Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f50fc562-f7f3-3883-b8bd-8c90956f9054.roa
File:                     f50fc562-f7f3-3883-b8bd-8c90956f9054.roa (raw, json)
Hash identifier:          vMkjOcRrW8KV809cm8Km9FYuwyxV9CAZFpmi3OZSzIM=
Subject key identifier:   71:D5:68:12:FD:84:2E:1D:3A:C1:2A:4C:0B:DB:6D:18:9C:7F:A5:A0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AFDE5D80BEB5054B6AFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f50fc562-f7f3-3883-b8bd-8c90956f9054.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        99.198.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:fd:e5:d8:0b:eb:50:54:b6:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6667477a-50d1-4f93-b5a8-221058b2427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:ac:0b:e1:30:ef:3f:51:0e:9d:51:da:67:
                    2c:ae:58:63:4a:78:7f:5a:82:ea:37:3b:74:19:3b:
                    23:95:07:7f:6a:e4:bc:4e:2d:06:81:40:75:04:a3:
                    05:84:74:98:04:03:d3:50:b2:42:ad:6b:d7:20:48:
                    92:b2:6d:ee:b4:67:20:65:32:60:07:64:b5:6d:55:
                    08:bf:2d:5d:84:ef:00:40:fe:ee:00:28:ae:f1:a2:
                    d0:da:b7:cf:b9:48:12:8a:2e:ea:eb:d9:da:f4:62:
                    f8:31:d2:97:49:66:38:1d:92:9c:3a:a5:3f:19:64:
                    da:7f:35:be:41:83:b5:99:11:93:d3:08:a0:64:bb:
                    02:6e:74:8b:e7:0d:2a:f0:52:aa:df:85:05:de:ec:
                    bd:91:99:68:d8:94:2c:00:dd:f4:d1:84:e8:55:c0:
                    5f:70:08:92:b1:e0:ba:73:b7:a4:2d:74:9b:d0:aa:
                    08:81:7b:a0:fa:04:50:12:2f:94:69:09:de:cb:28:
                    ee:74:d1:13:23:44:8f:55:53:7a:9b:d2:35:f3:92:
                    8b:ff:55:53:d4:6d:f2:6b:5a:ca:30:7b:00:89:ff:
                    13:8d:46:cd:e6:e7:79:61:da:79:5e:12:d8:cf:fa:
                    07:4a:b0:d3:e2:b7:9d:c2:00:45:cc:b0:1d:00:62:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:68:12:FD:84:2E:1D:3A:C1:2A:4C:0B:DB:6D:18:9C:7F:A5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f50fc562-f7f3-3883-b8bd-8c90956f9054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:37:71:96:d8:57:6e:89:b3:c5:b0:f6:0b:05:00:ec:1c:a6:
         0f:c4:a8:f9:22:e2:96:73:58:a0:f4:eb:32:63:2a:a2:ae:f8:
         e0:93:ee:b1:cc:fa:a4:96:2e:d0:a0:33:c1:92:8b:ee:a5:54:
         bf:71:2c:89:f1:d8:c9:ec:c9:2b:35:5f:fc:95:8f:64:87:ec:
         b6:29:b6:1c:0d:2a:3b:ec:b0:18:65:64:e7:ef:4f:18:6b:03:
         37:49:77:bd:c7:5e:19:1b:95:d5:41:08:58:8f:a0:54:31:a1:
         75:44:f9:23:53:52:c9:f3:98:a8:91:7d:d8:a7:80:2d:f0:a3:
         9a:d8:d8:59:a2:d7:44:b7:01:80:4c:54:77:6d:73:ff:e2:93:
         3a:11:ce:46:6f:b9:a1:15:fc:7f:4e:03:c0:7f:e5:b0:4e:b3:
         76:23:89:dd:c2:9c:e9:72:e3:1e:73:27:26:4a:b3:a6:5c:86:
         62:5a:44:66:bb:fa:5d:d7:44:e2:f6:4a:af:e8:70:df:4c:45:
         c3:18:eb:e4:f2:a4:d4:ed:11:82:9e:f7:de:6d:41:f1:fc:09:
         b2:22:c3:de:95:d7:f2:68:c0:9c:60:e6:52:78:1f:fd:31:8d:
         69:0a:4e:3a:90:c3:b1:dc:57:e9:ea:d7:7b:0f:a1:e3:a2:35:
         8e:f0:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:44 2025 by rpki-client