Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73cf511b-01bd-3125-ba2e-5c956775521e.roa
File:                     73cf511b-01bd-3125-ba2e-5c956775521e.roa (raw, json)
Hash identifier:          rqfNGix5LpawBwHhJDrAxWL/Ckcg7VfIbRfDS3IjA7M=
Subject key identifier:   92:6A:F4:B6:76:B5:B3:20:C5:B0:AB:83:82:A6:6E:25:3B:7D:3D:CD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B1473CE9CBA60EE49B080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73cf511b-01bd-3125-ba2e-5c956775521e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:14:73:ce:9c:ba:60:ee:49:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6e974159-d569-449c-be76-e9662d4029f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:7f:2d:1e:6c:0f:40:10:81:a8:eb:ca:3b:
                    e7:3a:ea:4e:2f:a8:7b:e5:59:27:96:83:28:af:0b:
                    34:cc:55:5d:43:8c:30:a6:01:60:b9:4e:16:35:a4:
                    58:c7:a5:1d:30:1c:ef:13:79:76:56:e3:5c:df:fa:
                    e0:95:fd:a0:2c:fc:41:e9:8c:a4:e7:ca:ed:18:26:
                    65:c8:aa:6d:fc:ff:9a:ed:c3:a4:68:40:c0:f3:bf:
                    59:a4:0c:98:89:17:dd:bd:c5:d8:fe:b3:da:4f:c5:
                    26:ec:ad:82:43:01:86:33:84:07:d4:55:07:a7:3f:
                    02:d0:a8:32:bd:e3:05:01:3c:9f:7f:83:21:ed:54:
                    ef:bf:e1:1e:99:75:5b:c8:13:02:7e:39:e7:c8:30:
                    33:84:5e:b4:41:bc:9e:4b:c0:ed:47:e5:4a:81:33:
                    84:df:ab:e9:a6:b5:48:6b:c9:c2:97:6d:0d:81:1a:
                    80:d3:f2:db:ff:a2:6d:93:1e:6c:db:c0:c1:7f:24:
                    d6:17:e5:0d:48:4d:fd:b2:d3:e4:7d:53:7d:bf:47:
                    64:fa:0b:b2:ba:76:e9:42:75:ee:ad:f2:cc:48:1c:
                    96:db:ab:ae:4e:42:ad:dd:e8:a1:5d:df:1e:4e:df:
                    6d:47:19:83:19:1e:85:bf:d2:81:eb:34:13:82:dc:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6A:F4:B6:76:B5:B3:20:C5:B0:AB:83:82:A6:6E:25:3B:7D:3D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73cf511b-01bd-3125-ba2e-5c956775521e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:4d:96:a6:45:d9:9a:89:bb:af:16:5a:35:3e:78:da:12:
         2e:ca:6a:b5:b1:27:f6:3f:c9:e4:ba:16:25:3c:61:a2:1b:88:
         ab:af:d6:23:46:f4:ba:87:9f:1c:68:be:c2:60:2b:53:8a:d9:
         6e:96:79:f6:3a:e0:7b:30:e7:99:05:80:7d:6c:f7:7b:ee:9d:
         0e:f0:d9:30:9c:31:b3:c1:99:72:1a:ac:f8:52:fc:51:69:c8:
         e9:f7:1e:07:34:57:29:0d:a0:51:15:0a:01:9f:f6:85:99:da:
         e9:2a:f3:fa:77:78:bb:c6:56:89:33:62:b5:97:29:3f:99:02:
         42:88:2d:76:ae:aa:76:39:fd:f5:b3:51:8d:1d:89:44:6d:27:
         90:06:ff:5a:40:71:4e:41:8c:f6:53:d7:d2:d5:b0:c7:a2:fd:
         23:9c:cd:c9:dc:93:bb:3d:4c:13:f6:4f:b3:99:8d:b2:1f:4b:
         2b:0e:d3:18:59:77:96:fa:63:6f:b3:6a:39:be:6b:4d:84:85:
         31:00:5c:ab:ec:fe:47:64:ad:8b:8d:ea:c6:6a:10:05:a4:f9:
         f0:3d:9c:c1:a7:a3:69:a6:de:a9:6d:8d:3c:59:d9:b2:9f:61:
         66:61:8a:a5:8b:3e:94:9e:18:ed:16:8c:d7:14:76:09:a5:50:
         99:2c:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:01 2025 by rpki-client