Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0ccaa79-9fa2-3db0-93dc-4b90d593c5ca.roa
File:                     b0ccaa79-9fa2-3db0-93dc-4b90d593c5ca.roa (raw, json)
Hash identifier:          4IFN/q17zl0BAy4Z0Av7p2ZzJECp/5y5yJNduCK8K8Y=
Subject key identifier:   0E:41:FC:68:7B:74:BE:0D:F3:B6:20:BD:76:98:C1:32:0C:72:FF:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A6102B516D14512FFED80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0ccaa79-9fa2-3db0-93dc-4b90d593c5ca.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.196.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:61:02:b5:16:d1:45:12:ff:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d03fa678-1acc-4dd3-99de-9f92ee27f722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:bf:9c:55:e7:75:c7:c8:0f:1b:b7:29:9d:
                    3a:d4:dd:a5:c8:5f:3f:c3:24:3d:5b:de:1f:d6:dd:
                    72:ca:15:dc:71:03:95:a6:e0:d1:3c:e0:bb:a9:49:
                    95:b2:b8:a9:2a:5a:fd:12:38:8b:0c:74:58:bf:70:
                    02:ac:1b:ff:89:c3:09:a3:01:94:e3:43:40:54:69:
                    2a:6c:47:7d:5a:e4:32:ca:9d:8b:4e:54:f8:a7:a3:
                    0d:db:d7:40:aa:36:f2:9e:8b:8c:55:b0:c2:c8:f0:
                    c8:6f:77:2c:cd:85:11:c8:ef:fe:ab:c6:8a:50:93:
                    5d:a4:14:ec:10:34:e1:df:33:97:81:50:e9:33:ec:
                    da:a1:36:91:0a:14:a1:1d:8e:72:3d:e4:a5:cc:17:
                    52:01:8d:00:36:70:c5:99:0b:cf:b3:72:cb:41:f2:
                    fe:51:e6:18:f9:27:51:9a:b9:aa:93:bf:b5:b1:86:
                    09:48:1f:f9:f6:d0:74:22:8a:ce:a7:16:be:5e:ce:
                    49:e1:bd:0a:58:ea:c0:4c:8b:52:af:f8:86:e7:fd:
                    7d:41:50:ec:14:92:4c:c9:48:7e:c2:db:12:eb:a0:
                    0e:ac:d0:f0:71:e7:7a:dd:b1:30:e8:04:71:2a:30:
                    88:b0:71:45:b1:b0:b9:c0:25:f6:cd:ba:56:35:e9:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:FC:68:7B:74:BE:0D:F3:B6:20:BD:76:98:C1:32:0C:72:FF:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0ccaa79-9fa2-3db0-93dc-4b90d593c5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bd:fb:f6:f2:ee:54:9b:c9:b8:26:46:40:41:ea:74:14:4d:
         04:5f:05:1b:6a:26:ce:d4:f9:04:36:05:80:86:a9:d5:ec:14:
         3e:23:5a:a8:db:6a:f5:aa:8d:d2:8f:7c:9d:20:4a:6f:93:6d:
         86:05:7a:01:3b:0b:03:b4:d6:81:51:3b:25:ac:84:f9:66:a5:
         cd:2c:d2:8f:5c:ea:a7:7d:9e:7f:98:13:8d:5c:9f:07:3b:d3:
         a8:90:fc:58:f9:3d:6d:3a:29:92:01:08:ef:e7:64:7e:80:6c:
         9f:ed:3e:01:99:a4:bf:0a:30:8e:ca:8a:1e:02:66:89:a7:e6:
         62:54:35:a6:bd:ca:3b:44:12:aa:4d:d1:4a:e3:c0:88:5e:de:
         cb:46:d1:8c:06:46:ba:4c:7a:32:78:90:bc:a7:fd:79:0a:c2:
         c7:91:2e:10:59:34:e7:8b:46:19:d9:88:6d:16:91:5c:af:39:
         7d:19:9e:2c:1c:2d:fe:ca:78:06:1f:3d:53:81:29:b4:d4:5c:
         d0:b1:d8:0d:f9:42:1d:bf:4f:f7:84:9b:85:1f:e5:06:2f:30:
         69:6c:33:4a:d5:a1:cd:0f:88:30:54:92:5d:ef:be:73:19:6c:
         e5:de:85:29:98:2e:8f:69:b3:22:17:2c:e7:f8:32:22:df:4e:
         a0:74:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:53 2025 by rpki-client