Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823af2ac-61d6-3483-8361-a206666b32a6.roa
File:                     823af2ac-61d6-3483-8361-a206666b32a6.roa (raw, json)
Hash identifier:          ALyeOMv8NCk3z7bREOHN5M3DiD/OSLm1ERQ183tg4z8=
Subject key identifier:   51:B4:A5:0A:47:A1:F2:05:B5:47:4E:F3:5B:38:5D:93:2E:8E:B0:04
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B052716A61B15D4C4E600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823af2ac-61d6-3483-8361-a206666b32a6.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:05:27:16:a6:1b:15:d4:c4:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=31a5162b-3820-4a45-9a2c-88c936e267b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:62:92:28:71:b4:e4:8b:1f:71:81:af:db:bf:
                    be:71:9c:b9:e7:99:0b:b5:43:78:3b:ec:97:da:ce:
                    6c:62:79:44:18:fc:4d:57:fe:28:7b:36:2f:d6:34:
                    cd:dd:40:0a:c7:c1:65:c7:bd:fa:48:93:06:7d:a9:
                    65:49:6d:c8:1f:fe:0d:55:9c:2a:1c:97:f4:54:13:
                    94:ed:3e:b2:82:da:21:da:78:fe:42:ff:97:bb:79:
                    82:ae:34:a7:b6:f2:e0:82:8f:a8:a3:c7:0e:a4:95:
                    df:7f:8f:4f:46:2f:e3:cc:e2:95:01:40:61:d4:eb:
                    02:81:6a:08:1a:0e:e3:63:4c:c6:cb:61:d1:5d:d5:
                    71:24:5e:c6:42:1e:a5:29:e7:8a:8a:2f:c4:93:98:
                    d9:87:56:f3:8a:fa:c7:63:61:a9:ee:06:f1:85:50:
                    e4:16:44:f3:02:6e:e3:52:c7:79:26:23:a3:90:cb:
                    e7:c0:df:99:b5:db:55:ac:e4:53:df:de:97:df:5f:
                    f1:6e:d0:49:16:46:4e:b9:ef:92:93:b2:c1:2e:ce:
                    56:6e:c4:42:06:25:eb:fd:03:4d:6a:ba:b3:18:1b:
                    cf:dc:eb:48:4e:8d:2c:f5:15:3e:33:a4:b0:96:b1:
                    b0:01:75:c2:ba:f9:48:c6:48:ff:a2:52:58:cb:c1:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:A5:0A:47:A1:F2:05:B5:47:4E:F3:5B:38:5D:93:2E:8E:B0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823af2ac-61d6-3483-8361-a206666b32a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:88:3b:8b:19:23:71:42:20:f5:b2:e6:aa:05:40:31:7e:
         22:53:84:d1:56:2f:ea:7c:52:2e:12:73:7c:2b:18:fa:28:0e:
         7f:9b:a5:d5:6e:cc:1c:5e:8d:b2:af:63:53:64:43:91:5f:19:
         50:86:fb:09:44:37:ba:6e:87:f3:5d:9e:b6:0f:ef:27:14:bb:
         51:d7:07:58:e6:33:e5:b2:de:e4:17:e1:22:56:bd:c4:ae:c7:
         5f:d5:ec:db:fe:6e:ee:c0:0d:1d:0f:96:53:e9:de:a0:a8:9b:
         9a:d7:14:ac:f5:e0:85:13:e6:e2:41:5e:9b:bc:00:57:24:b1:
         4c:a9:0d:88:13:e3:df:70:f6:e3:3c:f5:cd:fc:72:b7:a8:7d:
         99:e3:f7:25:1f:d1:c5:8a:71:35:f6:ff:75:9a:30:f4:1e:01:
         5a:a7:41:96:fb:b9:8c:4c:b0:cd:ae:31:bc:b1:77:17:1d:0a:
         47:ca:5f:f3:1b:88:1f:46:bd:f3:31:c5:5c:97:cf:94:df:8c:
         a5:5e:57:91:dc:7f:80:32:36:3f:c9:43:91:13:cf:b5:55:1f:
         60:e9:94:70:3c:54:a2:9f:b4:cf:09:e4:ce:e3:8a:ba:d3:0c:
         c7:8f:df:ad:dd:aa:48:01:7b:85:77:8e:eb:98:15:36:43:29:
         1e:4c:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:18 2025 by rpki-client