Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
File:                     ba10d448-b912-33bc-a392-2588e49baea1.roa (raw, json)
Hash identifier:          pAzSSCq5CYLa53EM0tdUUFWMfNSi86lxYh/+2tR/DAY=
Subject key identifier:   9E:38:05:BF:B5:12:AE:7F:E9:E7:20:BF:BE:39:DB:6A:D4:2A:55:6F
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F43285847FF4A4C8427F316215AAB8100
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     14977
IP address blocks:        198.99.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4c:84:27:f3:16:21:5a:ab:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=454e1ed0-f2d9-4d68-b9fb-2c00a4cb85d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8d:5d:7b:b2:8c:46:50:48:8e:12:a0:63:e6:
                    62:f7:77:de:a8:a9:ad:23:31:95:17:b5:31:32:2d:
                    6c:ef:14:98:e7:bb:80:8c:2a:0c:6c:95:24:40:e8:
                    f5:72:ac:de:30:c5:c8:03:a5:96:ee:cf:c2:b8:9a:
                    4a:b3:ce:e1:e6:47:0f:8b:c0:cc:71:94:4d:ae:80:
                    b7:87:b4:58:f7:0f:3d:43:2a:91:9a:31:eb:d3:cd:
                    b9:ae:e8:21:b2:60:78:0d:31:6f:ca:84:17:e6:f3:
                    a9:6d:cb:9b:3a:e3:c1:20:46:4e:29:77:eb:21:60:
                    92:95:46:4f:5f:3f:15:02:94:b9:74:50:d5:44:89:
                    8b:67:f7:28:21:85:41:12:39:59:37:65:4b:22:25:
                    20:d6:b9:b8:6a:e3:1c:53:18:dc:37:4f:37:08:af:
                    b5:91:af:13:90:fb:a9:65:6a:8f:b1:c5:bb:25:f0:
                    3e:96:10:ea:75:c7:96:04:45:ea:e3:23:83:fb:e7:
                    ec:49:40:5a:54:35:63:16:36:85:b0:8f:02:05:20:
                    fa:f1:61:1e:74:35:57:3c:c2:af:dd:16:e2:aa:0a:
                    3e:1d:c5:a8:0e:fe:b0:13:66:6d:29:dd:02:18:5a:
                    53:ad:f0:21:40:90:af:ff:8d:35:f5:9f:a5:e6:8b:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:38:05:BF:B5:12:AE:7F:E9:E7:20:BF:BE:39:DB:6A:D4:2A:55:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:76:d7:df:6f:57:8f:5d:47:37:fa:0d:35:f1:d9:73:dc:90:
         4c:97:0f:17:92:ee:59:cb:e7:86:90:15:ed:24:f3:19:eb:23:
         df:f9:ee:d7:1d:49:44:f4:9b:17:44:df:b1:23:1a:69:ff:37:
         65:6e:e1:38:ca:d7:0d:02:e3:4d:96:ed:da:f9:76:d6:53:a4:
         65:45:f6:e3:25:9d:ee:91:e6:b6:cc:de:d1:78:4a:90:e8:37:
         34:b0:02:22:73:8d:2d:70:7c:e2:cf:89:69:dd:95:53:e3:af:
         02:68:8c:51:bc:96:8d:d6:a3:97:1d:cd:92:48:d1:fe:f3:f9:
         23:b8:fa:67:b9:a4:98:3d:d3:b2:cf:e9:41:04:a6:3a:0d:2b:
         f0:07:56:f1:f6:bd:00:5c:c6:9b:26:d6:38:a4:98:e2:b9:94:
         61:fe:14:e8:f6:8f:16:09:72:d3:a2:8f:99:a4:a6:f9:fd:47:
         1c:f3:54:04:36:cf:6d:41:3c:a8:48:44:a3:e7:21:50:1d:d0:
         97:61:83:7e:84:4d:f3:13:c4:f8:7e:f2:2a:46:52:24:59:db:
         c7:82:15:99:76:e7:68:5a:58:72:f6:a4:5a:ce:97:f8:1f:71:
         6d:ef:f5:50:37:50:f6:fc:e9:aa:ee:35:87:22:a4:d7:76:09:
         bc:a9:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:51:04 2025 by rpki-client