Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa
File:                     d90de460-0499-33b8-aecd-22d18def726e.roa (raw, json)
Hash identifier:          H62HMaYbsyphnIiPVCeaUiyYfu7FrA9cbmaBcAdgsL4=
Subject key identifier:   AB:21:BC:EC:15:46:AE:B8:C1:AD:BA:17:DE:92:BA:DE:6A:D7:3F:99
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A75FDB3BA5534BD48EB40
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     1651
IP address blocks:        24.244.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:75:fd:b3:ba:55:34:bd:48:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=600b6d5c-f0bc-4b6f-9f9b-d059cc101ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:78:87:ef:d6:72:1a:41:80:22:46:dc:e4:
                    0d:ac:20:d7:b7:2d:3c:6f:73:ff:b3:5a:1b:6f:df:
                    ba:e6:6f:0c:c3:b6:4c:ab:49:a2:e4:cb:c1:9b:19:
                    5f:83:77:83:08:3e:1f:4c:35:5b:ac:9b:61:7f:07:
                    3c:b1:66:c8:de:1a:cd:61:e8:fe:43:38:99:e0:bf:
                    8a:94:a0:d1:0d:65:56:35:76:5b:e2:3e:97:4f:63:
                    ef:2d:93:9b:6e:a8:ff:4f:f8:6c:b6:52:ab:9b:85:
                    af:d0:18:0f:48:c5:b8:73:64:8f:11:fb:9d:e2:24:
                    6b:84:c7:03:a4:ef:3c:9b:71:b8:f4:d3:11:d7:a3:
                    96:e0:e5:82:b6:a1:f4:8a:14:bc:36:91:b9:4e:22:
                    81:c5:c3:f4:e0:cd:e6:d9:c6:c4:55:87:e2:f2:8b:
                    ac:f4:d7:82:60:85:df:bb:59:e0:22:68:7e:f4:f4:
                    27:93:93:76:e9:fe:5b:fa:91:8b:56:0b:36:ab:aa:
                    7e:65:4b:e4:2c:a6:b3:bf:90:ef:7b:16:25:9b:3d:
                    7a:0f:02:d5:6b:ad:50:a3:35:0b:de:f5:90:ab:84:
                    82:9e:97:f6:92:d8:84:d3:a6:17:73:11:dc:00:60:
                    28:3e:26:60:37:d3:3b:2a:1d:b9:79:1d:24:89:d9:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:BC:EC:15:46:AE:B8:C1:AD:BA:17:DE:92:BA:DE:6A:D7:3F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:97:76:2e:30:52:39:3d:87:f6:00:31:6a:40:82:56:a6:
         3f:5a:6c:10:57:fd:0d:93:b4:75:af:62:15:00:e3:df:04:5c:
         3e:1d:9c:aa:09:af:20:8d:89:5f:2f:36:34:68:b2:22:ce:68:
         c0:85:e2:48:76:6e:ea:ed:6a:2f:a4:9a:32:6d:c0:1c:23:52:
         53:04:ae:d1:a8:3c:2a:44:d0:a5:da:fb:41:c1:b2:a2:ba:b0:
         64:eb:2f:93:07:df:eb:ef:4c:2e:ab:a5:ae:0e:20:67:b4:93:
         00:8d:72:06:43:0e:16:45:5c:d1:20:5d:e3:30:60:0e:17:52:
         8b:24:02:a9:99:c2:9a:a1:09:53:53:66:8e:a1:0b:8d:f1:63:
         48:18:d7:1d:c7:aa:2d:0b:38:80:bd:64:05:bc:ae:37:61:37:
         c3:5b:9b:72:5f:d8:8c:56:cd:79:81:c6:c3:58:e7:6b:d7:f9:
         5a:e5:92:b6:09:3c:0e:b4:85:0c:73:cc:a2:af:05:0e:a6:da:
         64:5f:3c:b7:21:3e:d4:c7:4b:2a:00:ac:85:bd:44:56:c5:01:
         ee:54:31:57:bb:15:91:ea:76:c6:b7:8a:14:07:b4:ae:ab:41:
         41:69:57:84:29:9e:10:e6:7b:ea:1d:6e:74:7f:6e:eb:a3:ed:
         e9:91:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:03:51 2025 by rpki-client