Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a16ec444-d4a0-3271-acc7-d3d4538537dd.roa
File:                     a16ec444-d4a0-3271-acc7-d3d4538537dd.roa (raw, json)
Hash identifier:          trOiKT/FhGR6fp6kDq2RIWkovQMci0ifowSvezPr0nU=
Subject key identifier:   3F:2C:14:1C:84:1C:9E:D6:5D:DC:F9:46:72:57:99:C4:82:61:94:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AF6C04A23D87022669C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a16ec444-d4a0-3271-acc7-d3d4538537dd.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.197.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:f6:c0:4a:23:d8:70:22:66:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1f57b64c-26a0-4f0d-9b8c-556e7c89600b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:12:c1:b8:4c:ce:46:0a:62:63:7c:f6:ba:
                    36:3f:a0:fd:95:9f:18:88:6a:15:70:7b:61:16:16:
                    16:8a:96:12:b1:4e:b6:08:aa:ba:e2:a4:76:52:1b:
                    fa:b5:1e:e4:77:48:9c:39:10:0c:65:ba:d7:9b:0c:
                    e0:91:91:7f:29:29:e8:de:47:b0:e7:a5:d9:68:c3:
                    bf:07:5c:2b:0a:c6:11:16:8c:f9:b5:61:ea:09:71:
                    38:52:97:78:c2:02:c3:ba:3a:52:b2:9e:cd:f2:93:
                    11:c3:21:7d:5e:b7:54:35:6a:09:e9:41:94:f0:1b:
                    eb:e3:03:d4:b9:36:32:52:d4:5d:c8:56:c2:f8:d5:
                    94:93:04:db:95:db:ed:12:af:ed:d4:db:88:d1:81:
                    f4:d0:17:8b:c4:1f:93:76:07:98:ba:37:32:01:ee:
                    3e:5e:7a:5e:ed:30:47:f6:2f:c9:5c:85:30:96:1c:
                    d4:13:fd:5d:14:12:16:bf:52:96:40:57:be:0b:f0:
                    ef:65:96:06:cf:a4:f1:5c:10:4c:bc:81:ad:ea:c0:
                    59:e4:c3:44:45:71:1e:a8:bf:7d:89:6e:3b:92:29:
                    da:bc:0a:ad:a8:5a:35:0e:5d:1e:ff:80:34:42:e9:
                    8c:7e:ea:99:68:5a:d0:e3:0c:fc:b8:75:4b:61:07:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2C:14:1C:84:1C:9E:D6:5D:DC:F9:46:72:57:99:C4:82:61:94:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a16ec444-d4a0-3271-acc7-d3d4538537dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:9f:c7:62:53:47:41:32:5f:34:2c:f9:ce:a7:ee:19:6c:
         9a:35:a4:54:de:a9:91:1f:c6:34:2b:62:e2:02:d5:45:d1:3e:
         d1:9a:17:ae:c1:a6:a1:5a:1a:d8:2f:aa:34:3e:e6:52:e7:9a:
         b3:dc:f9:00:10:98:b7:40:8c:72:dc:3a:69:21:8d:d4:8a:ba:
         24:d9:3b:cf:a1:a6:0b:43:95:ab:52:d2:0e:7c:67:70:38:17:
         3f:d2:60:8a:3c:23:6f:19:e1:22:93:e1:f3:80:c6:7a:95:b9:
         bc:ad:df:8c:e4:c0:19:78:0f:98:0e:7d:ea:e9:a0:a3:7f:c6:
         08:f7:e4:35:50:33:e6:ed:af:47:52:cf:05:f0:31:4d:47:2a:
         34:5e:2e:b0:14:34:08:c3:29:f7:d8:50:b2:3c:a2:d2:34:42:
         33:97:35:eb:d6:6d:b2:79:f2:fb:b4:1c:fd:ed:36:42:3f:79:
         d1:19:16:e7:12:30:ca:ad:ea:e5:31:8e:86:eb:2f:69:c9:18:
         ca:ac:57:c6:a9:33:71:00:6c:b2:2f:8c:28:94:0e:9b:b6:49:
         c1:24:c5:9a:89:38:30:45:20:46:9b:89:66:68:57:4f:24:df:
         48:d2:ba:df:5a:66:8e:ce:89:6a:99:9d:ce:cd:90:0f:35:91:
         8b:93:dc:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKvbASiPYcCJmnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MWY1N2I2NGMtMjZhMC00ZjBkLTliOGMtNTU2ZTdjODk2MDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUSwbhMzkYKYmN89ro2P6D9lZ8YiGoVcHth
FhYWipYSsU62CKq64qR2Uhv6tR7kd0icORAMZbrXmwzgkZF/KSno3kew56XZaMO/
B1wrCsYRFoz5tWHqCXE4Upd4wgLDujpSsp7N8pMRwyF9XrdUNWoJ6UGU8Bvr4wPU
uTYyUtRdyFbC+NWUkwTbldvtEq/t1NuI0YH00BeLxB+TdgeYujcyAe4+Xnpe7TBH
9i/JXIUwlhzUE/1dFBIWv1KWQFe+C/DvZZYGz6TxXBBMvIGt6sBZ5MNERXEeqL99
iW47kinavAqtqFo1Dl0e/4A0QumMfuqZaFrQ4wz8uHVLYQde+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8sFByEHJ7WXdz5RnJXmcSCYZQBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTE2ZWM0NDQtZDRhMC0z
MjcxLWFjYzctZDNkNDUzODUzN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuOn8diU0dBMl80LPnOp+4ZbJo1pFTeqZEfxjQrYuIC1UXRPtGaF67B
pqFaGtgvqjQ+5lLnmrPc+QAQmLdAjHLcOmkhjdSKuiTZO8+hpgtDlatS0g58Z3A4
Fz/SYIo8I28Z4SKT4fOAxnqVubyt34zkwBl4D5gOferpoKN/xgj35DVQM+btr0dS
zwXwMU1HKjReLrAUNAjDKffYULI8otI0QjOXNevWbbJ58vu0HP3tNkI/edEZFucS
MMqt6uUxjobrL2nJGMqsV8apM3EAbLIvjCiUDpu2ScEkxZqJODBFIEabiWZoV08k
30jSut9aZo7OiWqZnc7NkA81kYuT3H0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:45 2025 by rpki-client