Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa
File:                     bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa (raw, json)
Hash identifier:          NLJE81MIjKX7AnLnrJo/Qm8G7RJkZBKmY0Db/CVwDCc=
Subject key identifier:   55:2A:29:C2:48:12:36:6A:15:8F:5A:1D:F2:9E:48:CF:8E:20:A7:31
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0B3DA09ACDC92E81ACC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        172.242.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:0b:3d:a0:9a:cd:c9:2e:81:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=01e061d0-3e21-45d2-966f-4d04a51c94dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:b6:77:9e:0c:42:4d:ec:05:e4:de:7a:7c:
                    fa:28:f6:38:95:9f:c4:e4:25:e1:1e:14:b8:88:75:
                    b5:3c:be:61:36:86:f0:32:28:0a:8b:7f:6a:95:87:
                    ca:38:7e:4c:c3:23:8c:75:06:7f:c0:69:42:b2:14:
                    35:fb:05:76:18:00:11:5a:0e:50:91:b3:c0:74:3e:
                    2c:7e:2d:51:42:bf:ff:fc:c2:62:a6:b8:36:7f:02:
                    d9:8b:95:3a:69:f5:c2:0b:aa:62:73:fd:5f:92:d4:
                    96:f4:cc:d5:97:6e:ee:f9:be:0a:31:0d:07:ed:5f:
                    50:d8:ca:36:be:40:94:a3:3e:cc:23:a3:9e:b8:e2:
                    6e:0c:74:7a:38:10:d0:3e:33:a8:dc:ba:d0:52:b4:
                    91:10:dc:e6:4f:f3:12:ec:e5:1c:d6:c8:fd:77:57:
                    c1:07:0f:d6:13:07:8e:75:05:c8:3d:29:01:6f:28:
                    20:db:4b:d4:4b:d3:d4:70:64:e8:1d:43:e9:12:0f:
                    dc:59:cd:74:f5:bf:9b:ad:fa:1c:2f:1e:b4:47:17:
                    7e:79:05:34:d4:24:69:cc:69:ad:0c:58:ab:66:f3:
                    7f:04:a4:8f:73:f3:6d:b1:db:a1:ff:06:be:9b:3e:
                    11:05:9c:e0:5d:47:84:3b:aa:ec:cc:f5:a7:e6:b0:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:29:C2:48:12:36:6A:15:8F:5A:1D:F2:9E:48:CF:8E:20:A7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec9a80f-acd4-3872-a1ea-a77e19ee2294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:af:00:87:0e:b7:a9:d1:91:6d:b8:32:70:af:5f:1a:4b:
         ca:3f:68:40:7e:a0:76:07:21:00:1d:64:3f:75:90:1d:60:6e:
         10:ec:ed:b7:ac:b3:a9:fa:49:9c:04:a8:db:b2:4e:27:cf:9f:
         14:a6:af:76:99:0b:8b:d7:90:48:d0:11:cf:02:e5:40:8b:08:
         f6:19:9c:be:54:08:cc:35:e5:5e:fc:7b:69:e0:ff:1b:b1:ae:
         f1:35:1d:6c:6f:05:2f:26:3a:9c:08:12:3f:37:f0:3c:d2:4c:
         4f:ce:00:68:8a:1b:64:84:af:db:91:ca:8e:00:d9:05:73:ac:
         1a:a9:9e:7d:8d:8f:9b:5a:fe:b6:79:19:20:7c:2f:aa:34:a3:
         99:f2:b7:6d:5e:3a:d2:72:00:c0:54:bd:c2:ba:04:82:ca:aa:
         e1:26:44:a5:bd:46:a2:85:0f:0e:bd:a7:e5:a8:af:71:66:04:
         7f:45:35:89:c7:46:c8:e7:f5:60:ff:a4:7d:14:c9:af:30:b7:
         1e:a9:c7:68:3c:0b:4f:b2:44:b8:79:5a:8f:e6:22:03:79:9e:
         74:2f:f9:44:fb:d4:ff:90:33:a6:63:56:74:4e:6b:61:e1:b3:
         9d:04:61:4d:52:61:58:8f:9e:c2:66:ef:49:39:03:5f:12:a4:
         7e:a2:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:45:40 2025 by rpki-client