Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7dde977-c4ed-3de3-b5d5-70186294b2db.roa
File:                     a7dde977-c4ed-3de3-b5d5-70186294b2db.roa (raw, json)
Hash identifier:          MzjVwCArDZPkf7A8p79pZesLDYBqNZHje78i3T4eAzs=
Subject key identifier:   E2:B1:57:6F:2F:D5:1E:E7:C7:C7:9E:B3:97:55:A2:B1:4B:14:4D:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A31483F1BD84C082D46C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7dde977-c4ed-3de3-b5d5-70186294b2db.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        67.54.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:31:48:3f:1b:d8:4c:08:2d:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=794c4d28-a3b2-46cf-9c3a-38a39d8d2d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:69:e0:dd:00:3e:fe:9c:7c:be:97:c7:7c:
                    0f:c5:56:05:82:e3:3f:e7:a5:29:51:69:e6:96:0a:
                    9c:3d:8b:46:de:2f:45:52:21:27:cb:77:83:57:24:
                    ae:e4:1d:d4:5e:13:4c:59:cb:b0:c8:91:1e:c5:ec:
                    95:93:2c:5a:67:db:d8:16:81:97:6d:a6:d7:d2:8a:
                    85:d0:46:40:c8:bf:19:3e:2a:7f:16:48:27:f5:0d:
                    82:59:36:8c:28:40:12:de:1b:cf:c3:29:c2:a3:1e:
                    22:35:a8:e0:b3:b7:c2:e6:14:d1:5f:be:6a:ba:8c:
                    fd:3b:87:a1:7b:da:4a:8d:04:c5:9d:4c:ef:41:8a:
                    b2:a7:bc:b4:d0:b9:c9:f0:6c:0e:95:33:ce:f5:6b:
                    68:39:04:a1:e3:3c:e2:70:6d:a6:0c:b4:a3:4a:86:
                    a5:1c:df:06:9d:be:d0:73:f6:80:36:19:27:3e:ce:
                    f7:24:79:86:a1:0f:09:65:62:a1:16:08:14:eb:59:
                    cf:ae:58:c4:6e:fb:75:e0:7a:ba:3e:fb:12:5e:dc:
                    bd:9a:47:aa:8f:fe:cb:97:a0:9e:05:61:c7:29:40:
                    cd:c5:71:8d:08:a2:5a:73:78:53:fb:e7:75:5e:90:
                    ce:9a:bd:18:56:a5:c2:b8:66:b2:ac:9f:d7:e4:bc:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B1:57:6F:2F:D5:1E:E7:C7:C7:9E:B3:97:55:A2:B1:4B:14:4D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7dde977-c4ed-3de3-b5d5-70186294b2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:41:c8:87:e8:ca:99:68:4a:25:5f:a8:73:c1:c7:f2:27:96:
         c3:a2:7b:28:f6:a9:86:3a:6e:59:f9:42:29:48:29:f6:e8:05:
         e6:99:ea:c9:89:aa:e8:33:50:60:6e:98:72:87:40:17:c5:6b:
         e8:f4:e6:8f:62:96:1c:d9:64:1a:5e:f7:ed:9e:91:d4:bb:87:
         11:0c:f4:1f:18:ad:f5:12:16:b6:97:44:16:66:d4:df:27:d5:
         7c:c5:3f:8c:49:f3:ad:3f:15:40:4b:f2:2e:bc:d9:38:7c:85:
         33:b8:f0:d1:e8:b4:30:d2:0f:c3:d6:4b:31:11:e5:bf:1f:d8:
         fc:ab:ec:a9:dc:82:40:6e:fb:64:6a:85:57:a4:c4:dd:61:09:
         12:86:1d:2d:59:34:1c:d3:15:95:c1:ab:d0:d4:6d:f5:ac:29:
         d2:7c:29:cb:c4:32:67:cc:c3:f5:60:51:4b:84:dc:8c:dc:2f:
         87:0e:bf:37:f5:98:23:e4:e9:cc:a0:a6:a9:2f:a3:b9:f0:d5:
         45:43:a7:48:ab:31:55:14:e8:e2:32:60:1f:49:ae:07:0b:1b:
         a3:34:54:46:04:53:31:20:af:f2:36:93:6f:4e:22:b0:c8:ba:
         a7:7d:2e:6b:14:c6:3d:2d:ba:c0:78:14:a4:ce:76:51:0a:6f:
         74:7f:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:21 2025 by rpki-client