Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebb524c9-83a7-303a-a9f8-2047e7d79096.roa
File:                     ebb524c9-83a7-303a-a9f8-2047e7d79096.roa (raw, json)
Hash identifier:          rvdgEjT3XL8v9cLngGyDHoD1K1qPFC3OTtMU/Ib9ytk=
Subject key identifier:   F6:89:F2:18:89:E7:23:FC:6C:10:A3:7D:A5:C7:C0:98:F6:F2:42:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A2C46325F6BCABB8A1100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebb524c9-83a7-303a-a9f8-2047e7d79096.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     40306
IP address blocks:        184.20.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:2c:46:32:5f:6b:ca:bb:8a:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5dd216cf-ffd5-4785-983e-1cfe50d16f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:00:57:0b:ba:fc:8b:9a:44:47:73:7e:d4:
                    3a:00:43:9c:70:91:b6:cc:60:cc:cf:c5:28:c4:e4:
                    b1:c4:20:31:d7:5d:a5:fd:64:03:56:4e:88:e0:ba:
                    16:b6:81:59:b3:78:d8:5c:99:2e:3b:bb:bc:5f:3e:
                    c4:03:11:57:7f:17:62:df:4b:73:4c:56:90:f1:72:
                    19:87:a9:e6:ec:0c:aa:93:9e:a7:18:c3:7e:5b:91:
                    a6:12:9e:6b:40:7b:ab:11:34:10:04:c4:42:17:e9:
                    41:27:b8:f9:7d:c2:c6:f5:81:80:87:69:03:47:72:
                    2e:6a:d6:37:73:86:0c:c2:36:4d:2d:2e:4d:4c:01:
                    2d:06:aa:a4:19:08:8d:4c:5e:2a:38:0d:15:49:6d:
                    79:b9:a0:65:af:8b:c6:ce:6d:db:12:68:05:41:eb:
                    28:89:46:db:27:ef:1a:fd:db:7e:1c:72:43:27:b6:
                    e7:63:88:6f:b9:ee:3b:d0:d4:f1:06:c3:52:1c:01:
                    c5:9b:71:74:7f:05:dd:75:32:91:6b:cb:0d:c5:bc:
                    f9:58:fd:1f:d2:db:77:a4:41:81:c1:1a:39:a8:bf:
                    9a:9e:cb:d8:95:38:39:97:44:d6:71:f6:38:ef:04:
                    e2:63:93:0f:95:b2:f6:c1:31:35:16:aa:13:12:85:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:F2:18:89:E7:23:FC:6C:10:A3:7D:A5:C7:C0:98:F6:F2:42:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebb524c9-83a7-303a-a9f8-2047e7d79096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:34:a2:4d:a6:12:6a:fb:cf:a5:ba:a6:5a:40:a5:0c:13:aa:
         40:0f:d2:29:c8:63:45:06:5d:c5:c3:1b:81:51:e5:7e:c1:ca:
         9c:a9:20:de:fb:84:ba:49:e3:53:e3:40:8a:e0:be:34:41:60:
         12:eb:0b:30:aa:93:c6:98:5e:cd:50:cc:4f:4b:44:00:33:50:
         8a:83:ba:89:ae:11:1c:cb:fe:b3:be:25:e3:5a:67:66:2b:dd:
         fd:0c:9f:ea:a1:53:58:63:d9:8d:3e:95:62:ea:28:90:2f:96:
         d9:ad:4e:e3:1c:dd:83:d6:2d:ab:97:40:b0:5e:51:4e:6a:d5:
         1c:c2:2b:97:e2:65:ec:f2:b3:b1:61:a6:48:de:70:ee:4b:0c:
         12:bd:c0:39:27:54:66:ee:4d:7f:5d:e6:3e:2f:c8:13:3b:85:
         7b:a6:5d:bf:14:a5:51:9a:09:24:c6:ec:c9:d3:b6:28:68:7b:
         74:f2:fd:2d:0d:34:78:7f:37:15:c8:e7:b2:31:f1:9b:10:8a:
         b8:1a:34:61:bb:16:87:01:bb:0a:fd:6e:89:b3:1e:a0:09:98:
         39:6d:06:8f:ed:b8:ff:b5:b8:89:5b:51:b4:b2:98:2e:69:9d:
         36:06:79:91:23:ca:92:4d:56:04:0a:f1:0c:78:5f:c5:44:5c:
         68:8c:83:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:21 2025 by rpki-client