Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa
File:                     dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa (raw, json)
Hash identifier:          KPU2XilIMeJlX+/fei93Xjc6ohtkKh28H4/6r2nRuWI=
Subject key identifier:   C9:16:A4:09:3F:A9:A5:5B:63:6A:FC:4A:0B:29:34:F0:B1:65:B3:53
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACD928D21440F6E6FF812
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        70.41.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:cd:92:8d:21:44:0f:6e:6f:f8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=89fe9cb6-747f-4107-b7c2-4964499dbd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:f1:50:84:6d:47:1d:ff:01:b6:d7:01:9a:
                    1c:03:2b:48:aa:73:99:ae:8c:02:dc:52:a7:b7:3c:
                    29:b7:ce:d9:b3:cc:cb:de:24:07:b2:32:c6:d7:53:
                    28:b6:1b:88:28:41:86:3a:f1:61:f1:3c:b3:14:f9:
                    15:89:07:41:b1:14:d5:75:5a:fe:30:da:55:d0:e9:
                    b3:02:2f:11:66:ed:41:d8:75:1d:95:6d:26:02:63:
                    d5:43:bc:e9:72:81:d0:62:f7:b0:92:18:12:47:22:
                    8b:b9:a7:97:ef:aa:f8:42:d8:d4:fb:c3:66:ee:11:
                    71:80:f1:8e:b2:d3:d6:b2:53:5a:b5:59:33:dc:72:
                    3a:b7:5f:7c:73:79:d4:d0:f7:12:cb:57:92:0c:94:
                    88:2d:7a:eb:3d:af:b0:a3:1b:9f:a5:4b:59:65:ee:
                    61:a4:65:3e:0c:c9:51:8a:8e:03:b0:82:ee:82:f5:
                    a6:be:7f:c0:68:05:6e:d1:71:ce:d5:09:a1:3d:72:
                    3d:a6:e6:17:e2:4d:7c:44:f5:be:54:ab:d0:50:f7:
                    96:b0:4c:b4:fb:d7:12:d2:77:bc:38:32:58:4d:be:
                    ff:4d:37:34:06:52:68:be:cc:6b:bd:b7:3e:cd:c6:
                    36:07:bc:ac:63:72:82:cc:71:c3:91:28:27:cf:29:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:A4:09:3F:A9:A5:5B:63:6A:FC:4A:0B:29:34:F0:B1:65:B3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfd6560a-3fd0-307c-984a-c9e12d68fd5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:5b:81:1c:18:70:c8:db:08:d4:36:65:b8:3e:41:d9:3f:
         27:c4:0d:5a:8c:13:5a:dc:02:89:6e:45:4c:4e:96:e4:c4:bc:
         ce:c6:5f:89:c0:22:7e:64:4d:3d:08:8b:20:22:9e:9f:a3:df:
         4f:a4:21:55:c0:08:b8:ed:be:d3:67:05:55:9e:a0:04:0c:68:
         46:68:27:ff:ce:e7:f9:38:da:ba:82:31:5a:f6:1c:b9:f2:22:
         f7:e2:51:01:1b:a6:73:a5:c2:de:ee:7e:d2:87:c6:e5:c6:eb:
         78:49:bd:8a:1f:3b:86:34:dc:0d:2f:05:f4:c2:02:14:30:86:
         59:fa:8a:84:e4:e3:29:c9:9b:00:b4:1e:e2:8b:04:95:d4:71:
         17:75:46:81:36:b5:0a:7b:33:07:62:9a:a2:9d:5f:a7:23:97:
         04:c2:94:9d:c1:26:de:89:c1:e5:a0:ab:05:fc:c8:11:de:4b:
         d4:7f:c8:fc:a4:69:73:6b:5e:7b:ac:34:c9:6f:a2:36:61:27:
         0e:6d:48:02:f3:df:28:19:a6:95:10:40:10:f8:47:ef:a0:da:
         64:a7:f8:19:83:67:cf:fe:86:34:7c:61:24:78:54:7c:ce:ab:
         d0:70:91:0b:b6:ea:3e:fc:8f:60:f4:ac:5d:cf:b9:67:8f:68:
         1d:7a:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:20 2025 by rpki-client