Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
File:                     56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa (raw, json)
Hash identifier:          s1iUKEKhcAJs1se9cH7Z4bA51fyUO/5YACq2Nf10Ir4=
Subject key identifier:   EC:B6:27:53:96:B1:70:78:6E:79:1D:F0:C1:F4:47:7F:BA:D8:A9:3D
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A71559B194350F463D620
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     53508
IP address blocks:        24.244.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:71:55:9b:19:43:50:f4:63:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=8a03c6ed-9db3-4597-8632-555a2af105d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:f2:2e:1d:04:42:b5:ef:58:0a:1c:75:00:
                    a2:dd:17:cc:4c:7f:61:b7:e5:8e:6a:1d:df:82:63:
                    d3:6f:ec:be:40:c8:bc:7e:ce:81:8e:50:27:34:d4:
                    7c:1e:cb:8c:ec:23:87:15:41:4d:5f:2b:1a:25:eb:
                    15:64:a6:c7:5b:08:3f:93:52:48:26:2c:66:51:00:
                    83:c5:aa:54:8b:28:b6:e9:0b:d2:ed:64:f3:15:58:
                    fb:7c:67:d2:d0:2f:39:3e:ae:5c:10:c8:73:06:7b:
                    88:3e:7d:54:35:8e:a2:49:62:9b:62:c7:cc:27:c4:
                    f9:ab:da:10:c2:f4:09:46:94:62:9e:e9:11:a7:78:
                    16:ad:73:50:71:4d:0e:37:90:ef:9b:ad:a1:60:e3:
                    8c:97:11:be:3d:75:5c:ee:f0:17:db:9a:e3:82:01:
                    bb:bc:31:94:69:55:f8:90:a3:1d:33:75:a6:23:cb:
                    9d:33:7c:44:c0:b2:98:7a:03:8c:ce:8b:6e:d7:38:
                    be:1d:2d:b0:a9:c6:cb:38:ea:db:47:8f:f0:f7:c5:
                    26:84:d1:a4:39:3a:51:9e:c8:54:fb:ac:80:81:cc:
                    f3:51:99:b7:62:a0:bd:71:52:2b:63:75:89:f7:a0:
                    2b:60:43:39:0a:2e:00:5f:30:ef:25:1b:10:90:47:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:27:53:96:B1:70:78:6E:79:1D:F0:C1:F4:47:7F:BA:D8:A9:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/56a6fcbc-1e34-3343-bfd5-531dbf8f1c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fc:87:a3:92:13:2c:1b:56:dd:47:60:58:a5:3e:d0:b7:0a:
         24:c8:10:90:30:93:33:52:7e:ca:70:cb:fd:cc:e5:3c:a8:17:
         5f:b7:f3:ce:a3:1e:33:55:5b:0f:f3:6f:21:d4:4f:18:e9:a9:
         e9:60:ef:bb:99:e1:7a:f9:7a:ac:63:15:b0:c9:bd:08:c6:14:
         5c:e8:7f:1d:36:55:92:3f:e6:a3:b6:ce:8b:69:69:75:13:cf:
         14:6a:ff:4f:8f:e7:ae:46:79:02:a4:76:cd:74:25:a1:da:42:
         32:c5:79:e6:9c:15:0a:2e:cb:eb:16:7f:30:dc:11:5e:06:61:
         c5:42:37:fd:10:45:5e:fa:8a:9a:18:dd:57:1f:de:0f:fb:66:
         1e:a8:81:97:d4:3e:42:45:7c:ff:a7:e5:f8:c7:2a:f6:7e:84:
         b9:02:cd:de:c9:3d:aa:70:b1:f0:34:1f:1b:cc:58:0d:4e:e9:
         e1:17:ef:ef:f8:19:5b:d5:f8:e3:af:4b:c4:68:db:77:e3:7c:
         23:49:e2:de:80:d4:88:1a:3b:71:47:38:c8:42:7e:d6:0f:5e:
         36:52:8a:0f:55:7e:2f:46:18:81:f6:01:64:63:f1:30:db:bf:
         6c:69:68:56:e6:38:de:52:73:6c:d7:88:e1:3a:bb:d8:14:00:
         b5:e8:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:24:04 2025 by rpki-client