43:67:ab:f4:17:af:1a:96:
         b4:9a:51:e9:3c:67:7c:38:ec:03:fc:2f:d9:e6:d9:af:6c:27:
         62:48:5b:3c:9f:ca:74:b1:37:3a:d7:b9:49:02:fe:d7:d7:5e:
         89:31:6e:d4:6d:8b:20:00:a5:af:2a:7a:b0:6b:eb:a0:11:73:
         7a:73:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:15 2025 by rpki-client