Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/611eb1f6-e1fe-3d0e-8ad6-e115d66464f3.roa
File:                     611eb1f6-e1fe-3d0e-8ad6-e115d66464f3.roa (raw, json)
Hash identifier:          PJzVO8tLYALDUTecFg+RBNYf14yG8SEpudqZF2TIpU8=
Subject key identifier:   DF:EC:E4:D8:78:F6:E9:95:CD:57:05:D3:66:C3:53:60:F5:B9:D6:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6515B0C2B5E5AA4B2880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/611eb1f6-e1fe-3d0e-8ad6-e115d66464f3.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:65:15:b0:c2:b5:e5:aa:4b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=55a39cea-97b4-4ab4-9819-fd41f6b97beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:be:4f:a5:5c:9e:6e:28:d2:36:7f:e7:e9:
                    cf:50:e5:53:99:a1:66:3a:88:29:a4:0b:80:3e:56:
                    78:49:cb:7b:28:4f:3a:05:0c:fe:05:b5:f3:79:fa:
                    5e:9d:6e:32:37:31:d5:e1:f6:81:e4:26:03:eb:81:
                    3d:1f:e0:c8:0c:73:30:dc:26:79:09:98:d1:00:49:
                    6c:f0:2b:02:6a:e1:49:11:09:d3:53:cc:43:ce:33:
                    e2:51:17:dd:02:72:31:d5:22:f2:e3:75:e9:ee:f6:
                    8c:49:b5:78:bc:e1:e4:ac:37:2d:96:6f:a3:2b:ed:
                    a9:4e:49:19:87:50:06:5a:67:42:34:16:c7:8e:3f:
                    ae:5d:28:6c:54:f2:31:1f:1d:dc:5a:f4:0e:84:94:
                    05:1b:dc:c8:c6:cb:14:cd:1c:7e:83:1d:63:db:f0:
                    fe:b0:d3:8f:d5:16:a2:87:bd:d2:24:cf:90:00:ae:
                    e8:d3:56:62:ee:cd:02:c2:f3:e6:f9:38:9c:ce:7b:
                    b2:25:5f:35:d3:cd:44:e8:2e:6b:1f:2a:87:37:20:
                    35:33:ae:81:2c:be:ca:6f:22:26:6a:31:e7:2a:1e:
                    df:2c:06:62:a5:81:ba:98:db:d5:5b:3c:a6:d9:68:
                    c8:38:8f:ec:b8:11:74:6a:3a:e2:79:2c:b6:1e:50:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:E4:D8:78:F6:E9:95:CD:57:05:D3:66:C3:53:60:F5:B9:D6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/611eb1f6-e1fe-3d0e-8ad6-e115d66464f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:6d:c8:3a:47:ec:84:2c:a5:7c:77:ed:df:4f:65:b0:b9:
         00:5d:3a:62:fb:83:a1:6f:5c:fb:6e:94:0b:8c:96:8a:1e:71:
         ca:ae:17:90:fc:21:ac:14:0a:6f:6f:23:e6:3d:9f:2e:fd:4a:
         41:59:90:2c:aa:b6:7b:f4:98:38:3a:ef:04:0f:ae:fc:18:2e:
         a8:a6:c2:7b:0e:e4:3d:6b:d8:a2:96:10:71:e7:e6:80:4e:d1:
         3f:50:57:00:83:12:78:32:38:06:ff:cd:9e:fc:86:29:4e:34:
         86:a2:2c:77:5d:0a:cd:27:fd:bd:e5:a2:bd:1e:da:bd:35:e7:
         45:b2:fa:67:4d:81:03:f4:48:a3:b2:54:d5:93:0b:58:8b:30:
         07:5a:fd:41:28:cc:54:13:53:91:01:ae:0c:b0:34:45:f9:7a:
         af:83:9d:0d:c0:33:61:87:0b:b3:87:42:9b:0b:b4:30:c6:fc:
         4d:3a:1c:10:73:05:ee:4a:6d:df:ef:30:e4:cc:c0:54:94:e1:
         15:b8:16:e5:70:6c:33:ed:7b:25:18:6e:74:da:4d:b0:33:ec:
         2b:02:80:d5:72:7d:39:79:77:16:55:99:fb:c6:5b:2c:47:c5:
         9f:34:bf:7c:cf:61:c2:92:c6:11:c4:67:3b:4e:32:24:58:0f:
         fb:7d:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:35:55 2025 by rpki-client