Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bc733bb8-c941-3510-b67b-8a6a2995fab6.roa
File:                     bc733bb8-c941-3510-b67b-8a6a2995fab6.roa (raw, json)
Hash identifier:          WCNnjWtCq6jLqixwmimyRpdBuSmn7cruW+LhFdSsCvI=
Subject key identifier:   47:9C:82:29:89:B3:9E:3D:09:EF:E1:1C:02:7A:F5:36:F1:34:84:38
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C3377C765BCE2FE04CC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bc733bb8-c941-3510-b67b-8a6a2995fab6.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     397630
IP address blocks:        199.101.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c3:37:7c:76:5b:ce:2f:e0:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=ed218186-bfaa-44a3-805f-0c50d51a2ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:7a:f0:98:ed:a0:81:55:a2:4f:56:43:6b:
                    d4:5b:12:23:1c:f3:dd:1a:9f:53:60:f3:ae:e0:b9:
                    a4:45:5c:bc:b6:9b:a0:2c:d8:33:c8:61:19:20:79:
                    ad:fa:1a:ea:c0:2c:2e:54:d1:0e:2e:68:89:a3:7f:
                    2d:37:e8:c7:77:4a:ae:40:cf:26:54:53:b8:78:ad:
                    d2:aa:fa:fa:4e:49:6c:9f:43:16:78:82:fc:da:00:
                    66:35:b6:0f:a4:21:f9:d3:e5:99:61:39:23:aa:00:
                    97:89:3d:99:6e:a8:f2:a8:95:ac:55:b0:42:a5:f4:
                    ab:e8:24:70:ab:85:8a:64:93:b5:ae:ad:72:f6:54:
                    72:c9:c4:28:7f:ae:77:b4:48:0d:29:c6:75:b7:df:
                    d0:06:5c:8d:6b:d6:c3:94:cd:41:39:be:fb:22:4e:
                    1b:14:e7:1b:00:cf:4e:87:f4:5d:2d:4d:9b:eb:09:
                    15:11:42:ae:31:27:2d:35:5c:f0:45:9f:3e:a5:fe:
                    42:4f:d4:a2:4b:53:c8:b2:5f:ce:da:4b:d1:08:fa:
                    94:d2:90:ed:7a:7e:2a:4d:e6:24:46:c9:57:75:1b:
                    f3:1b:af:b8:4b:cf:94:08:61:47:68:c1:69:85:34:
                    57:e0:24:51:16:3c:f2:00:b3:40:64:0a:77:ca:ee:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:82:29:89:B3:9E:3D:09:EF:E1:1C:02:7A:F5:36:F1:34:84:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bc733bb8-c941-3510-b67b-8a6a2995fab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:10:df:f8:15:48:49:da:16:84:c3:d9:d3:50:62:a9:d1:
         53:c3:07:92:e9:c4:da:ab:1d:03:15:af:45:41:6e:3e:ae:73:
         7d:39:81:4a:7b:af:9a:19:2e:17:ba:a4:da:5a:f6:2e:58:59:
         f2:68:90:31:8f:1c:a0:0b:bd:dd:28:23:73:cf:e4:fe:9c:d5:
         62:13:cc:36:78:8f:ab:11:20:ba:e6:2f:98:97:bc:46:dd:dd:
         f4:c6:8b:82:59:31:cf:48:1b:5c:5a:c1:8b:3d:d6:df:51:f9:
         c1:e6:9e:2d:49:07:60:cb:63:3e:a0:05:f3:8d:6f:1e:dd:2c:
         b1:53:7c:42:e5:85:95:f4:09:e8:1f:07:79:f4:dd:d4:2a:fc:
         46:1c:5c:a9:11:f0:37:2a:49:f4:12:38:42:46:cb:e3:48:b5:
         00:b5:c2:56:2b:7f:94:37:b4:01:f8:04:62:e7:b3:ca:0f:f7:
         2e:82:3b:47:e8:1b:ca:f1:ba:4c:ec:74:00:60:15:5b:70:99:
         47:9a:10:4d:d4:1d:bd:85:45:a9:62:cf:30:79:7e:4a:3e:53:
         23:a9:03:78:3f:e2:7e:20:d3:5b:a3:c0:be:e7:12:14:4a:3e:
         0b:6b:a4:7f:b7:f4:3d:23:8b:1a:48:88:d4:20:7f:80:22:88:
         20:1f:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:14 2025 by rpki-client