Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa
File:                     85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa (raw, json)
Hash identifier:          JO6YReHYN69H4tw71jG0Q7OIYiG4qx98fFPm/xigV4Q=
Subject key identifier:   13:F4:31:93:DC:D7:73:90:EE:54:94:BF:92:05:37:E2:13:D4:16:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7EEE92F5636ED412D480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.20.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:7e:ee:92:f5:63:6e:d4:12:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1210fddd-c88a-44c0-8920-f586c167233c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:08:15:2a:52:9c:4c:f4:65:51:20:72:02:0a:
                    97:92:e6:d9:65:39:02:14:91:22:97:3c:d1:89:24:
                    a6:38:5c:2a:a6:c4:06:1c:70:2f:86:1b:33:82:4d:
                    03:f3:17:ae:71:a5:67:cf:49:94:7b:81:7f:ba:a2:
                    e8:41:c5:7c:63:1a:b1:07:69:45:b9:bd:cb:54:09:
                    fb:4c:90:83:95:1a:d6:c7:18:51:29:b6:43:f2:3a:
                    49:12:28:cd:5c:9f:5d:72:e7:36:80:44:70:50:0c:
                    f3:09:fc:4c:f2:6f:a0:87:26:f8:29:13:2a:40:fd:
                    82:e2:0e:fb:fd:c1:16:63:6b:f9:52:be:60:f4:bf:
                    78:6b:da:a0:fb:94:1b:ea:ab:5b:11:90:ce:11:70:
                    df:b5:cf:d9:6e:44:b8:38:f6:26:90:05:31:21:c7:
                    95:c6:ac:85:8b:4d:93:13:78:7c:aa:f7:de:28:74:
                    fe:9f:97:6e:66:11:05:4c:c5:c4:38:96:27:01:20:
                    7c:1d:81:42:bc:e0:96:bc:a6:00:2f:a2:96:c6:4e:
                    33:a0:de:9a:e6:35:f2:ab:02:08:f0:c9:62:5e:a2:
                    22:6e:68:6b:58:e9:e6:e5:54:80:4d:de:0b:a7:e2:
                    88:98:77:92:7c:29:46:4b:65:52:a1:48:d5:22:6f:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:31:93:DC:D7:73:90:EE:54:94:BF:92:05:37:E2:13:D4:16:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85edfb5b-248e-35ef-a3f4-9f88f0d9a770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:04:0e:2a:b9:fb:bc:32:58:b0:db:81:c2:30:6e:a5:d8:
         08:0b:66:4e:88:38:ef:9e:ed:44:e4:80:bb:93:0b:a5:47:e5:
         0e:45:4d:3a:a2:41:a8:d2:49:22:ff:22:39:44:7c:91:e5:22:
         98:89:73:6e:54:46:53:7d:08:d7:4f:af:9c:e3:be:b6:32:09:
         41:21:fb:6f:8e:f9:19:a2:f7:72:f6:dd:ad:c5:05:79:54:99:
         27:69:a4:48:a4:6c:83:94:1a:e2:c5:f1:20:e2:42:e8:5e:d7:
         32:cd:21:a7:c8:b4:ca:39:67:7e:b6:14:f3:76:f8:91:5e:50:
         05:cd:2c:01:7a:17:1e:e3:f4:b1:1f:83:1d:d4:48:51:c2:93:
         6b:73:b3:ab:86:e4:b6:ba:3d:60:f0:89:4d:d9:f9:0a:4e:11:
         83:3e:fd:0d:af:7b:47:f8:8d:cf:60:39:de:c3:ca:87:bd:11:
         ff:04:4e:1d:b1:3f:f7:6f:5d:8f:1f:f0:92:34:51:16:97:ae:
         13:00:7e:b5:fd:c7:d8:2b:f1:df:31:a2:16:ed:ca:3c:fe:71:
         f9:27:a6:2c:18:ee:f7:17:b5:46:ad:32:dd:f2:c4:0a:98:0d:
         19:02:f9:e2:f0:80:c8:e3:eb:76:67:d3:7f:df:40:f2:a9:f7:
         92:15:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:29:34 2025 by rpki-client