Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9b5e10c-1128-32ee-a533-204d607e7e78.roa
File:                     d9b5e10c-1128-32ee-a533-204d607e7e78.roa (raw, json)
Hash identifier:          Wt3Ts7VmY/a88r9h5xvKgdZcmFAczNK2B0IP2TT0Hw0=
Subject key identifier:   60:74:A5:4C:41:0E:AA:E2:21:C5:45:62:FB:E8:5E:FC:BD:7B:D9:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A7042EA09C832FE6EFE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9b5e10c-1128-32ee-a533-204d607e7e78.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:70:42:ea:09:c8:32:fe:6e:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b8da5d4e-ea61-47b6-a9d3-70900dde0fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:19:7f:69:26:e5:35:f5:d3:b8:7d:22:80:
                    45:d1:ed:a8:bf:59:d7:03:15:33:62:75:8d:59:73:
                    00:d3:19:84:4c:b0:e7:29:6c:e0:a1:a3:4c:cd:3f:
                    5b:42:ba:ba:fe:f5:49:47:e3:33:03:c9:e8:ed:1c:
                    bf:20:04:aa:93:c7:10:df:2d:4b:97:b3:72:16:67:
                    20:6e:a6:4b:c6:c5:8a:13:f8:37:05:71:55:82:9e:
                    6a:81:93:ef:ce:54:3b:c6:58:b2:c3:d2:27:e5:cb:
                    e7:97:d6:82:2b:65:ba:da:40:50:c8:8c:99:c4:ba:
                    6f:6b:d0:ea:cb:bc:56:3f:99:b7:ec:50:a8:66:e1:
                    99:1d:9f:c6:00:21:23:61:58:75:9e:fd:4a:b8:03:
                    1a:ce:f8:3c:0a:fd:d5:e0:bc:55:fd:cc:da:e4:a5:
                    46:62:1f:f6:b9:f7:02:0d:86:df:e2:fc:b5:63:7a:
                    32:ce:ca:dd:09:49:8f:c0:07:78:76:09:81:0b:bf:
                    e1:b6:c9:fb:8f:51:7d:ef:f2:93:f2:02:39:8c:38:
                    ff:d4:37:c1:bb:eb:4a:97:43:c8:b6:33:fc:12:6e:
                    90:2b:39:6f:87:fe:1c:c0:e7:b5:42:43:e8:a3:95:
                    9f:f5:47:f8:99:1d:84:74:9a:a4:89:c9:f1:48:d8:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:74:A5:4C:41:0E:AA:E2:21:C5:45:62:FB:E8:5E:FC:BD:7B:D9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9b5e10c-1128-32ee-a533-204d607e7e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:35:3d:1b:5e:a8:bb:3d:84:3d:c3:8b:14:d1:d6:aa:14:
         45:d4:d3:c3:b4:df:81:ee:3f:99:e5:59:f4:96:b0:21:1f:4c:
         2b:36:25:e2:03:94:e2:fc:aa:23:88:57:1c:68:f0:95:8f:a6:
         18:eb:a3:2f:c8:77:86:38:07:7d:b4:76:8b:42:12:57:c5:f4:
         d2:53:78:3e:59:14:c8:cf:b8:36:77:f6:fb:e2:ae:dc:fa:d9:
         b4:43:8a:f3:fd:d7:a8:be:10:db:d9:62:8f:61:da:41:1a:49:
         87:d7:ba:d4:4f:33:ff:f4:69:25:d8:a7:97:f2:1b:92:17:fe:
         09:c3:04:8b:33:f8:f0:9a:43:12:74:53:35:00:2d:93:00:b8:
         dc:14:c8:3e:87:f4:c6:6a:80:6d:b8:57:4a:d6:0f:fd:a1:90:
         bd:78:43:65:37:9e:16:3c:54:6e:33:24:ac:a4:f0:e1:93:4c:
         76:fe:b6:95:75:dc:47:fb:5c:7e:10:c0:d7:ba:a6:ed:a8:91:
         b0:4f:22:e6:f4:da:98:b3:94:fa:e0:36:00:b5:ce:d6:a0:e6:
         5d:aa:ba:ec:19:bf:8c:f2:68:11:12:3b:ce:05:1f:19:5e:2f:
         5f:04:58:d4:a9:71:4a:b0:58:6f:31:2a:26:4b:11:77:7d:f4:
         1b:ed:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:37 2025 by rpki-client