Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa
File:                     6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa (raw, json)
Hash identifier:          mfo78bRMS1LZ6JF/2DHzG9jcroWLFMdl1ZLZzf1eNQo=
Subject key identifier:   BD:0C:63:CB:17:7F:10:B5:07:98:AE:CD:FB:F3:A0:D9:A0:02:98:2C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7A244FFBAF91A0A3DB30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.243.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7a:24:4f:fb:af:91:a0:a3:db:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=45cd1f24-68c9-4326-8bd1-aa500893c745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:e2:08:56:07:1f:7f:3e:84:39:76:3b:a3:
                    43:9d:d1:c2:56:51:4b:86:1e:36:09:5b:b0:a9:9a:
                    6f:1b:7a:ee:06:47:4e:c4:d3:3b:b7:3b:f0:5a:76:
                    81:7f:6f:5a:10:9c:2e:c8:44:13:21:b0:49:5f:31:
                    db:79:67:96:b7:7a:d6:c4:99:6c:27:ab:6e:e3:6d:
                    55:66:ab:b3:d1:f6:10:4e:ca:5a:2b:ae:99:f2:71:
                    3d:b4:54:dd:7b:37:15:fd:bc:7a:1c:f1:b5:43:e6:
                    79:41:3c:57:28:86:7c:3e:f1:19:0e:46:a1:bb:ca:
                    a5:40:2b:a8:b5:cd:c0:ef:64:57:d3:61:80:af:df:
                    35:d0:84:22:a5:cc:7e:27:69:37:cf:8c:3c:51:88:
                    c9:b7:23:53:70:ec:bf:36:c8:8c:44:32:eb:5d:7a:
                    2b:d5:ae:2e:b9:2a:d1:10:e8:64:35:fd:8b:bd:63:
                    94:7a:28:49:a8:93:22:a9:b6:79:71:9f:04:1a:9e:
                    f0:a3:28:0d:d6:6c:69:92:28:60:aa:57:6d:05:ab:
                    0b:3f:fe:87:b5:18:f1:d3:93:0c:c0:ce:be:15:ff:
                    09:e3:82:fa:b4:93:cd:34:d3:4f:0a:ba:6f:97:c1:
                    01:72:b9:61:a6:17:fe:1b:6a:8a:5c:60:32:17:51:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:63:CB:17:7F:10:B5:07:98:AE:CD:FB:F3:A0:D9:A0:02:98:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:63:ff:a4:a1:03:c8:48:8d:79:56:61:f1:53:ac:e7:03:
         9d:b7:dc:d6:11:20:5d:d3:04:c7:cf:d7:c5:8a:65:3d:04:05:
         b9:27:f7:82:b6:ba:4c:72:d8:cd:a6:ea:fd:2c:19:10:e4:10:
         a0:d6:24:70:63:fb:d1:87:5b:69:ff:12:54:3b:eb:d2:a4:57:
         58:ad:69:06:82:26:3d:f8:ac:d0:68:37:8c:f6:fd:b3:64:2e:
         3f:ff:0a:0d:37:b4:7a:97:e9:81:33:ff:11:da:63:6a:74:c2:
         c0:69:79:e4:fa:9b:b4:2b:87:0c:df:c2:84:da:d6:af:f5:86:
         5d:0e:3c:68:98:f9:9a:2f:4e:3a:bf:35:5b:c4:6c:2f:42:ee:
         3c:9a:59:0a:57:80:07:76:20:bb:8a:1c:37:45:db:18:40:c3:
         39:cc:81:41:7c:b4:86:1e:2f:29:ca:bc:2f:48:b8:39:23:e1:
         dc:56:21:ca:fc:7d:a6:57:74:65:b4:4c:2c:98:8f:62:8f:ec:
         62:cb:64:c3:d2:b9:c6:0f:7f:ad:e7:ed:03:9c:59:42:6b:29:
         f3:15:19:a9:65:3f:f7:b9:88:45:e2:05:ef:a2:54:62:30:9a:
         98:3c:20:7b:f4:6b:b2:e9:ea:1b:47:d1:0d:f0:1d:35:c5:64:
         36:d3:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:59 2025 by rpki-client